Edit tour

Windows Analysis Report
http://classicshell.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe

Overview

General Information

Sample URL:	http://classicshell.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe
Analysis ID:	1367729
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

HTML page contains suspicious base64 encoded javascript

Creates files inside the system directory

Detected non-DNS traffic on DNS port

Drops PE files

Found iframes

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3696 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3752 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8032 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5708 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4644 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8872 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6500 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "http://classicshell.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://convertwithwave.com/assets/media-192ac301.css	Avira URL Cloud: Label: malware
Source: https://convertwithwave.com/wave-ico/svg/wavebrowser-128.svg	Avira URL Cloud: Label: malware
Source: https://convertwithwave.com/assets/footer-d79f04a6.css	Avira URL Cloud: Label: malware

Phishing

HTML page contains suspicious base64 encoded javascript

Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe

HTTP Parser: Base64 decoded: <script>

Source: https://www.mediafire.com/login/	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeGuMUSAAAAACGl-wDE9NNLuUZygPg7iNvMGtXD&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=normal&cb=1h1hgawztxq1
Source: https://www.mediafire.com/login/	HTTP Parser: Iframe src: /blank.html
Source: https://www.mediafire.com/login/	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/bframe?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&k=6LeGuMUSAAAAACGl-wDE9NNLuUZygPg7iNvMGtXD

Source: https://www.mediafire.com/login/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE

HTTP Parser: Base64 decoded: \n overflow-y: scroll;\n padding: 1.75rem 4.0625rem 6.25rem;\n \n > *:last-child {\n padding-bottom: 1.875rem;\n }\n\n @include md() {\n padding: 2rem;\n }\n}\n","// The addition of this file is an emergency fix. The DocumentPrviewer\n// comp...

Source: https://www.mediafire.com/login/	HTTP Parser: Form action: /dynamic/register_gopro.php
Source: https://www.mediafire.com/login/	HTTP Parser: Form action: /dynamic/client_login/facebook.php
Source: https://www.mediafire.com/login/	HTTP Parser: Form action: /dynamic/client_login/twitter.php

Source: https://www.mediafire.com/login/

HTTP Parser: <input type="password" .../> found

Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?&ld=1	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=158936	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=158936	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&redir=true&gdpr=0&gdpr_consent=&dcc=t	HTTP Parser: No favicon
Source: https://google-bidout-d.openx.net/w/1.0/pd?plm=5	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/ct/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=&_test=ZY2guwAKVuyKYABH	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3643551440069563451&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1813050727983315911	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=45e73c86-a59d-11ee-a23b-06900a68fba8	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:gkU8EdmD1RiT9h5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AADkEU7LG0EAABaftLpXow&gdpr=0	HTTP Parser: No favicon
Source: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE	HTTP Parser: No favicon
Source: https://www.mediafire.com/blank.html	HTTP Parser: No favicon
Source: https://www.mediafire.com/templates/upgrade/upgrade_button.php	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/858128210?random=1703780547888&cv=11&fst=1703780547888&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&gcd=11l1l1l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&hn=www.googleadservices.com&frm=0&tiba=Download%20PcAppStore&auid=1615816129.1703780548&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=invisible&cb=gmcztux0n3li	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm	HTTP Parser: No favicon
Source: https://www.mediafire.com/login/	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeGuMUSAAAAACGl-wDE9NNLuUZygPg7iNvMGtXD&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=normal&cb=1h1hgawztxq1	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&k=6LeGuMUSAAAAACGl-wDE9NNLuUZygPg7iNvMGtXD	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file	HTTP Parser: No favicon
Source: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://bcp.crwdcntrl.net/5/c=4545/rand=308843400/pv=y/int=%23OpR%2341329%23mediafire.com%20%3A%20Total%20Site%20Traffic/int=%23OpR%2341330%23mediafire.com%20%3A%20Site%20Section%20%3A%20file/adv=%23OpR%2342598%23Referral%20Site%20%3A%20/rt=ifr	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20231207/r20190131/zrt_lookup_fy2021.html	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:7302658d-a0df-4300-ad87-7949433877d3&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=870242004881	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU871ee6e2ab5f45e68fcb357155d21285	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=42E5D102-FCC7-4079-AEB2-CAED94F1F642	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUO2689O&prvid=2034%2C2033%2C2030%2C273%2C2028%2C2027%2C2025%2C237%2C117%2C359%2C97%2C55%2C99%2C3012%2C3011%2C3010%2C201%2C3007%2C246%2C4%2C203%2C446%2C9%2C2011%2C3022%2C3020%2C173%2C294%2C251%2C175%2C450%2C2009%2C178%2C255%2C3018%2C3017%2C214%2C336%2C3014%2C337%2C338%2C459%2C77%2C38%2C182%2C261%2C141%2C262%2C461%2C222%2C301%2C225%2C468%2C10000%2C80%2C108%2C229%2C307&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=Wiwdw7U-A5Ouzuec56CNZQ	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=WErPEB1sWKl0G34wzjuMmtRmKQI&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7570669831052645281	HTTP Parser: No favicon

Source: https://www.mediafire.com/login/

HTTP Parser: No <meta name="author".. found

Source: https://www.mediafire.com/login/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.40.70.2:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.40.70.2:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:50444 version: TLS 1.2

Source:

Binary string: d:\Work\TestP4\ClassicShell\ClassicShellSetup\Release\ClassicShellSetup.pdb source: Unconfirmed 154727.crdownload.0.dr

Source: global traffic

TCP traffic: 192.168.2.4:50589 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.70.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.176.64
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.176.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe HTTP/1.1Host: classicshell.mediafire.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe HTTP/1.1Host: www.mediafire.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=
Source: global traffic	HTTP traffic detected: GET /cmp.min.js HTTP/1.1Host: the.gatekeeperconsent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/arrow_dropdown.svg HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /tag?o=5678961798414336&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent_modules.json HTTP/1.1Host: privacy.gatekeeperconsent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mediafire.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mediafire.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googFooterTranslate HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /libs/amplitude-8.5.0-min.gz.js HTTP/1.1Host: cdn.amplitude.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mediafire.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/check_circle_green.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/download/social/fb_16x16.png HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/icons_sprite.svg HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/header/mf_logo_full_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/filetype/file-app-v3.png HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /Scripts/infinity.js.aspx?guid=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0 HTTP/1.1Host: cdn.otnolatrnup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/footer/social/footerIcons.png HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/download/additional_content/world.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/download/additional_content/continent-na.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mediafire.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent_modules.json HTTP/1.1Host: privacy.gatekeeperconsent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/arrow_dropdown.svg HTTP/1.1Host: www.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/download/additional_content/flag.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/download/social/fb_16x16.png HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/check_circle_green.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.32011031994343964 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/icons_sprite.svg HTTP/1.1Host: www.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/header/mf_logo_full_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/footer/social/footerIcons.png HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/filetype/file-app-v3.png HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/download/additional_content/world.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.32011031994343964 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/download/additional_content/flag.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/download/additional_content/continent-na.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
Source: global traffic	HTTP traffic detected: GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/74bd6362/main.js HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false
Source: global traffic	HTTP traffic detected: GET /detroitchicago/boise.js?gcb=195-8&cb=2 HTTP/1.1Host: go.ezodn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /parsonsmaize/abilene.js?gcb=195-8&cb=32 HTTP/1.1Host: go.ezodn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mediafire.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/prebid8.10.0.js HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false
Source: global traffic	HTTP traffic detected: GET /porpoiseant/et.js?gcb=195-8&cb=2 HTTP/1.1Host: go.ezodn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv?tid=OSkNpM4O&w=5115845767331840&o=5678961798414336&cv=2.1.26&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&sid=5Qkk0KZ78Q&pm=false&upapi=true HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mediafire.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /saa.go HTTP/1.1Host: g.ezoic.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Tag.engine?time=-60&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=26604&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=60&fpe=1&bw=1280&bh=907&res=1280x1024&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone HTTP/1.1Host: otnolatrnup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /parsonsmaize/mulvane.js?gcb=195-8&cb=6 HTTP/1.1Host: go.ezodn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /detroitchicago/wichita.js?gcb=195-8&cb=12 HTTP/1.1Host: go.ezodn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /detroitchicago/raleigh.js?gcb=195-8&cb=7 HTTP/1.1Host: go.ezodn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /detroitchicago/vista.js?gcb=195-8&cb=5 HTTP/1.1Host: go.ezodn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /detroitchicago/tampa.js?gcb=195-8&cb=6 HTTP/1.1Host: go.ezodn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: api.btloader.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /parsonsmaize/olathe.js?gcb=195-8&cb=23 HTTP/1.1Host: go.ezodn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /parsonsmaize/chanute.js?a=a&cb=7&dcb=195-8&shcb=34 HTTP/1.1Host: go.ezodn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tardisrocinante/vitals.js?gcb=195-8&cb=3 HTTP/1.1Host: go.ezodn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-829541-1&cid=1411026819.1703780523&jid=2073574725&_u=YEBAAUAAAAAAACAAI~&z=761256898 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /c/4545/cc_af.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/c=3722/pe=y/callback=g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback?33408082 HTTP/1.1Host: ad.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=3722/tp=ADSP/tpid=e52c68bd2ec041bc8bb423ef3441546f HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=3722/tp=ADSP/tpid=e52c68bd2ec041bc8bb423ef3441546f HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /lt/c/16589/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gXrQTQUAABvIwvU"; _cc_aud="ABR4XmNgYGBI7V2wHkhBAQAbxgJC"
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/83cb23b5ed942cae HTTP/1.1Host: www.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1703780523.1.0.1703780523.60.0.0; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524
Source: global traffic	HTTP traffic detected: GET /api/1.0/esp.js HTTP/1.1Host: cdn.id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /encrypted-signals/encrypted-tag-g.js HTTP/1.1Host: invstatic101.creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.ids.js HTTP/1.1Host: static.criteo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /esp.js HTTP/1.1Host: oa.openxcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uid2SecureSignal.js HTTP/1.1Host: cdn.prod.uidapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: 76e5953c04163876c34343aa73551e05.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync? HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUO2689O HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-829541-1&cid=1411026819.1703780523&jid=2073574725&_u=YEBAAUAAAAAAACAAI~&z=761256898 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /sync?&ld=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /esp?url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&rid=esp HTTP/1.1Host: oajs.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mediafire.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=3722/tp=ADSP/tpid=e52c68bd2ec041bc8bb423ef3441546f HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gXrQTQUAABvIwvU"; _cc_aud="ABR4XmNgYGBI7V2wHkhBAQAbxgJC"
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=96230842&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6/map HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gXrQTQUAABvIwvU"; _cc_aud="ABR4XmNgYGBI7V2wHkhBAQAbxgJC"
Source: global traffic	HTTP traffic detected: GET /api/esp/increment?counter=no-config HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://www.mediafire.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /esp?url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&rid=esp&cc=1 HTTP/1.1Host: oajs.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mediafire.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIoQEQkfjuicsxCgoIkQIQkfjuicsxCgoItAIQkfjuicsxCgoI5gEQkfjuicsxCgoIhwIQkfjuicsxCgoItwIQkfjuicsxCgkIOhCR-O6JyzEKCgiMAhCR-O6JyzEKCQhfEJH47onLMQoJCB8Qkfjuicsx; tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=${GPP_STRING_28}&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D3335%26xuid%3D%24UID%26dongle%3D4d58%26gdpr=0%26gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=triplelift_native&gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=triplelift&user_id=2505721175073375676369&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /sync/triplelift/2505721175073375676369?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3371&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/42E5D102-FCC7-4079-AEB2-CAED94F1F642?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%2042E5D102-FCC7-4079-AEB2-CAED94F1F642&rnd=RND HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?plm=5 HTTP/1.1Host: google-bidout-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531
Source: global traffic	HTTP traffic detected: GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac\|t
Source: global traffic	HTTP traffic detected: GET /pagead/drt/ui HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/drt/ui HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AADkEU7LG0EAABaftLpXow; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XetNvCDs+12R5fE&MD=h7gNdP2A HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642 HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEERw7M-QJkibFE6HzPvu_4I&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-70F2tLRE2oQISqEcJ6nwgdDkSCU1vR1wcB.wZmm8rw--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&redir=true&gdpr=0&gdpr_consent=&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Feb2.3lift.com%252Fxuid%253Fmid%253D3335%2526xuid%253D%2524UID%2526dongle%253D4d58%2526gdpr%3D0%2526gdpr_consent%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!@wnf-Te9(SNOfY2^u31Es8]fG5VUvFTvUrHN]0/G4dCvGmB0$oq!V+GdD1J%q)3RO.<Q:; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTJaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=; uuid2=3643551440069563451
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=4961d632-7b16-cc16-3c0e-e949faf68d03 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync/openx/8570cc0b-f710-e5a5-cdd7-7d2b6d928baa?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=158936&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEItecgeyae_P2TGuxmFr4WA&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:53579F87497840889870425CB87FCFFF HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=4357227210337848260&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=bb8b2075-04f6-4e39-a178-835d11d8840f&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAEYBSgCMgsI-LeVkPzywzwQBTgB
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=11b7aa4f-67bc-77ec-fc00-6bde92c546e3&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAEYBSgCMgsI-LeVkPzywzwQBTgB
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAEYBSgCMgsI-LeVkPzywzwQBTgB
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=triplelift&user_id=2505721175073375676369&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; c=1703780532; tuuid_lu=1703780532
Source: global traffic	HTTP traffic detected: GET /redir?partneruserid=AADkEU7LG0EAABaftLpXow&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=33002690&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFGAUgASgCMgsI-LeVkPzywzwQBTgB
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&bee_sync_partners=pp%2Csyn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=3121188971179636291&gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AADkEU7LG0EAABaftLpXow; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-fNV4yyJE2uXLaY_PXOsvYoxyc0h2cn4-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=3c35df97-b65a-42b9-abca-61d06d8e5fc4&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3335&xuid=3643551440069563451&dongle=4d58&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESENsJZHGl8ALruYxKoIjbX0E&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!@wnf-Te9(SNOfY2^u31Es8]fG5VUvFTvUrHN]0/G4dCvGmB0$oq!V+GdD1J%q)3RO.<Q:; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTJaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=; uuid2=3643551440069563451
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=11b7aa4f-67bc-77ec-fc00-6bde92c546e3&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://google-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /esp?url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&rid=esp&cc=1 HTTP/1.1Host: oajs.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7976&xuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /bidSwitch.gif?bidswitch_ssp_id=triplelift&bsw_custom_parameter=d541ebb4-9aad-4c87-b8e0-e665e8aef738 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/42E5D102-FCC7-4079-AEB2-CAED94F1F642?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=${GPP_STRING_28}&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b HTTP/1.1Host: dis.criteo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?ev=AADkEU7LG0EAABaftLpXow&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 HTTP/1.1Host: bh.contextweb.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEERw7M-QJkibFE6HzPvu_4I&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-70F2tLRE2oQISqEcJ6nwgdDkSCU1vR1wcB.wZmm8rw--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=triplelift_native&gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!@wnf-Te9(SNOfY2^u31Es8]fG5VUvFTvUrHN]0/G4dCvGmB0$oq!V+GdD1J%q)3RO.<Q:; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTJaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=; uuid2=3643551440069563451
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEItecgeyae_P2TGuxmFr4WA&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=bb8b2075-04f6-4e39-a178-835d11d8840f&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
Source: global traffic	HTTP traffic detected: GET /sync/openx/8570cc0b-f710-e5a5-cdd7-7d2b6d928baa?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:53579F87497840889870425CB87FCFFF HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=4357227210337848260&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3643551440069563451&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=4961d632-7b16-cc16-3c0e-e949faf68d03 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&userid=3121188971179636291&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AADkEU7LG0EAABaftLpXow&pid=558502&do=add&gdpr=0 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AADkEU7LG0EAABaftLpXow; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy; univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780537483015
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; PugT=1703762853
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=425&user_group=1&expires=365&user_id=e71ba19d-7bbb-496d-b970-b82e9389cf8b&ssp=triplelift&bsw_param=d541ebb4-9aad-4c87-b8e0-e665e8aef738 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; c=1703780532; tuuid_lu=1703780535
Source: global traffic	HTTP traffic detected: GET /services?uid=AADkEU7LG0EAABaftLpXow&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1Host: pmp.mxptint.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.adgrx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /insync?vxii_pid=10067&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?pid=187&uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.bfmio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.adgrx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADGRX_UID=45e73c86-a59d-11ee-a23b-06900a68fba8
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; PugT=1703780537
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1813050727983315911 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; PugT=1703780537
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=gkU8EdmD1RiT9h5
Source: global traffic	HTTP traffic detected: GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D56DE60CA3D45485394325E0AA6AE4072%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D3121188971179636291%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=45e73c86-a59d-11ee-a23b-06900a68fba8 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; PugT=1703780537
Source: global traffic	HTTP traffic detected: GET /usermatchredir?cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D56DE60CA3D45485394325E0AA6AE4072%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D3121188971179636291%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D&s=191740&C=1 HTTP/1.1Host: ssum-sec.casalemedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZY2gvMDEXz3I22USnudDoQAA; CMPS=2030; CMPRO=2030
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:gkU8EdmD1RiT9h5&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; PugT=1703780539; KRTBCOOKIE_18=22947-1813050727983315911
Source: global traffic	HTTP traffic detected: GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&vxii_pid=12&vxii_pid1=10067&vxii_rcid=615d9f76-6c39-4dc6-b81a-085a08461685 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjYxNWQ5Zjc2LTZjMzktNGRjNi1iODFhLTA4NWEwODQ2MTY4NSIsImwiOjE3MDM3ODA1Mzk2MzMsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R33646_10E688CAC_3EE3278F&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; PugT=1703780539; KRTBCOOKIE_18=22947-1813050727983315911
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=158936&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; PugT=1703780539; KRTBCOOKIE_18=22947-1813050727983315911
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2409&xuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738&dongle=d3d3&gdpr=&gdpr_consent=&gdpr_pd= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=3c35df97-b65a-42b9-abca-61d06d8e5fc4&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3335&xuid=3643551440069563451&dongle=4d58&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2C%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=1!8704
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESENsJZHGl8ALruYxKoIjbX0E&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy; univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780537483015
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=11b7aa4f-67bc-77ec-fc00-6bde92c546e3&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy; univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780537483015
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=540245193&val=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy; univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780537483015
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-fNV4yyJE2uXLaY_PXOsvYoxyc0h2cn4-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; PugT=1703780539; KRTBCOOKIE_18=22947-1813050727983315911
Source: global traffic	HTTP traffic detected: GET /services?srv=cs&nuid=56DE60CA3D45485394325E0AA6AE4072&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZY2gvMDEXz3I22USnudDoQAA%262030 HTTP/1.1Host: sync.technoratimedia.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tads_uidp_73=AADkEU7LG0EAABaftLpXow; tads_uid=56DE60CA3D45485394325E0AA6AE4072; tads_uid_cd=20231228162219+0000; tads_zora=2
Source: global traffic	HTTP traffic detected: GET /api/v1/dsync/Martin?exid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=5b81a9fb-79bc-089f-5625-a79b2bc11e27
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2409&xuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738&dongle=d3d3&gdpr=&gdpr_consent=&gdpr_pd= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /sn.ashx?ak=1 HTTP/1.1Host: pmp.mxptint.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mxpim=R33646_10E688CAC_3EE3278F.1.0000000000000000658DA0BB
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJcUrmU_I7JgNthe1VAAAAAAA&expiration=1703866941&nuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; SPugT=1703780541; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; PugT=1703775492
Source: global traffic	HTTP traffic detected: GET /cookie-sync?gdpr=0&userid=3121188971179636291&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AADkEU7LG0EAABaftLpXow; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&vxii_pid=12&vxii_pid1=10067&vxii_rcid=615d9f76-6c39-4dc6-b81a-085a08461685 HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6IjYxNWQ5Zjc2LTZjMzktNGRjNi1iODFhLTA4NWEwODQ2MTY4NSIsImwiOjE3MDM3ODA1NDE1MTMsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJcUrmU_I7JgNthe1VAAAAAAA&expiration=1703866941&nuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; PugT=1703780540
Source: global traffic	HTTP traffic detected: GET /sn.ashx?ak=1 HTTP/1.1Host: pmp.mxptint.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mxpim=R33646_10E688CAC_3EE3278F.1.0000000000000000658DA0BB
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AADkEU7LG0EAABaftLpXow&gdpr=0 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; PugT=1703780540
Source: global traffic	HTTP traffic detected: GET /?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE HTTP/1.1Host: pcapp.storeConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAttribution-Reporting-Eligible: navigation-source=event-source;triggersec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _ga_K68XP6D85D=GS1.1.1703780523.1.0.1703780531.52.0.0; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=15
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_strategy_details=%7B%22intro%22%3A%22ML%22%2C%22intro_model%22%3A%22AlpAll5%22%2C%22intro_prediction_type%22%3A%22max%22%2C%22strategy_name%22%3A%22ML_AlpAll5_max%22%2C%22intro_state%22%3A%22init%22%7D
Source: global traffic	HTTP traffic detected: GET /css/mfv3_121918.php?ver=ssl HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /css/mfv4_121918.php?ver=ssl&date=2023-12-28 HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE HTTP/1.1Host: pcapp.storeConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; ml_strategy_details={"intro":"ML","intro_model":"AlpAll5","intro_prediction_type":"max","strategy_name":"ML_AlpAll5_max","intro_state":"success"}
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_strategy_details=%7B%22intro%22%3A%22ML%22%2C%22intro_model%22%3A%22AlpAll5%22%2C%22intro_prediction_type%22%3A%22max%22%2C%22strategy_name%22%3A%22ML_AlpAll5_max%22%2C%22intro_state%22%3A%22init%22%7D; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
Source: global traffic	HTTP traffic detected: GET /images/icons/myfiles/default.png HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/header/mf_logo_u1_full_color_reversed.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/header/mf_logo_u1_full_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /blank.html HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /js/master_121918.js HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/gizmodo.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/lifehacker.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /templates/upgrade/upgrade_button.php HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/cnet.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /images/icons/myfiles/default.png HTTP/1.1Host: www.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /fa/img/laptop_white_display_black.png HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/header/mf_logo_u1_full_color_reversed.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/techcrunch.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/header/mf_logo_u1_full_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/engadget.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1232118.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lp/global/img/start_menu_w10_dark_theme.png HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
Source: global traffic	HTTP traffic detected: GET /blank.html HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/icons_sprite.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/lifehacker.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/gizmodo.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/cnet.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/techcrunch.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/engadget.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/facebook.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/twitter.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/hero_tile.png HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/upload.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/share.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/share_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /lp/global/img/start_menu_w10_white_theme.png HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
Source: global traffic	HTTP traffic detected: GET /fa/img/laptop_white_display_black.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
Source: global traffic	HTTP traffic detected: GET /modules.618aa075c4d9b6424e07.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/collaborate.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/icons_sprite.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/collaborate_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/twitter.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/store.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /lp/global/img/start_menu_w10_dark_theme.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/store_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/access.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=invisible&cb=gmcztux0n3li HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/facebook.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/hero_tile.png HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/upload.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/share.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /src/main.js HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
Source: global traffic	HTTP traffic detected: GET /lp/global/img/start_menu_w11_dark_theme.png HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/access_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/heart.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/mf_logo_flame_reversed.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/share_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/collaborate_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_10gb.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/collaborate.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/store.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_downloads.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_share.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/store_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/access.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_multi_upload.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_organize.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_1_time_links.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_apps.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /lp/global/img/start_menu_w10_white_theme.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pro_driver.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /lp/global/img/row_partners_logo_gray.png HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /lp/global/img/icon_download_cloud_white.svg HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/access_color.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/heart.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_downloads.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/mf_logo_flame_reversed.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_10gb.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_share.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /lp/global/img/start_menu_w11_dark_theme.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_1tb.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_no_ads.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_web_uploads.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_direct_download.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_bulk_download.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_1_time.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_multi_upload.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /fa/img/gear-list-item.png HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_organize.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_1_time_links.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/tf_apps.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pro_driver.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /fa/img/gray_header_logo.png HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/newHome/sections/texas.png HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /lp/global/img/icon_download_cloud_white.svg HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_1tb.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/social_icons_sprite.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=invisible&cb=gmcztux0n3liAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /js/bg/SHUkEiphQuZqXyLzDNA1LcOjIY5P93oSbI0OKMKltYY.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=invisible&cb=gmcztux0n3liAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /src/download_file.js?nocache=1680678097636 HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /lp/global/img/row_partners_logo_gray.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_no_ads.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_web_uploads.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_direct_download.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_bulk_download.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/home_unicorn/pf_1_time.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/newHome/sections/texas.png HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /fa/img/timer-blue-icon.png HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /fa/img/gear-list-item.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /fa/img/ease-to-use-blue-icon.png HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /fa/img/gray_header_logo.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/social_icons_sprite.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /fa/img/shield-blue-icon.png HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /js/device.js HTTP/1.1Host: device.maxmind.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /fa/img/timer-blue-icon.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /fa/img/ease-to-use-blue-icon.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1703780547888&cv=11&fst=1703779200000&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&frm=0&tiba=Download%20PcAppStore&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_xhLRCrumQpNfS5D_dMxOFBVivwZJyORVs6t0pqNhQWF_wVKj&random=3400480480&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pixelgif.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1703780548033&cv=11&fst=1703779200000&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&frm=0&tiba=Download%20PcAppStore&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_AWSr3n-BZ1stuKC5eD_j0YmbC56nVnRpr8sQgacVp_xN7eYX&random=738566534&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /fa/img/shield-blue-icon.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1703780547888&cv=11&fst=1703779200000&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&frm=0&tiba=Download%20PcAppStore&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_xhLRCrumQpNfS5D_dMxOFBVivwZJyORVs6t0pqNhQWF_wVKj&random=3400480480&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1703780548033&cv=11&fst=1703779200000&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&frm=0&tiba=Download%20PcAppStore&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_AWSr3n-BZ1stuKC5eD_j0YmbC56nVnRpr8sQgacVp_xN7eYX&random=738566534&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /lp/appstore/img/favicon.ico HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09APYnBZXPBnEhLgloLxIQvlvVnbYF6g_esAiJVVgMX2e5VMArwNUh90ArkuCPOkbpAwZtN2A360aHN1cdPBB9yzE; NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /lp/appstore/img/favicon.ico HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
Source: global traffic	HTTP traffic detected: GET /ant_squire HTTP/1.1Host: d-ipv6.mmapiws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /upgrade HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
Source: global traffic	HTTP traffic detected: GET /upgrade/ HTTP/1.1Host: www.mediafire.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
Source: global traffic	HTTP traffic detected: GET /images/basic-plan.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
Source: global traffic	HTTP traffic detected: GET /blank.html HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/upgrade/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
Source: global traffic	HTTP traffic detected: GET /templates/upgrade/upgrade_button.php HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/upgrade/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/icons_sprite.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
Source: global traffic	HTTP traffic detected: GET /images/right-icon_2x.png HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
Source: global traffic	HTTP traffic detected: GET /images/cross-icon_2x.png HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /images/basic-plan.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/social_icons_sprite.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1
Source: global traffic	HTTP traffic detected: GET /images/right-icon_2x.png HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_light/icons_sprite.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==
Source: global traffic	HTTP traffic detected: GET /blank.html HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/upgrade/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
Source: global traffic	HTTP traffic detected: GET /images/cross-icon_2x.png HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/social_icons_sprite.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blank.html HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/upgrade/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
Source: global traffic	HTTP traffic detected: GET /blank.html HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/upgrade/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/arrow_dropdown.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/arrow_dropdown.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
Source: global traffic	HTTP traffic detected: GET /ant_squire HTTP/1.1Host: d-ipv6.mmapiws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/ HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/gopro_121918.js HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blank.html HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/login/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _g
Source: global traffic	HTTP traffic detected: GET /en_US/sdk.js?hash=d62197507f1d9af64ac8f40ae2838b60 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mediafire.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/twitter.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/loading_indeterminate.svg HTTP/1.1Host: static.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LeGuMUSAAAAACGl-wDE9NNLuUZygPg7iNvMGtXD&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=normal&cb=1h1hgawztxq1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09APYnBZXPBnEhLgloLxIQvlvVnbYF6g_esAiJVVgMX2e5VMArwNUh90ArkuCPOkbpAwZtN2A360aHN1cdPBB9yzE; NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/loading_indeterminate.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
Source: global traffic	HTTP traffic detected: GET /images/icons/svg_dark/twitter.svg HTTP/1.1Host: static.mediafire.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&k=6LeGuMUSAAAAACGl-wDE9NNLuUZygPg7iNvMGtXD HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09APYnBZXPBnEhLgloLxIQvlvVnbYF6g_esAiJVVgMX2e5VMArwNUh90ArkuCPOkbpAwZtN2A360aHN1cdPBB9yzE; NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g36FastPopSessionRequestNumber=1; ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.170378
Source: global traffic	HTTP traffic detected: GET /tag?o=5678961798414336&upapi=true HTTP/1.1Host: btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"6beabecd088580e4d3efbe461e2527e2"If-Modified-Since: Thu, 28 Dec 2023 15:50:06 GMT
Source: global traffic	HTTP traffic detected: GET /saa.go HTTP/1.1Host: g.ezoic.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googFooterTranslate HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.9266796438054827 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3"If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
Source: global traffic	HTTP traffic detected: GET /mw/state?bt_env=prod HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mediafire.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Tag.engine?time=-60&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=36846&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=60&fpe=1&bw=1280&bh=907&res=1280x1024&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe%2Ffile&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone HTTP/1.1Host: otnolatrnup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IKSR={}; INF_DFL8=false; IUID=e52c68bd-2ec0-41bc-8bb4-23ef3441546f; ISSH=704416; VMI=; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP={"Profile":{"Audiences":{"Audience":[],"ThirdPartyAudience":[]}},"CreatedDate":"2023-12-28T16:22:03.9451729Z"}; ILPLU=#12/28/2023 4:22:03 PM; ILEALC=#12/28/2023 4:22:03 PM; ILMPF=#True; IPMPLU=#1/1/0001 12:00:00 AM; IPMUID=#; BSWUID=#; IBL=#[]; ISH=#{"101":[{"SId":"704416","D":"23/12/28T8:22:3"}]}; ISH_Q=#[101]
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=1&e=0.9266796438054827 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.gif?ch=2 HTTP/1.1Host: ad-delivery.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3"If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
Source: global traffic	HTTP traffic detected: GET /pv?tid=bB0JkhQhg&w=5115845767331840&o=5678961798414336&cv=2.1.26&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe%2Ffile&sid=ANttMDS4s&pm=false&upapi=true HTTP/1.1Host: api.btloader.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mediafire.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUO2689O HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=725c6f98-0fda-4d14-ab50-616dfac69ed5
Source: global traffic	HTTP traffic detected: GET /header/auction?lib=prebid&v=8.10.0&referrer=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe%2Ffile&tmax=1000 HTTP/1.1Host: tlx.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=1f0cb06f-593b-4482-b8bf-00f88638d577
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=c2d4f836-40c0-419a-adc0-05b8cfc86cff
Source: global traffic	HTTP traffic detected: GET /5/c=4545/rand=308843400/pv=y/int=%23OpR%2341329%23mediafire.com%20%3A%20Total%20Site%20Traffic/int=%23OpR%2341330%23mediafire.com%20%3A%20Site%20Section%20%3A%20file/adv=%23OpR%2342598%23Referral%20Site%20%3A%20/rt=ifr HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gXrQTQUAABvIwvU"; _cc_aud="ABR4XmNgYGBI7V2wHkhBAQAbxgJC"
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQlBdQ-GF1eFG84nrDs-z5-IwCUzXJ9US3BB-KVKSFbGq-gQpx-3CrRzPBMOnIl350gfOdV1KmNrlmT0vdx-XLr8eN-yA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=c2d4f836-40c0-419a-adc0-05b8cfc86cff
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09APYnBZXPBnEhLgloLxIQvlvVnbYF6g_esAiJVVgMX2e5VMArwNUh90ArkuCPOkbpAwZtN2A360aHN1cdPBB9yzE; NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=LOTAME&partner_device_id=5e221b1ba2e4bf116c56aecdaf8716ee&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=1!8704
Source: global traffic	HTTP traffic detected: GET /connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQskELhipCbrHN4jgY9MxSwY0WJsa__hwPi2jfrlKmAsyqyR22BRKqqJaU61NC5kpzMDzU-7o0IOmO8_kXqGsfX1FADeQ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP HTTP/1.1Host: dmp.truoptik.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRgBIAEoAjILCLbChLX88sM8EAU4AVoFdGFwYWRgAg..
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%3D%24UID%2Fgdpr%3D0%2Frand=531851505 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3643551440069563451; anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!A#FZ.CK$wNl!cB/Crbn=CgO/cxv2ai-YVycyiWulxoV)gm40?D0BDGG^3rPQEVk`!26hU20$^Q; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=
Source: global traffic	HTTP traffic detected: GET /sync?nid=lotame&gdpr=0 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=LOTME&gdpr=0 HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc; IDSYNC=18z8~2fv4
Source: global traffic	HTTP traffic detected: GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1Host: btlr.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
Source: global traffic	HTTP traffic detected: GET /sync? HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIoQEQkfjuicsxCgoIkQIQkfjuicsxCgoItAIQkfjuicsxCgoI5gEQkfjuicsxCgoIhwIQkfjuicsxCgoItwIQkfjuicsxCgkIOhCR-O6JyzEKCgiMAhCR-O6JyzEKCQhfEJH47onLMQoJCB8Qkfjuicsx; tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3D526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%252Chttps%25253A%25252F%25252Fsync.crwdcntrl.net%25252Fmap%25252Fc%25253D10158%25252Ftp%25253DTPAD%25252Ftpid%25253D526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%252C HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3643551440069563451; anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!A#FZ.CK$wNl!cB/Crbn=CgO/cxv2ai-YVycyiWulxoV)gm40?D0BDGG^3rPQEVk`!26hU20$^Q; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUO2689O&prvid=2034%2C2033%2C2030%2C273%2C2028%2C2027%2C2025%2C237%2C117%2C359%2C97%2C55%2C99%2C3012%2C3011%2C3010%2C201%2C3007%2C246%2C4%2C203%2C446%2C9%2C2011%2C3022%2C3020%2C173%2C294%2C251%2C175%2C450%2C2009%2C178%2C255%2C3018%2C3017%2C214%2C336%2C3014%2C337%2C338%2C459%2C77%2C38%2C182%2C261%2C141%2C262%2C461%2C222%2C301%2C225%2C468%2C10000%2C80%2C108%2C229%2C307&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ps/?ri=0013300001kQj2HAAS&ru=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DkzFyzzqXEqukMDumpVLB6Eq3%26source_user_id%3D33XUSERID33X HTTP/1.1Host: ssc-cms.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58736/cms?partner_id=LOTME&gdpr=0 HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc; IDSYNC=18z8~2fv4
Source: global traffic	HTTP traffic detected: GET /map/c=10832/tp=TRUP/tpid=f8f1b6bf15ba02282f17d3498a0e1f55 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /getuid?https://match.sharethrough.com/sync/v1?source_id=0e8893f90b606c9c5d33f1be&gdpr=0&gdpr_consent=&source_user_id=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3643551440069563451; anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!A#FZ.CK$wNl!cB/Crbn=CgO/cxv2ai-YVycyiWulxoV)gm40?D0BDGG^3rPQEVk`!26hU20$^Q; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=
Source: global traffic	HTTP traffic detected: GET /map/c=10620/tp=TRAD/tpid=3c35df97-b65a-42b9-abca-61d06d8e5fc4/gdpr=0/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /map/c=281/tp=ANXS/tpid=3643551440069563451/gdpr=0/rand=531851505 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRgBIAEoAjILCLbChLX88sM8EAU4AVoFdGFwYWRgAg..
Source: global traffic	HTTP traffic detected: GET /redirectuser?r=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D7rkJAhPCWXbw9Lq5dZxc6TvN%26source_user_id%3D%24UID&partner=sharethrough HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=6569&tp=STKA&tpid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=69452871&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; PugT=1703780543
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XetNvCDs+12R5fE&MD=h7gNdP2A HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sync?nid=13&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc
Source: global traffic	HTTP traffic detected: GET /cookie-sync/trl?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bito=AADkEU7LG0EAABaftLpXow; bitoIsSecure=ok
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=83&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/757c0557066e95cfd4c7?gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=3643551440069563451&pt=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2Chttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D10158%252Ftp%253DTPAD%252Ftpid%253D526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=1!8704
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3643551440069563451; anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!A#FZ.CK$wNl!cB/Crbn=CgO/cxv2ai-YVycyiWulxoV)gm40?D0BDGG^3rPQEVk`!26hU20$^Q; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=
Source: global traffic	HTTP traffic detected: GET /qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-.VeQ_.lE2pxGNWHOUYiZwwbLGk0IQ_iw1So-~A&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; c=1703780532; tuuid_lu=1703780535
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=kzFyzzqXEqukMDumpVLB6Eq3&source_user_id=212398610672017 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cu=bb8b2075-04f6-4e39-a178-835d11d8840f\|1703780533557
Source: global traffic	HTTP traffic detected: GET /map/c=10620/tp=TRAD/tpid=3c35df97-b65a-42b9-abca-61d06d8e5fc4/gdpr=0/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /sync/v1?gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
Source: global traffic	HTTP traffic detected: GET /qmap?c=6569&tp=STKA&tpid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=0e8893f90b606c9c5d33f1be&gdpr=0&gdpr_consent=&source_user_id=3643551440069563451 HTTP/1.1Host: match.sharethrough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=zeta&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=14701/tp=MTAI/tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642/gdpr=0/gdpr_consent= HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3203&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=1!8704-2!8704
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3702&xuid=bb8b2075-04f6-4e39-a178-835d11d8840f&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /tum?umid=6 HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /712188.gif?partner_uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=e71ba19d-7bbb-496d-b970-b82e9389cf8b; ss=GOE7Odo1Mk01wQYQp7kx1pGh0Zq23PhqCib60VYtgHWEmYXT%2BatsrVw%2FUB5j4rtieZA2H8tWvBc55uIeFX2IYA%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1Host: sync.mathtag.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=10158/tp=TPAD/tpid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1Host: synchroscript.deliveryengine.adswizz.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7255&xuid=AADkEU7LG0EAABaftLpXow&dongle=bzwx&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_user_id=d541ebb4-9aad-4c87-b8e0-e665e8aef738&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=10832/tp=TRUP/tpid=f8f1b6bf15ba02282f17d3498a0e1f55 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /map/c=281/tp=ANXS/tpid=3643551440069563451/gdpr=0/rand=531851505 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /x/757c0557066e95cfd4c7?gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub8730968190912 HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-.VeQ_.lE2pxGNWHOUYiZwwbLGk0IQ_iw1So-~A&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3643551440069563451; anj=dTM7k!M40]D>6NRF']wIg2ImIq3Wu%!A#FHgx7AC.gGp2Oi3jrNT781jE3WmfS(?mjE3pqkaK!$lx#Iu?MNaH2:hP8hYoV[7I75@U'dQ!!C_+cgYh; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn0sInRyaXBsZWxpZnQiOnsidWlkIjoiMjUwNTcyMTE3NTA3MzM3NTY3NjM2OSIsImV4cGlyZXMiOiIyMDI0LTAzLTI3VDE2OjIyOjU0WiJ9fSwiYmlydGhkYXkiOiIyMDIzLTEyLTI4VDE2OjIyOjEyWiJ9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=870242004881 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; PugT=1703780543; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:7302658d-a0df-4300-ad87-7949433877d3&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; PugT=1703780543; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CPy7KxIwCiwIARCFpQoaJDQyRTVEMTAyLUZDQzctNDA3OS1BRUIyLUNBRUQ5NEYxRjY0MhAAGg0I3sG2rAYSBQjoBxAAQgBKAA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=5yNrS8IeODvXM9HVz4e0sW/GiP88QrBYc0CZivMVzRE=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /usersync2/rmpssp?sub=zeta&zcc=1&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB&cb=1703780574782 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%2C%22zdxidn%22%3A%222069.92%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB%22%7D
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1Host: s.tribalfusion.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=adnoeUuyTYTBErvc0sqGmZdOCed2tuYhrXN5RZbL5D
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=e71ba19d-7bbb-496d-b970-b82e9389cf8b&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; PugT=1703780543; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=kzFyzzqXEqukMDumpVLB6Eq3&source_user_id=212398610672017 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
Source: global traffic	HTTP traffic detected: GET /sync/v1?gdpr=0&gdpr_consent= HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc
Source: global traffic	HTTP traffic detected: GET /sync/v1?source_id=0e8893f90b606c9c5d33f1be&gdpr=0&gdpr_consent=&source_user_id=3643551440069563451 HTTP/1.1Host: match.sharethrough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_user_id=d541ebb4-9aad-4c87-b8e0-e665e8aef738&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=993f14d4-7b99-4748-8f99-8687578ad473; c=1703780575; tuuid_lu=1703780575
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU871ee6e2ab5f45e68fcb357155d21285 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; PugT=1703780543; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35
Source: global traffic	HTTP traffic detected: GET /pbmtc.gif?puid=42E5D102-FCC7-4079-AEB2-CAED94F1F642 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=e71ba19d-7bbb-496d-b970-b82e9389cf8b; ss=GOE7Odo1Mk01wQYQp7kx1pGh0Zq23PhqCib60VYtgHWEmYXT%2BatsrVw%2FUB5j4rtieZA2H8tWvBc55uIeFX2IYA%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=250&expires=14&user_id=993f14d4-7b99-4748-8f99-8687578ad473&ssp=pubmatic&gdpr=0 HTTP/1.1Host: x.bidswitch.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; c=1703780532; tuuid_lu=1703780535
Source: global traffic	HTTP traffic detected: GET /api/sync?pid=5324&it=1&iv=a5fa778a26e958f6f6090c388c5ec22e5ec1ef42b62e0e41b91ef41f7f9235ab791426b5417dce21&_=2 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=6732&dongle=38F&xuid=AAAKUMId6Is5iAM4d-CYAAAAAAA&expiration=1703866975&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=158936&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68f
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=d541ebb4-9aad-4c87-b8e0-e665e8aef738&gdpr=0&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bb
Source: global traffic	HTTP traffic detected: GET /usersync/turn/4357227210337848260?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%2C%22zdxidn%22%3A%222069.92%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB%22%7D
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=1889789607327243659 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=3203&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=1!8704-2!8704
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3702&xuid=bb8b2075-04f6-4e39-a178-835d11d8840f&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /map/c=14701/tp=MTAI/tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642/gdpr=0/gdpr_consent= HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7255&xuid=AADkEU7LG0EAABaftLpXow&dongle=bzwx&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /map/c=10158/tp=TPAD/tpid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
Source: global traffic	HTTP traffic detected: GET /v3uprzavds1gTsgvz0Vs63vR_SAR7d1rThtPthVaxjTB2buoHsy7alQfEutMTX3-frd-kbs7SXZ5meBxQYVQGEn31qvpZ5bBPnQcN5tTntdcRaTc8JmobBiTyt_Y12Qn08wU7xchIXp_Xv9ZPA6L96dWj6WXjScPLo8FnCuh9vS-/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe HTTP/1.1Host: download2433.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga=GA1.1.1411026819.1703780523; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7
Source: global traffic	HTTP traffic detected: GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1Host: synchroscript.deliveryengine.adswizz.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=6732&dongle=38F&xuid=AAAKUMId6Is5iAM4d-CYAAAAAAA&expiration=1703866975&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=2505721175073375676369
Source: global traffic	HTTP traffic detected: GET /about/https://www.mediafire.com/about/jobs.php HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH
Source: global traffic	HTTP traffic detected: GET /csync/RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005?redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3DRX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=1889789607327243659 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; SPugT=1703780577; KRTBCOOKIE_466=16530-d541ebb4-9aad-4c87-b8e0-e665e8aef738; KRTBCOOKIE_391=22924-1889789607327243659&KRTB&23263
Source: global traffic	HTTP traffic detected: GET /blank.html HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/about/https://www.mediafire.com/about/jobs.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyp
Source: global traffic	HTTP traffic detected: GET /templates/upgrade/upgrade_button.php HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/about/https://www.mediafire.com/about/jobs.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJG
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /blank.html HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/about/https://www.mediafire.com/about/jobs.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyp
Source: global traffic	HTTP traffic detected: GET /match?bidder=37&buyeruid=RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005&r=Cid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zeta-ssp-user-id=ua-c3022ff3-a52d-3262-99be-6a51a23046c2
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10086349&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; chkChromeAb67Sec=3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2a
Source: global traffic	HTTP traffic detected: GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=&j=window.advBidxc.mnetRtusId HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blank.html HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/about/https://www.mediafire.com/about/jobs.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22
Source: global traffic	HTTP traffic detected: GET /blank.html HTTP/1.1Host: www.mediafire.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mediafire.com/about/https://www.mediafire.com/about/jobs.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3467821796496295000V10%26type%3Dopx%26refUrl%3D%26vid%3D37805797753467821796496295000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy; univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780541654279
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&ssp_user_id=3467821796496295000V10 HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=993f14d4-7b99-4748-8f99-8687578ad473; c=1703780575; tuuid_lu=1703780575; ssh=!bidswitch,1703780575
Source: global traffic	HTTP traffic detected: GET /usersync/131?redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3467821796496295000V10%26type%3Ddi%26refUrl%3D%26vid%3D37805797753467821796496295000V10%26axid_e%3D%26ovsid%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_3c93ec9c5d044eca9dba8; CDIPARTNERS=%7B%221%22%3A%2220231228%22%7D
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; c=1703780532; tuuid_lu=1703780535
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRIbCgxzaGFyZXRocm91Z2gSCwjCuJfp6PLDPBAFGAEgASgCMgsIpq6alv_ywzwQBTgBWgxzaGFyZXRocm91Z2hgAg..
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=562894&ev=1&gdpr=&gdpr_consent=${GDPR_CONSENT}&us_privacy=&rurl=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D29%26buyeruid%3D%25%25VGUID%25%25%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgC HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mediafire.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=kViit6MQmQ8v; pb_rtb_ev=3-1osz\|7dN.0.AADkEU7LG0EAABaftLpXow; INGRESSCOOKIE=cb46d1714d9491de
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3467821796496295000V10%26type%3Ddxu%26refUrl%3D%26vid%3D37805797753467821796496295000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=gkU8EdmD1RiT9h5; matchpubmatic=5
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3467821796496295000V10&type=rkt&refUrl=&vid=37805797753467821796496295000V10&axid_e=&ovsid=1813050727983315911 HTTP/1.1Host: contextual.media.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3467821796496295000V10

Source: chromecache_302.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr	String found in binary or memory: __d("LiveChatPluginConstants",["$InternalEnum"],(function(a,b,c,d,e,f){"use strict";a="LiveChatEvent/";c="mqtt";d=b("$InternalEnum")({CONNECTED:"Connected",CONNECTING:"Connecting",DISCONNECTED:"Disconnected"});e=250;b=a+"close_timestamps";var g=a+"reset_badging",h=a+"state",i=a+"switch_account",j=a+"typing",k=a+"unread_count",l=a+"update_message_list",m="platform/plugins/connect/guest",n=a+"guest_upgrade_success",o=a+"guest_upgrade_success_incognito",p=a+"navigate_to_welcome_page",q="platform/plugins/connect/access_token";a=a+"start_re_engagement";var r=124,s=187,t=24,u=424,v=288,w=313,x=219,y=40,z=36,A=24,B=18,C=708,D=540,E=244,F=202,G=509,H=430,I=6,J=0,K=1,L=-1,M="messaging_plugin",N=8634e4,O="#8A8D91",P="entrypoint:customer_chat_plugin",Q=0,R=1,S=2,T=3,U="new_message_update",V="initial_fetch",W=5e3,X="https://www.facebook.com/business/help/1661027437357021";f.MQTT=c;f.MQTTGatewayConnectionState=d;f.LOGIN_CHECK_INTERVAL=e;f.CLOSE_TIMESTAMPS=b;f.RESET_BADGING=g;f.STATE_UPDATE=h;f.SWITCH_ACCOUNT=i;f.TYPING_UPDATE=j;f.UNREAD_COUNT_UPDATE=k;f.UPDATE_MESSAGE_LIST=l;f.GUEST_MODE_CONNECT=m;f.GUEST_UPGRADE_SUCCESS=n;f.GUEST_UPGRADE_SUCCESS_INCOGNITO=o;f.NAVIGATE_TO_WELCOME_PAGE=p;f.ACCESS_TOKEN_LOGIN=q;f.START_RE_ENGAGEMENT=a;f.PROMPT_FALLBACK_HEIGHT=r;f.PROMPT_REDESIGN_FALLBACK_HEIGHT=s;f.PROMPT_CONTAINER_PADDING_HEIGHT=t;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT=u;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT=v;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=w;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=x;f.WELCOME_PAGE_ATTRIBUTION_OFFEST_HEIGHT=y;f.WELCOME_PAGE_ATTRIBUTION_OFFSET_HEIGHT_WITH_COMPACT=z;f.MAIN_IFRAME_PADDING_HEIGHT=A;f.MAIN_IFRAME_PADDING_HEIGHT_WITH_COMPACT=B;f.THREAD_PAGE_HEIGHT=C;f.THREAD_PAGE_HEIGHT_COMPACT=D;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT=E;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT_COMPACT=F;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT=G;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT_COMPACT=H;f.GREETING_TEXT_BOTTOM_SPACING_OFFEST=I;f.LOGGED_IN_CHAT_MODE=J;f.GUEST_CHAT_MODE=K;f.INVALID_CHAT_MODE=L;f.MESSENGING_PLUGIN=M;f.GUEST_SESSION_STORAGE_VALIDITY_MS=N;f.GUEST_SEND_BUTTON_COLOR_EMPTY_INPUT=O;f.LIVE_CHAT_ENTRYPOINT_ATTRIBUTION_TAG=P;f.ITP_CONSISTENCY_UNKNOWN_LOGGED_OUT=Q;f.ITP_CONSISTENCY_CONSISTENT_LOGGED_IN=R;f.ITP_CONSISTENCY_INCONSISTENT=S;f.ITP_CONSISTENCY_CONSISTENT_NO_ITP=T;f.NEW_MESSAGE_UPDATE=U;f.INITIAL_FETCH=V;f.PLUGIN_FADE_DELAY=W;f.HELP_DEX_LINK=X}),66); equals www.facebook.com (Facebook)
Source: chromecache_463.2.dr, chromecache_278.2.dr, chromecache_479.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=uA(a,c,e);O(121);if("https://www.facebook.com/tr/"===k["gtm.elementUrl"])return O(122),!0;if(d&&f){for(var m=db(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},xA=function(){var a=[],b=function(c){return Ja(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_278.2.dr, chromecache_479.2.dr	String found in binary or memory: f\|\|g.length\|\|k.length))return;var n={gh:d,eh:e,fh:f,Ih:g,Jh:k,Be:m,ob:b},p=z.YT,q=function(){BC(n)};if(p)return p.ready&&p.ready(q),b;var r=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){r&&r();q()};H(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(EC(w,"iframe_api")\|\|EC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!vC&&CC(x[A],n.Be))return Kc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_634.2.dr	String found in binary or memory: g})};return{store:function(g,k){var m=f(g);m?m.button=k:e.push({form:g,button:k})},get:function(g){var k=f(g);return k?k.button:null}}}function d(e,f,g,k,m){var n=Fy("fsl",g?"nv.mwt":"mwt",0),p;p=g?Fy("fsl","nv.ids",[]):Fy("fsl","ids",[]);if(!p.length)return!0;var q=By(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;O(121);if("https://www.facebook.com/tr/"===r)return O(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(k&&n){if(!jz(q,Ox(f,n),n))return!1}else jz(q, equals www.facebook.com (Facebook)
Source: chromecache_311.2.dr, chromecache_463.2.dr, chromecache_280.2.dr, chromecache_634.2.dr, chromecache_649.2.dr, chromecache_661.2.dr, chromecache_278.2.dr, chromecache_255.2.dr, chromecache_489.2.dr, chromecache_479.2.dr, chromecache_650.2.dr	String found in binary or memory: return b}sC.F="internal.enableAutoEventOnTimer";var yc=ea(["data-gtm-yt-inspected-"]),tC=["www.youtube.com","www.youtube-nocookie.com"],uC,vC=!1; equals www.youtube.com (Youtube)
Source: chromecache_463.2.dr, chromecache_278.2.dr, chromecache_479.2.dr	String found in binary or memory: var JB=function(a,b,c,d,e){var f=Fy("fsl",c?"nv.mwt":"mwt",0),g;g=c?Fy("fsl","nv.ids",[]):Fy("fsl","ids",[]);if(!g.length)return!0;var k=By(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if("https://www.facebook.com/tr/"===m)return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Nx(k,Ox(b, equals www.facebook.com (Facebook)
Source: chromecache_302.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (e) {var i = new Image();i.crossOrigin = 'anonymous';i.dataset.testid = 'fbSDKErrorReport';i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+e.name+'","line":"'+(e.lineNumber\|\|e.line)+'","script":"'+(e.fileName\|\|e.sourceURL\|\|e.script\|\|"sdk.js")+'","stack":"'+(e.stackTrace\|\|e.stack)+'","revision":"1010603338","namespace":"FB","message":"'+e.message+'"}}');document.body.appendChild(i);} equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Thu, 28 Dec 2023 16:22:12 GMTContent-Type: text/htmlContent-Length: 581Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 28 Dec 2023 16:22:26 GMTContent-Type: text/htmlContent-Length: 4211Connection: closeVary: Accept-EncodingVary: Accept-EncodingETag: "6344345d-1073"Strict-Transport-Security: max-age=31536000; includeSubDomainsStrict-Transport-Security: max-age=31536000; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 28 Dec 2023 16:22:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-EncodingStrict-Transport-Security: max-age=31536000; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 0date: Thu, 28 Dec 2023 16:22:49 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 0date: Thu, 28 Dec 2023 16:22:50 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 0date: Thu, 28 Dec 2023 16:22:51 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 0date: Thu, 28 Dec 2023 16:22:52 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 0date: Thu, 28 Dec 2023 16:22:52 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 28 Dec 2023 16:22:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 83cb252849ef4796-DFWCF-Cache-Status: DYNAMICAccess-Control-Allow-Origin: Cache-Control: no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0Expires: 0Strict-Transport-Security: max-age=0Vary: Accept-EncodingContent-Security-Policy: frame-ancestors .mediafire.comPragma: no-cacheX-Frame-Options: SAMEORIGINServer: cloudflare

Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: chromecache_473.2.dr	String found in binary or memory: http://dev.apollodata.com/core/fragments.html#unique-names
Source: chromecache_635.2.dr	String found in binary or memory: http://github.com/garycourt/murmurhash-js
Source: chromecache_619.2.dr, chromecache_317.2.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: chromecache_635.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://s.symcb.com/universal-root.crl0
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://s.symcd.com06
Source: chromecache_635.2.dr	String found in binary or memory: http://sites.google.com/site/murmurhash/
Source: chromecache_554.2.dr, chromecache_662.2.dr	String found in binary or memory: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
Source: chromecache_408.2.dr	String found in binary or memory: http://stackoverflow.com/questions/17907445/how-to-detect-ie11
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com0;
Source: chromecache_636.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000000d792
Source: chromecache_636.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000000d799
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735ee06
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735ee08
Source: chromecache_275.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735ee0c
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735ee0d
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735ee0e
Source: chromecache_635.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_725.2.dr, chromecache_610.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_554.2.dr, chromecache_662.2.dr	String found in binary or memory: http://www.inkscape.org/namespaces/inkscape
Source: chromecache_635.2.dr	String found in binary or memory: http://www.lalit.org/lab/javascript-css-font-detect/
Source: chromecache_469.2.dr	String found in binary or memory: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcod
Source: chromecache_469.2.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_413.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=
Source: chromecache_426.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_311.2.dr, chromecache_463.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_311.2.dr, chromecache_463.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_550.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_456.2.dr	String found in binary or memory: https://app.termly.io/embed-policy.min.js
Source: chromecache_456.2.dr	String found in binary or memory: https://app.termly.io/embed.min.js
Source: chromecache_448.2.dr	String found in binary or memory: https://app.termly.io/notify/0c0d5751-34c2-45aa-9465-c0a6eb9b7849
Source: chromecache_448.2.dr	String found in binary or memory: https://app.termly.io/notify/1909c103-b6c3-4ccf-abd7-d90080ab0e47
Source: chromecache_448.2.dr	String found in binary or memory: https://app.termly.io/notify/1baeaa14-550e-445e-ab63-b0d1cef80fa1
Source: chromecache_448.2.dr	String found in binary or memory: https://app.termly.io/notify/3a1ed28f-a057-4071-9997-e7d50e9951b4
Source: chromecache_448.2.dr	String found in binary or memory: https://app.termly.io/notify/7733ee4f-edcb-4cec-8493-47178339d6c1
Source: chromecache_448.2.dr	String found in binary or memory: https://app.termly.io/notify/ce27845e-b877-4c94-a6fd-d59fe95d861c
Source: chromecache_469.2.dr	String found in binary or memory: https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642/gdpr=0/gdpr_
Source: chromecache_469.2.dr	String found in binary or memory: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode
Source: chromecache_537.2.dr	String found in binary or memory: https://bpi.rtactivate.com/tag/?id=20909&user_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_co
Source: chromecache_469.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P
Source: chromecache_311.2.dr, chromecache_463.2.dr, chromecache_392.2.dr, chromecache_280.2.dr, chromecache_634.2.dr, chromecache_649.2.dr, chromecache_661.2.dr, chromecache_278.2.dr, chromecache_255.2.dr, chromecache_489.2.dr, chromecache_479.2.dr, chromecache_650.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_363.2.dr	String found in binary or memory: https://cdn.integ.uidapi.com/
Source: chromecache_408.2.dr	String found in binary or memory: https://cdn.lr-ingest.io/LogRocket.min.js
Source: chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_469.2.dr	String found in binary or memory: https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel
Source: chromecache_433.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_560.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=NWUyMjFiMWJhMmU0YmYxMTZjNTZhZWNkY
Source: chromecache_560.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=NWUyMjFiMWJhMmU0YmYxMTZjNTZhZWNkYW
Source: chromecache_643.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_643.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=M2RkODc5ODUtYWVjYi0yOTQ4LWU5ZTAtMzE2Nz
Source: chromecache_413.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=QuXRAvzHQHmussrtlPH2Qg%3D%3
Source: chromecache_413.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_413.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=NDJFNUQxMDItRkNDNy00MDc5LUFFQjItQ0F
Source: chromecache_560.2.dr	String found in binary or memory: https://cms.analytics.yahoo.com/cms?partner_id=LOTME&gdpr=0
Source: chromecache_433.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_473.2.dr	String found in binary or memory: https://cms.wavebrowser.co/graphql
Source: chromecache_433.2.dr	String found in binary or memory: https://crb.kargo.com/api/v1/dsync/Martin?exid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_cons
Source: chromecache_537.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJn
Source: chromecache_456.2.dr	String found in binary or memory: https://customer.appesteem.com/certified?vendor=WAVES
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: https://d.symcb.com/cps0%
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: https://d.symcb.com/rpa0
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: https://d.symcb.com/rpa0.
Source: chromecache_408.2.dr	String found in binary or memory: https://developers.google.com/chrome/mobile/docs/user-agent?hl=ja
Source: chromecache_519.2.dr	String found in binary or memory: https://developers.google.com/open-source/licenses/bsd
Source: chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_469.2.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https:
Source: chromecache_560.2.dr	String found in binary or memory: https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fm
Source: chromecache_413.2.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&dongle=u6nf&gdpr=0&gdp
Source: chromecache_705.2.dr	String found in binary or memory: https://esp.rtbhouse.com/encrypt
Source: chromecache_408.2.dr	String found in binary or memory: https://ev.pcapp.store/p.gif?
Source: chromecache_389.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_389.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_671.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_725.2.dr, chromecache_408.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_408.2.dr, chromecache_449.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Bebas
Source: chromecache_389.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Inter:wght
Source: chromecache_449.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_408.2.dr, chromecache_449.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_261.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wdhyzbi.woff2)
Source: chromecache_261.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2)
Source: chromecache_671.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_725.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Source: chromecache_261.2.dr, chromecache_251.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2)
Source: chromecache_261.2.dr, chromecache_251.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2)
Source: chromecache_261.2.dr, chromecache_251.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1pL7SUc.woff2)
Source: chromecache_261.2.dr, chromecache_251.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa25L7SUc.woff2)
Source: chromecache_261.2.dr, chromecache_251.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2JL7SUc.woff2)
Source: chromecache_261.2.dr, chromecache_251.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2ZL7SUc.woff2)
Source: chromecache_261.2.dr, chromecache_251.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2pL7SUc.woff2)
Source: chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_409.2.dr, chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_409.2.dr, chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_409.2.dr, chromecache_622.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_261.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_261.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_261.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_261.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_261.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_261.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_261.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_261.2.dr, chromecache_368.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_473.2.dr	String found in binary or memory: https://github.com/LiosK/uuidv7/blob/e501462ea3d23241de13192ceae726956f9b3b7d/src/index.ts
Source: chromecache_679.2.dr	String found in binary or memory: https://github.com/faisalman/ua-parser-js
Source: chromecache_462.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_277.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_277.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.30.2/LICENSE
Source: chromecache_537.2.dr	String found in binary or memory: https://gocm.c.appier.net/pubmatic
Source: chromecache_463.2.dr	String found in binary or memory: https://google.com/ccm/form-data/
Source: chromecache_463.2.dr	String found in binary or memory: https://google.com/pagead/form-data/
Source: chromecache_426.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_311.2.dr, chromecache_463.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/
Source: chromecache_426.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_463.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/
Source: chromecache_537.2.dr	String found in binary or memory: https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642
Source: chromecache_433.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_556.2.dr	String found in binary or memory: https://id5.io/
Source: chromecache_469.2.dr	String found in binary or memory: https://idsync.rlcdn.com/712188.gif?partner_uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_con
Source: chromecache_537.2.dr	String found in binary or memory: https://io.narrative.io/?companyId=673&id=pubmatic_id:42E5D102-FCC7-4079-AEB2-CAED94F1F642
Source: chromecache_302.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/messenger/id454638411
Source: chromecache_560.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0
Source: chromecache_413.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_643.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=11b7aa4f-67bc-77ec-fc00-6bde92c546e3&gdpr=0
Source: chromecache_433.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=
Source: chromecache_413.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_508.2.dr, chromecache_332.2.dr, chromecache_519.2.dr, chromecache_503.2.dr, chromecache_688.2.dr	String found in binary or memory: https://mths.be/cssescape
Source: chromecache_433.2.dr	String found in binary or memory: https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0
Source: chromecache_636.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=rgb4vnm&ht=tk&f=1499.1506.47864.47865.47868.47869&a=135778284&app=
Source: chromecache_275.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=vpi5heu&ht=tk&f=47864.47865.47867.47868.47869&a=45407236&app=typek
Source: chromecache_311.2.dr, chromecache_393.2.dr, chromecache_463.2.dr, chromecache_592.2.dr, chromecache_426.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_311.2.dr, chromecache_463.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/
Source: chromecache_313.2.dr, chromecache_713.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_426.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_713.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_313.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_311.2.dr, chromecache_463.2.dr, chromecache_392.2.dr, chromecache_280.2.dr, chromecache_634.2.dr, chromecache_649.2.dr, chromecache_661.2.dr, chromecache_278.2.dr, chromecache_426.2.dr, chromecache_255.2.dr, chromecache_489.2.dr, chromecache_479.2.dr, chromecache_650.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_592.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=urind
Source: chromecache_592.2.dr, chromecache_426.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_426.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_426.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_294.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_426.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_616.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_713.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_313.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_560.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntr
Source: chromecache_433.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_469.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=42E5D102-FCC7-4079-AEB2-
Source: chromecache_413.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=42E5D102-FCC7-4079-AEB2-
Source: chromecache_560.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=5e221b1ba2e4bf116c56ae
Source: chromecache_501.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_302.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.facebook.orca
Source: chromecache_433.2.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=
Source: chromecache_433.2.dr	String found in binary or memory: https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=
Source: chromecache_643.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/8570cc0b-f710-e5a5-cdd7-7d2b6d928baa?gdpr=0
Source: chromecache_413.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/42E5D102-FCC7-4079-AEB2-CAED94F1F642?gdpr=0&gdpr_consent=
Source: chromecache_308.2.dr	String found in binary or memory: https://privacy.gatekeeperconsent.com/consent_modules.json
Source: chromecache_433.2.dr	String found in binary or memory: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=42E5D102-FCC7-
Source: chromecache_537.2.dr	String found in binary or memory: https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN
Source: chromecache_501.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_537.2.dr	String found in binary or memory: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=
Source: chromecache_413.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=42E5D102-FCC7-4079-AEB
Source: chromecache_643.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=4961d632-7b16-cc16-3c0
Source: chromecache_560.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%
Source: chromecache_294.2.dr, chromecache_462.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_634.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_280.2.dr, chromecache_649.2.dr, chromecache_661.2.dr, chromecache_278.2.dr, chromecache_489.2.dr, chromecache_479.2.dr, chromecache_650.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_280.2.dr, chromecache_649.2.dr, chromecache_661.2.dr, chromecache_278.2.dr, chromecache_489.2.dr, chromecache_479.2.dr, chromecache_650.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_550.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_501.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_433.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_537.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_433.2.dr	String found in binary or memory: https://sync.bfmio.com/sync?pid=187&uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=
Source: chromecache_537.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_
Source: chromecache_413.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_469.2.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmati
Source: chromecache_537.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_560.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0
Source: chromecache_469.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&part
Source: chromecache_469.2.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub8730968190912
Source: chromecache_550.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_560.2.dr	String found in binary or memory: https://tags.bluekai.com/site/5907?limit=0&id=0f8e274f16016abd8e83d2b12cd8f240
Source: chromecache_311.2.dr, chromecache_463.2.dr, chromecache_392.2.dr, chromecache_280.2.dr, chromecache_634.2.dr, chromecache_649.2.dr, chromecache_661.2.dr, chromecache_278.2.dr, chromecache_255.2.dr, chromecache_489.2.dr, chromecache_479.2.dr, chromecache_650.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_433.2.dr	String found in binary or memory: https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_
Source: chromecache_313.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_313.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_725.2.dr	String found in binary or memory: https://translate.google.com
Source: chromecache_725.2.dr	String found in binary or memory: https://translate.googleapis.com/element/log?format=json&hasfast=true
Source: chromecache_537.2.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_413.2.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_469.2.dr	String found in binary or memory: https://ums.acuityplatform.com/tum?umid=6
Source: chromecache_413.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&re
Source: chromecache_433.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=540245193&val=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_co
Source: chromecache_413.2.dr	String found in binary or memory: https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4B
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/0075f2/00000000000000007735ee0e/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/0075f2/00000000000000007735ee0e/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/0075f2/00000000000000007735ee0e/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr	String found in binary or memory: https://use.typekit.net/af/60da91/00000000000000000000d799/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr	String found in binary or memory: https://use.typekit.net/af/60da91/00000000000000000000d799/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr	String found in binary or memory: https://use.typekit.net/af/60da91/00000000000000000000d799/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/7540d0/00000000000000007735ee06/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/7540d0/00000000000000007735ee06/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/7540d0/00000000000000007735ee06/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr	String found in binary or memory: https://use.typekit.net/af/9f7632/00000000000000000000d792/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr	String found in binary or memory: https://use.typekit.net/af/9f7632/00000000000000000000d792/27/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr	String found in binary or memory: https://use.typekit.net/af/9f7632/00000000000000000000d792/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/a21a99/00000000000000007735ee0c/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/a21a99/00000000000000007735ee0c/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/a21a99/00000000000000007735ee0c/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/ce96c9/00000000000000007735ee08/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/ce96c9/00000000000000007735ee08/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/ce96c9/00000000000000007735ee08/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/f26873/00000000000000007735ee0d/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/f26873/00000000000000007735ee0d/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_636.2.dr, chromecache_275.2.dr	String found in binary or memory: https://use.typekit.net/af/f26873/00000000000000007735ee0d/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_473.2.dr	String found in binary or memory: https://wave-cms-uploads.s3.amazonaws.com/
Source: chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: Unconfirmed 154727.crdownload.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: chromecache_634.2.dr, chromecache_255.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_550.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_550.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_550.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_313.2.dr, chromecache_463.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_311.2.dr, chromecache_463.2.dr	String found in binary or memory: https://www.google.com/
Source: chromecache_550.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_426.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_725.2.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: chromecache_725.2.dr, chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_289.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/11219589166/?random
Source: chromecache_266.2.dr, chromecache_722.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/858128210/?random
Source: chromecache_405.2.dr, chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_313.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_725.2.dr	String found in binary or memory: https://www.google.com/support/translate
Source: chromecache_311.2.dr, chromecache_463.2.dr	String found in binary or memory: https://www.googleadservices.com/
Source: chromecache_311.2.dr, chromecache_463.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/
Source: chromecache_311.2.dr, chromecache_463.2.dr, chromecache_392.2.dr, chromecache_280.2.dr, chromecache_634.2.dr, chromecache_649.2.dr, chromecache_661.2.dr, chromecache_278.2.dr, chromecache_255.2.dr, chromecache_489.2.dr, chromecache_479.2.dr, chromecache_650.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_550.2.dr, chromecache_408.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_700.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-11219589166
Source: chromecache_408.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-858128210
Source: chromecache_408.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-VFQWFX3X1C
Source: chromecache_700.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-ZDEB536PB9
Source: chromecache_598.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-829541-1
Source: chromecache_365.2.dr, chromecache_501.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__.
Source: chromecache_725.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: chromecache_725.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: chromecache_725.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Source: chromecache_405.2.dr, chromecache_373.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js
Source: chromecache_302.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_364.2.dr, chromecache_657.2.dr	String found in binary or memory: https://www.mediafire.com/
Source: chromecache_370.2.dr	String found in binary or memory: https://www.mediafire.com/policies/privacy_policy.php
Source: chromecache_280.2.dr, chromecache_649.2.dr, chromecache_661.2.dr, chromecache_278.2.dr, chromecache_489.2.dr, chromecache_479.2.dr, chromecache_650.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_705.2.dr	String found in binary or memory: https://www.rtbhouse.com/
Source: chromecache_278.2.dr, chromecache_479.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_469.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY
Source: chromecache_473.2.dr	String found in binary or memory: https://yarnpkg.com/en/docs/selective-version-resolutions
Source: chromecache_466.2.dr	String found in binary or memory: https://zenorocha.github.io/clipboard.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50500
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 50634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50518
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50529
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50520
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50521
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 50556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50571
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50570
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50572
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50575
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50580
Source: unknown	Network traffic detected: HTTP traffic on port 50712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50584
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50587
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50590
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 50609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50598
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 50654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50539
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50533
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50547
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50542
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50544
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50557
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50553
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50555
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50554
Source: unknown	Network traffic detected: HTTP traffic on port 50630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50567
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50560
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50562
Source: unknown	Network traffic detected: HTTP traffic on port 50593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50561
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50565
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 50617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083

Source: unknown	HTTPS traffic detected: 23.40.70.2:443 -> 192.168.2.4:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.40.70.2:443 -> 192.168.2.4:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:50444 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3696_792130834

Jump to behavior

Source: classification engine

Classification label: mal52.phis.win@75/476@454/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\12469f84-c6d9-4f88-af99-fb3132944e81.tmp

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://classicshell.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5708 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4644 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8872 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5708 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4644 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8872 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:

Binary string: d:\Work\TestP4\ClassicShell\ClassicShellSetup\Release\ClassicShellSetup.pdb source: Unconfirmed 154727.crdownload.0.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\Unconfirmed 154727.crdownload

Jump to dropped file

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://classicshell.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe	0%	Avira URL Cloud	safe
http://classicshell.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe	0%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\Downloads\Unconfirmed 154727.crdownload	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
otnolatrnup.com	0%	Virustotal	Browse
api.wavebrowserbase.com	2%	Virustotal	Browse
api.wavebrowser.co	1%	Virustotal	Browse
id5-sync.com	0%	Virustotal	Browse
match.prod.bidr.io	0%	Virustotal	Browse
rtb.adgrx.com	0%	Virustotal	Browse
api.mywavehome.net	2%	Virustotal	Browse
static.cloudflareinsights.com	0%	Virustotal	Browse
thrtle.com	0%	Virustotal	Browse
api.btloader.com	0%	Virustotal	Browse
rtb.adentifi.com	0%	Virustotal	Browse
m.deepintent.com	0%	Virustotal	Browse
oa.openxcdn.net	0%	Virustotal	Browse
ad.mrtnsvr.com	0%	Virustotal	Browse
cdn.id5-sync.com	0%	Virustotal	Browse
privacy.gatekeeperconsent.com	0%	Virustotal	Browse
d-ipv6.mmapiws.com	0%	Virustotal	Browse
ad-delivery.net	0%	Virustotal	Browse
jsdelivr.map.fastly.net	0%	Virustotal	Browse
us01.z.antigena.com	0%	Virustotal	Browse
gob-njr3.pubmnet.com	0%	Virustotal	Browse
dmp.truoptik.com	0%	Virustotal	Browse
pug-vac.pubmnet.com	0%	Virustotal	Browse
spug33000-fpb.pubmnet.com	1%	Virustotal	Browse
sync.ipredictive.com	0%	Virustotal	Browse
ds-pr-bh.ybp.gysm.yahoodns.net	0%	Virustotal	Browse
go.ezodn.com	0%	Virustotal	Browse
convertwithwave.com	4%	Virustotal	Browse
envoy-hl.envoy-csync1.core-b8mf.ov1o.com	0%	Virustotal	Browse
dorpat.geo.iponweb.net	0%	Virustotal	Browse
spug-vac.pubmnet.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://g.ezoic.net/detroitchicago/imp.gif?ez_orig=1	0%	Avira URL Cloud	safe
https://cms.wavebrowser.co/graphql	0%	Avira URL Cloud	safe
https://api.wavebrowserbase.com/i?evnt=lp-load	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=3121188971179636291&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4	0%	Avira URL Cloud	safe
https://cdn.lr-ingest.io/LogRocket.min.js	0%	Avira URL Cloud	safe
https://cdn.lr-ingest.io/LogRocket.min.js	0%	Virustotal		Browse
https://api.wavebrowserbase.com/i?evnt=lp-load	3%	Virustotal		Browse
https://convertwithwave.com/assets/media-192ac301.css	100%	Avira URL Cloud	malware
https://ad-delivery.net/px.gif?ch=2	0%	Avira URL Cloud	safe
https://app.posthog.com/e/?compression=gzip-js&ip=1&_=1703780590853&ver=1.77.2	0%	Avira URL Cloud	safe
https://api.mywavehome.net/cookie/set?tid=va6g28ar	0%	Avira URL Cloud	safe
https://g.ezoic.net/detroitchicago/imp.gif?ez_orig=1	0%	Virustotal		Browse
https://pcapp.store/pixelgif.php	0%	Avira URL Cloud	safe
https://cms.wavebrowser.co/graphql	0%	Virustotal		Browse
https://oa.openxcdn.net/esp.js	0%	Avira URL Cloud	safe
https://cdn.integ.uidapi.com/	0%	Avira URL Cloud	safe
https://convertwithwave.com/wave-ico/svg/wavebrowser-128.svg	100%	Avira URL Cloud	malware
https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode	0%	Avira URL Cloud	safe
https://x.bidswitch.net/ul_cb/sync?ssp=triplelift&user_id=2505721175073375676369&gdpr=0&gdpr_consent=${GDPR_CONSENT}	0%	Avira URL Cloud	safe
https://sync.technoratimedia.com/services?srv=cs&nuid=56DE60CA3D45485394325E0AA6AE4072&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZY2gvMDEXz3I22USnudDoQAA%262030	0%	Avira URL Cloud	safe
https://sync.technoratimedia.com/services?uid=AADkEU7LG0EAABaftLpXow&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0	0%	Avira URL Cloud	safe
https://ad-delivery.net/px.gif?ch=2	0%	Virustotal		Browse
https://g.ezoic.net/saa.go	0%	Avira URL Cloud	safe
https://id5-sync.com/api/esp/increment?counter=no-config	0%	Avira URL Cloud	safe
https://btloader.com/tag?o=5678961798414336&upapi=true	0%	Avira URL Cloud	safe
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://pcapp.store/fa/img/laptop_white_display_black.png	0%	Avira URL Cloud	safe
https://g.ezoic.net/detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJmNmEzYjNjYi0zNzVhLTRjNjgtNTkyNy1mYmE3ZTg1ZDI5ZWEiLCJkb21haW5faWQiOiI0ODQ0NzAiLCJ0X2Vwb2NoIjoxNzAzNzgwNTY4LCJkYXRhIjpbeyJuYW1lIjoiY29ubmVjdGlvbl9kb3dubGluayIsInZhbCI6IjguNSJ9XX0seyJ0eXBlIjoicGFnZXZpZXciLCJwYWdldmlld19pZCI6ImY2YTNiM2NiLTM3NWEtNGM2OC01OTI3LWZiYTdlODVkMjllYSIsImRvbWFpbl9pZCI6IjQ4NDQ3MCIsInRfZXBvY2giOjE3MDM3ODA1NjgsImRhdGEiOlt7Im5hbWUiOiJjb25uZWN0aW9uX3J0dCIsInZhbCI6IjMwMCJ9XX0seyJ0eXBlIjoicGFnZXZpZXciLCJwYWdldmlld19pZCI6ImY2YTNiM2NiLTM3NWEtNGM2OC01OTI3LWZiYTdlODVkMjllYSIsImRvbWFpbl9pZCI6IjQ4NDQ3MCIsInRfZXBvY2giOjE3MDM3ODA1NjgsImRhdGEiOlt7Im5hbWUiOiJlbmdhZ2VkX3RpbWUiLCJ2YWwiOiIxIn1dfV0=	0%	Avira URL Cloud	safe
https://g.ezoic.net/detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJmNmEzYjNjYi0zNzVhLTRjNjgtNTkyNy1mYmE3ZTg1ZDI5ZWEiLCJkb21haW5faWQiOiI0ODQ0NzAiLCJ0X2Vwb2NoIjoxNzAzNzgwNTY4LCJkYXRhIjpbeyJuYW1lIjoiaW5wX3ZhbHVlIiwidmFsIjoiMTI4In1dfV0=	0%	Avira URL Cloud	safe
https://go.ezodn.com/parsonsmaize/olathe.js?gcb=195-8&cb=23	0%	Avira URL Cloud	safe
https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_	0%	Avira URL Cloud	safe
https://convertwithwave.com/assets/footer-d79f04a6.css	100%	Avira URL Cloud	malware
https://pcapp.store/lp/appstore/img/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
otnolatrnup.com	104.19.215.37	true	false	0%, Virustotal, Browse	unknown
um.simpli.fi	34.170.123.2	true	false		high
global.px.quantserve.com	192.184.69.239	true	false		high
api.wavebrowserbase.com	3.219.198.197	true	false	2%, Virustotal, Browse	unknown
us-east-eb2.3lift.com	35.71.139.29	true	false		high
id5-sync.com	162.19.138.120	true	false	0%, Virustotal, Browse	unknown
prebid.media.net	34.120.63.153	true	false		high
pixel-a.sitescout.com	207.198.113.204	true	false		high
api.wavebrowser.co	3.210.52.109	true	false	1%, Virustotal, Browse	unknown
stats.g.doubleclick.net	142.251.116.156	true	false		high
cdn.w55c.net	54.147.24.55	true	false		high
crb.kargo.com	34.230.139.192	true	false		high
us-east-tlx.3lift.com	3.231.136.235	true	false		high
lga-direct-bgp.contextweb.com	198.148.27.131	true	false		high
www.google.com	142.251.116.106	true	false		high
rtb-csync-use2.smartadserver.com	147.135.94.220	true	false		high
idaas6.cph.liveintent.com	34.205.128.181	true	false		high
bcp.crwdcntrl.net	3.208.124.249	true	false		high
match.adsrvr.org	3.33.220.150	true	false		high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	44.210.41.244	true	false		high
match.prod.bidr.io	54.160.195.52	true	false	0%, Virustotal, Browse	unknown
pagead-googlehosted.l.google.com	142.250.138.132	true	false		high
google.com	142.250.114.101	true	false		high
widget.va1.vip.prod.criteo.com	74.119.119.150	true	false		high
lax-1-sync.go.sonobi.com	72.34.250.75	true	false		high
zeta-ssp-385516103.us-east-1.elb.amazonaws.com	54.236.175.55	true	false		high
cdn.amplitude.com	3.161.239.231	true	false		high
m.deepintent.com	38.91.45.7	true	false	0%, Virustotal, Browse	unknown
device.maxmind.com	162.159.135.22	true	false		high
oajs.openx.net	34.120.107.143	true	false		high
ssum-sec.casalemedia.com	104.18.36.155	true	false		high
btlr-us-east-1.sharethrough.com	34.237.83.209	true	false		high
googleads.g.doubleclick.net	142.250.113.154	true	false		high
api.amplitude.com	34.218.121.115	true	false		high
api.mywavehome.net	3.210.52.109	true	false	2%, Virustotal, Browse	unknown
rtb.adgrx.com	173.231.178.81	true	false	0%, Virustotal, Browse	unknown
clients.l.google.com	142.250.113.100	true	false		high
match-us-east-1-ecs.sharethrough.com	34.231.181.97	true	false		high
static.cloudflareinsights.com	104.16.56.101	true	false	0%, Virustotal, Browse	unknown
api.btloader.com	130.211.23.194	true	false	0%, Virustotal, Browse	unknown
oa.openxcdn.net	34.102.146.192	true	false	0%, Virustotal, Browse	unknown
gum.da1.vip.prod.criteo.com	74.119.118.149	true	false		high
adservice.google.com	142.251.116.155	true	false		high
contextual.media.net	96.7.168.23	true	false		high
scontent.xx.fbcdn.net	157.240.25.13	true	false		high
idsync.rlcdn.com	35.244.154.8	true	false		high
dmp.truoptik.com	104.17.219.204	true	false	0%, Virustotal, Browse	unknown
script.hotjar.com	18.160.156.99	true	false		high
rtb.adentifi.com	107.23.145.95	true	false	0%, Virustotal, Browse	unknown
ad.mrtnsvr.com	34.102.163.6	true	false	0%, Virustotal, Browse	unknown
sync.srv.stackadapt.com	54.196.33.224	true	false		high
synchroscript.deliveryengine.adswizz.com	18.245.124.65	true	false		high
thrtle.com	54.158.15.169	true	false	0%, Virustotal, Browse	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.3.7.191	true	false		high
cdn.id5-sync.com	104.22.52.86	true	false	0%, Virustotal, Browse	unknown
d-ipv6.mmapiws.com	104.18.42.177	true	false	0%, Virustotal, Browse	unknown
pixel.tapad.com	34.111.113.62	true	false		high
pippio.com	107.178.254.65	true	false		high
ssp.ads.betweendigital.com	172.240.127.129	true	false		high
sync.ipredictive.com	52.45.111.235	true	false	0%, Virustotal, Browse	unknown
accounts.google.com	142.250.138.84	true	false		high
ad.doubleclick.net	142.250.115.148	true	false		high
s.amazon-adsystem.com	52.46.128.147	true	false		high
privacy.gatekeeperconsent.com	104.21.28.48	true	false	0%, Virustotal, Browse	unknown
static.mediafire.com	104.16.113.74	true	false		high
spug33000-fpb.pubmnet.com	104.36.113.111	true	false	1%, Virustotal, Browse	unknown
ad-delivery.net	104.26.3.70	true	false	0%, Virustotal, Browse	unknown
convertwithwave.com	3.210.148.248	true	false	4%, Virustotal, Browse	unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false		high
analytics.google.com	142.251.116.100	true	false		high
ib.anycast.adnxs.com	104.254.148.251	true	false		high
us01.z.antigena.com	40.76.134.238	true	false	0%, Virustotal, Browse	unknown
jsdelivr.map.fastly.net	151.101.1.229	true	false	0%, Virustotal, Browse	unknown
d34gxaszg70o4u.cloudfront.net	143.204.165.57	true	false		high
d2avimlm6gq3h9.cloudfront.net	18.245.110.16	true	false		high
app.termly.io	104.18.31.234	true	false		high
classicshell.mediafire.com	104.16.113.74	true	false		high
sync.crwdcntrl.net	44.208.253.113	true	false		high
gob-njr3.pubmnet.com	104.36.115.111	true	false	0%, Virustotal, Browse	unknown
cm.g.doubleclick.net	142.250.115.157	true	false		high
pug-vac.pubmnet.com	8.28.7.83	true	false	0%, Virustotal, Browse	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	54.197.142.67	true	false	0%, Virustotal, Browse	unknown
sync.1rx.io	69.194.240.13	true	false		high
idaas-ext.cph.liveintent.com	52.22.32.84	true	false		high
cdn-content.ampproject.org	142.251.116.132	true	false		high
static-cdn.hotjar.com	18.160.41.58	true	false		high
www.mediafire.com	104.16.113.74	true	false		high
us-u.openx.net	35.244.159.8	true	false		high
securepubads46.g.doubleclick.net	142.250.115.156	true	false		high
invstatic101.creativecdn.com	34.96.70.87	true	false		high
cm-supply-web.gammaplatform.com	35.186.154.107	true	false		high
go.ezodn.com	172.64.137.15	true	false	0%, Virustotal, Browse	unknown
cs.media.net	173.222.52.23	true	false		high
envoy-hl.envoy-csync1.core-b8mf.ov1o.com	35.214.228.23	true	false	0%, Virustotal, Browse	unknown
analytics-alv.google.com	216.239.34.181	true	false		high
www3.l.google.com	142.250.113.139	true	false		high
a.tribalfusion.com	104.18.24.173	true	false		high
dorpat.geo.iponweb.net	35.207.24.140	true	false	0%, Virustotal, Browse	unknown
spug-vac.pubmnet.com	8.28.7.84	true	false	0%, Virustotal, Browse	unknown
io.narrative.io	54.227.167.102	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://static.mediafire.com/images/backgrounds/home_unicorn/mf_logo_flame_reversed.svg	false		high
https://gum.criteo.com/sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=&j=window.advBidxc.mnetRtusId	false		high
https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0	false		high
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2C%2C	false		high
https://static.mediafire.com/images/backgrounds/home_unicorn/tf_organize.svg	false		high
https://api.wavebrowserbase.com/i?evnt=lp-load	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://g.ezoic.net/detroitchicago/imp.gif?ez_orig=1	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	low
https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=3121188971179636291&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4	false	Avira URL Cloud: safe	unknown
https://static.mediafire.com/images/backgrounds/home_unicorn/collaborate.svg	false		high
https://convertwithwave.com/assets/media-192ac301.css	false	Avira URL Cloud: malware	unknown
https://ad-delivery.net/px.gif?ch=2	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:gkU8EdmD1RiT9h5&gdpr=0&gdpr_consent=	false		high
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://sync.srv.stackadapt.com/sync?nid=114&gdpr=0&gdpr_consent=	false		high
https://app.posthog.com/e/?compression=gzip-js&ip=1&_=1703780590853&ver=1.77.2	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/map/c=281/tp=ANXS/tpid=3643551440069563451/gdpr=0/rand=531851505	false		high
https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf	false		high
https://eb2.3lift.com/xuid?mid=5989&xuid=CAESEERw7M-QJkibFE6HzPvu_4I&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1	false		high
https://pippio.com/api/sync?pid=5324&it=1&iv=a5fa778a26e958f6f6090c388c5ec22e5ec1ef42b62e0e41b91ef41f7f9235ab791426b5417dce21&_=2	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=96230842&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---	false		high
https://pm.w55c.net/ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent=	false		high
https://api.mywavehome.net/cookie/set?tid=va6g28ar	false	Avira URL Cloud: safe	unknown
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false		high
https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10086349&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---	false		high
https://static.mediafire.com/images/backgrounds/home_unicorn/tf_downloads.svg	false		high
https://pcapp.store/pixelgif.php	false	Avira URL Cloud: safe	unknown
https://oa.openxcdn.net/esp.js	false	Avira URL Cloud: safe	unknown
https://static.mediafire.com/images/backgrounds/download/additional_content/continent-na.svg	false		high
https://www.google.com/ads/measurement/l?ebcid=ALh7CaQlBdQ-GF1eFG84nrDs-z5-IwCUzXJ9US3BB-KVKSFbGq-gQpx-3CrRzPBMOnIl350gfOdV1KmNrlmT0vdx-XLr8eN-yA	false		high
https://eb2.3lift.com/xuid?mid=3702&xuid=bb8b2075-04f6-4e39-a178-835d11d8840f&dongle=d54f&gdpr=0&gdpr_consent=	false		high
https://convertwithwave.com/wave-ico/svg/wavebrowser-128.svg	false	Avira URL Cloud: malware	unknown
https://x.bidswitch.net/ul_cb/sync?ssp=triplelift&user_id=2505721175073375676369&gdpr=0&gdpr_consent=${GDPR_CONSENT}	false	Avira URL Cloud: safe	unknown
https://match.sharethrough.com/sync/v1?source_id=7rkJAhPCWXbw9Lq5dZxc6TvN&source_user_id=ua-c3022ff3-a52d-3262-99be-6a51a23046c2	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent=	false		high
https://cs.media.net/cksync?cs=1&type=ttd&ovsid=3c35df97-b65a-42b9-abca-61d06d8e5fc4	false		high
https://tags.crwdcntrl.net/lt/c/16589/sync.min.js	false		high
https://sync.technoratimedia.com/services?srv=cs&nuid=56DE60CA3D45485394325E0AA6AE4072&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZY2gvMDEXz3I22USnudDoQAA%262030	false	Avira URL Cloud: safe	unknown
https://ssum-sec.casalemedia.com/usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D56DE60CA3D45485394325E0AA6AE4072%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D3121188971179636291%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D	false		high
https://static.mediafire.com/images/backgrounds/press/web_v2.png	false		high
https://sync.technoratimedia.com/services?uid=AADkEU7LG0EAABaftLpXow&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0	false	Avira URL Cloud: safe	unknown
https://i6.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-4hbklIwqIvCWt_LEW2ilff3RPQD93xHqLmlphA	false		high
https://idsync.rlcdn.com/712188.gif?partner_uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=	false		high
https://g.ezoic.net/saa.go	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/map/c=10158/tp=TPAD/tpid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b	false		high
https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file	false		high
https://static.mediafire.com/images/backgrounds/home_unicorn/tf_10gb.svg	false		high
https://static.mediafire.com/images/backgrounds/home_unicorn/share_color.svg	false		high
https://id5-sync.com/api/esp/increment?counter=no-config	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeGuMUSAAAAACGl-wDE9NNLuUZygPg7iNvMGtXD&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=normal&cb=1h1hgawztxq1	false		high
https://btloader.com/tag?o=5678961798414336&upapi=true	false	Avira URL Cloud: safe	unknown
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0	false		high
https://pcapp.store/fa/img/laptop_white_display_black.png	false	Avira URL Cloud: safe	unknown
https://g.ezoic.net/detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJmNmEzYjNjYi0zNzVhLTRjNjgtNTkyNy1mYmE3ZTg1ZDI5ZWEiLCJkb21haW5faWQiOiI0ODQ0NzAiLCJ0X2Vwb2NoIjoxNzAzNzgwNTY4LCJkYXRhIjpbeyJuYW1lIjoiY29ubmVjdGlvbl9kb3dubGluayIsInZhbCI6IjguNSJ9XX0seyJ0eXBlIjoicGFnZXZpZXciLCJwYWdldmlld19pZCI6ImY2YTNiM2NiLTM3NWEtNGM2OC01OTI3LWZiYTdlODVkMjllYSIsImRvbWFpbl9pZCI6IjQ4NDQ3MCIsInRfZXBvY2giOjE3MDM3ODA1NjgsImRhdGEiOlt7Im5hbWUiOiJjb25uZWN0aW9uX3J0dCIsInZhbCI6IjMwMCJ9XX0seyJ0eXBlIjoicGFnZXZpZXciLCJwYWdldmlld19pZCI6ImY2YTNiM2NiLTM3NWEtNGM2OC01OTI3LWZiYTdlODVkMjllYSIsImRvbWFpbl9pZCI6IjQ4NDQ3MCIsInRfZXBvY2giOjE3MDM3ODA1NjgsImRhdGEiOlt7Im5hbWUiOiJlbmdhZ2VkX3RpbWUiLCJ2YWwiOiIxIn1dfV0=	false	Avira URL Cloud: safe	unknown
https://g.ezoic.net/detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJmNmEzYjNjYi0zNzVhLTRjNjgtNTkyNy1mYmE3ZTg1ZDI5ZWEiLCJkb21haW5faWQiOiI0ODQ0NzAiLCJ0X2Vwb2NoIjoxNzAzNzgwNTY4LCJkYXRhIjpbeyJuYW1lIjoiaW5wX3ZhbHVlIiwidmFsIjoiMTI4In1dfV0=	false	Avira URL Cloud: safe	unknown
https://app.termly.io/embed-policy.min.js	false		high
https://go.ezodn.com/parsonsmaize/olathe.js?gcb=195-8&cb=23	false	Avira URL Cloud: safe	unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=45e73c86-a59d-11ee-a23b-06900a68fba8	false		high
https://static.mediafire.com/images/backgrounds/home_unicorn/pf_bulk_download.svg	false		high
https://convertwithwave.com/assets/footer-d79f04a6.css	false	Avira URL Cloud: malware	unknown
https://ib.adnxs.com/prebid/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&uid=2505721175073375676369	false		high
https://www.google.com/pagead/1p-user-list/11219589166/?random=1703780591807&cv=11&fst=1703779200000&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9123342550&u_w=1280&u_h=1024&url=https%3A%2F%2Fconvertwithwave.com%2F%3Fsrc%3Dd-cp20278471669%26ob%3Dobgcobedobem%26dvc%3Dc%26k%3Dfile%2520converter%26crt%3D677032990697%26adp%3D%26plc%3Dwww.mediafire.com%26tgt%3D%26sl%3D%26cpd%3D20278471669%26iid%3Dwav-cvt%26gclid%3DEAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE&ref=https%3A%2F%2Fwww.mediafire.com%2F&frm=0&tiba=Wave%20Browser%20-%20Efficient%2C%20Intuitive%20and%20Personal%20Web%20Browser&userId=af779c44-13ad-47a2-ad3d-9786811ff14d&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_P3-Dbf-nR6tUSuUOeKVnQ_MYRvi81TQu4Kqe0Z8o_TkUxmdw&random=2207777249&rmt_tld=0&ipr=y	false		high
https://pcapp.store/lp/appstore/img/favicon.ico	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://typekit.com/eulas/00000000000000007735ee06	chromecache_636.2.dr, chromecache_275.2.dr	false		high
http://typekit.com/eulas/00000000000000007735ee08	chromecache_636.2.dr, chromecache_275.2.dr	false		high
https://cdn.lr-ingest.io/LogRocket.min.js	chromecache_408.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cms.wavebrowser.co/graphql	chromecache_473.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN	chromecache_537.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_550.2.dr	false		high
https://use.typekit.net/af/a21a99/00000000000000007735ee0c/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_275.2.dr	false		high
https://use.typekit.net/af/f26873/00000000000000007735ee0d/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_636.2.dr, chromecache_275.2.dr	false		high
https://github.com/LiosK/uuidv7/blob/e501462ea3d23241de13192ceae726956f9b3b7d/src/index.ts	chromecache_473.2.dr	false		high
https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc	chromecache_643.2.dr	false		high
https://www.internalfb.com/intern/invariant/	chromecache_302.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_302.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_365.2.dr, chromecache_501.2.dr	false		high
https://yarnpkg.com/en/docs/selective-version-resolutions	chromecache_473.2.dr	false		high
https://p.typekit.net/p.css?s=1&k=vpi5heu&ht=tk&f=47864.47865.47867.47868.47869&a=45407236&app=typek	chromecache_275.2.dr	false		high
https://support.google.com/recaptcha	chromecache_501.2.dr	false		high
https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode	chromecache_469.2.dr	false	Avira URL Cloud: safe	unknown
http://typekit.com/eulas/00000000000000007735ee0c	chromecache_275.2.dr	false		high
http://typekit.com/eulas/00000000000000007735ee0d	chromecache_636.2.dr, chromecache_275.2.dr	false		high
http://typekit.com/eulas/00000000000000007735ee0e	chromecache_636.2.dr, chromecache_275.2.dr	false		high
https://use.typekit.net/af/7540d0/00000000000000007735ee06/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_636.2.dr, chromecache_275.2.dr	false		high
https://cdn.integ.uidapi.com/	chromecache_363.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/9f7632/00000000000000000000d792/27/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_636.2.dr	false		high
http://dev.apollodata.com/core/fragments.html#unique-names	chromecache_473.2.dr	false		high
https://app.termly.io/notify/0c0d5751-34c2-45aa-9465-c0a6eb9b7849	chromecache_448.2.dr	false		high
https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=42E5D102-FCC7-	chromecache_433.2.dr	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	chromecache_413.2.dr	false		high
https://www.google.com/images/cleardot.gif	chromecache_725.2.dr	false		high
https://googleads.g.doubleclick.net/	chromecache_311.2.dr, chromecache_463.2.dr	false		high
https://use.typekit.net/af/9f7632/00000000000000000000d792/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_636.2.dr	false		high
https://www.google.com/pagead/1p-user-list/858128210/?random	chromecache_266.2.dr, chromecache_722.2.dr	false		high
https://github.com/google/safevalues/issues	chromecache_462.2.dr	false		high
https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_	chromecache_433.2.dr	false	Avira URL Cloud: safe	unknown
https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel	chromecache_469.2.dr	false		high
https://www.rtbhouse.com/	chromecache_705.2.dr	false		high
https://cloud.google.com/contact	chromecache_365.2.dr, chromecache_501.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
54.227.167.102	io.narrative.io	United States	14618	AMAZON-AESUS	false
104.18.24.173	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
52.200.3.94	unknown	United States	14618	AMAZON-AESUS	false
107.23.145.95	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
130.211.23.194	api.btloader.com	United States	15169	GOOGLEUS	false
142.250.115.147	unknown	United States	15169	GOOGLEUS	false
142.250.115.148	ad.doubleclick.net	United States	15169	GOOGLEUS	false
172.240.127.129	ssp.ads.betweendigital.com	United States	7979	SERVERS-COMUS	false
192.184.69.239	global.px.quantserve.com	United States	27281	QUANTCASTUS	false
3.234.129.75	unknown	United States	14618	AMAZON-AESUS	false
35.166.142.103	unknown	United States	16509	AMAZON-02US	false
18.245.124.65	synchroscript.deliveryengine.adswizz.com	United States	16509	AMAZON-02US	false
69.90.254.78	ums.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
3.228.69.56	unknown	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
34.205.128.181	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
142.251.116.106	www.google.com	United States	15169	GOOGLEUS	false
34.218.121.115	api.amplitude.com	United States	16509	AMAZON-02US	false
142.250.138.103	unknown	United States	15169	GOOGLEUS	false
142.251.116.99	unknown	United States	15169	GOOGLEUS	false
104.254.151.36	unknown	United States	29990	ASN-APPNEXUS	false
3.210.180.48	unknown	United States	14618	AMAZON-AESUS	false
104.16.114.74	unknown	United States	13335	CLOUDFLARENETUS	false
54.147.24.55	cdn.w55c.net	United States	14618	AMAZON-AESUS	false
38.98.69.175	pmp.mxptint.net	United States	174	COGENT-174US	false
162.19.138.120	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
34.200.65.202	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States	15169	GOOGLEUS	false
34.231.181.97	match-us-east-1-ecs.sharethrough.com	United States	14618	AMAZON-AESUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
104.18.30.234	unknown	United States	13335	CLOUDFLARENETUS	false
44.210.41.244	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
96.7.168.23	contextual.media.net	United States	262589	INTERNEXABRASILOPERADORADETELECOMUNICACOESSABR	false
173.222.52.23	cs.media.net	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
74.119.118.134	static.da1.vip.prod.criteo.net	United States	19750	AS-CRITEOUS	false
35.207.24.140	dorpat.geo.iponweb.net	United States	19527	GOOGLE-2US	false
74.119.118.138	widget.da1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
104.19.215.37	otnolatrnup.com	United States	13335	CLOUDFLARENETUS	false
35.214.228.23	envoy-hl.envoy-csync1.core-b8mf.ov1o.com	United States	19527	GOOGLE-2US	false
143.204.165.57	d34gxaszg70o4u.cloudfront.net	United States	16509	AMAZON-02US	false
34.120.107.143	oajs.openx.net	United States	15169	GOOGLEUS	false
54.196.33.224	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
157.240.25.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
34.230.139.192	crb.kargo.com	United States	14618	AMAZON-AESUS	false
74.119.118.149	gum.da1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
3.161.239.231	cdn.amplitude.com	United States	16509	AMAZON-02US	false
167.99.235.203	pcapp.store	United States	14061	DIGITALOCEAN-ASNUS	false
104.18.36.155	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
104.36.115.111	gob-njr3.pubmnet.com	United States	62713	AS-PUBMATICUS	false
108.156.245.32	tags.crwdcntrl.net	United States	16509	AMAZON-02US	false
3.208.124.249	bcp.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
34.237.83.209	btlr-us-east-1.sharethrough.com	United States	14618	AMAZON-AESUS	false
142.250.113.100	clients.l.google.com	United States	15169	GOOGLEUS	false
54.163.253.130	unknown	United States	14618	AMAZON-AESUS	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
99.86.102.53	unknown	United States	16509	AMAZON-02US	false
142.251.116.104	unknown	United States	15169	GOOGLEUS	false
172.64.137.15	go.ezodn.com	United States	13335	CLOUDFLARENETUS	false
67.202.105.24	pixel.33across.com	United States	32748	STEADFASTUS	false
52.45.111.235	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
18.160.41.58	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
104.22.75.216	btloader.com	United States	13335	CLOUDFLARENETUS	false
72.34.250.75	lax-1-sync.go.sonobi.com	United States	27630	AS-XFERNETUS	false
104.18.31.234	app.termly.io	United States	13335	CLOUDFLARENETUS	false
3.210.148.248	convertwithwave.com	United States	14618	AMAZON-AESUS	false
104.21.28.48	privacy.gatekeeperconsent.com	United States	13335	CLOUDFLARENETUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
34.102.146.192	oa.openxcdn.net	United States	15169	GOOGLEUS	false
54.158.15.169	thrtle.com	United States	14618	AMAZON-AESUS	false
69.194.240.13	sync.1rx.io	United States	6336	TURN-US-ASNUS	false
34.170.123.2	um.simpli.fi	United States	2686	ATGS-MMD-ASUS	false
34.96.70.87	invstatic101.creativecdn.com	United States	15169	GOOGLEUS	false
38.91.45.7	m.deepintent.com	United States	174	COGENT-174US	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
142.250.113.139	www3.l.google.com	United States	15169	GOOGLEUS	false
52.70.20.227	unknown	United States	14618	AMAZON-AESUS	false
3.219.198.197	api.wavebrowserbase.com	United States	14618	AMAZON-AESUS	false
104.254.148.252	unknown	United States	29990	ASN-APPNEXUS	false
44.208.253.113	sync.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
104.22.52.86	cdn.id5-sync.com	United States	13335	CLOUDFLARENETUS	false
142.250.113.138	unknown	United States	15169	GOOGLEUS	false
104.18.42.177	d-ipv6.mmapiws.com	United States	13335	CLOUDFLARENETUS	false
172.104.105.5	cm128.appier.org	United States	63949	LINODE-APLinodeLLCUS	false
70.42.32.31	unknown	United States	22075	AS-OUTBRAINUS	false
104.26.2.70	unknown	United States	13335	CLOUDFLARENETUS	false
54.236.175.55	zeta-ssp-385516103.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
162.159.135.22	device.maxmind.com	United States	13335	CLOUDFLARENETUS	false
104.26.3.70	ad-delivery.net	United States	13335	CLOUDFLARENETUS	false
54.200.104.216	unknown	United States	16509	AMAZON-02US	false
104.17.219.204	dmp.truoptik.com	United States	13335	CLOUDFLARENETUS	false
3.210.52.109	api.wavebrowser.co	United States	14618	AMAZON-AESUS	false
54.160.195.52	match.prod.bidr.io	United States	14618	AMAZON-AESUS	false
216.200.232.253	pixel-origin.mathtag.com	United States	30419	MEDIAMATH-INCUS	false
142.250.138.84	accounts.google.com	United States	15169	GOOGLEUS	false
74.119.119.150	widget.va1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
172.67.144.62	unknown	United States	13335	CLOUDFLARENETUS	false
150.136.156.92	adserver.technoratimedia.com	United States	31898	ORACLE-BMC-31898US	false
3.93.251.5	unknown	United States	14618	AMAZON-AESUS	false

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1367729
Start date and time:	2023-12-28 17:21:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://classicshell.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@75/476@454/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.mediafire.com/ Browse: https://www.mediafire.com/upgrade Browse: https://www.mediafire.com/login/ Browse: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file Browse: https://download2433.mediafire.com/v3uprzavds1gTsgvz0Vs63vR_SAR7d1rThtPthVaxjTB2buoHsy7alQfEutMTX3-frd-kbs7SXZ5meBxQYVQGEn31qvpZ5bBPnQcN5tTntdcRaTc8JmobBiTyt_Y12Qn08wU7xchIXp_Xv9ZPA6L96dWj6WXjScPLo8FnCuh9vS-/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe Browse: https://www.mediafire.com/about/ Browse: https://www.mediafire.com/about/jobs.php Browse: https://www.mediafire.com/press/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.138.94, 34.104.35.123, 142.250.115.97, 104.21.63.106, 172.67.170.144, 142.250.138.100, 142.250.138.113, 142.250.138.139, 142.250.138.138, 142.250.138.101, 142.250.138.102, 142.250.138.95, 142.251.116.95, 142.250.113.95, 142.250.115.95, 142.250.114.95, 142.251.116.94, 142.250.115.113, 142.250.115.139, 142.250.115.101, 142.250.115.100, 142.250.115.138, 142.250.115.102, 142.250.114.94, 23.47.49.28, 23.47.49.51, 142.250.115.94, 23.222.28.163, 23.222.28.138, 23.40.68.227, 13.107.42.14, 142.251.116.132, 142.250.114.154, 142.250.114.156, 142.250.114.155, 142.250.114.157, 50.116.194.21, 142.251.116.157, 142.251.116.155, 142.251.116.154, 142.251.116.156, 23.220.102.20, 142.250.138.154, 142.250.138.157, 142.250.138.155, 142.250.138.156, 142.250.115.155, 142.250.115.157, 142.250.115.154, 142.250.115.156, 52.165.164.15, 192.229.211.108, 142.250.113.132, 142.250.113.155, 142.250.113.156, 142.250.113.154, 142.250.113.157, 23.32.128.201, 151.101.2.49, 151.101.194.49, 151.101
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, a267.g.akamai.net, slscr.update.microsoft.com, clientservices.googleapis.com, a1874.dscg1.akamai.net, l-0005.l-msedge.net, e9126.x.akamaiedge.net, 76e5953c04163876c34343aa73551e05.safeframe.googlesyndication.com, ocsp.digicert.com, use-stls.adobe.com.edgesuite.net, update.googleapis.com, www.gstatic.com, rtb-csync-geo.usersync-prod-sas.akadns.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, ajax.googleapis.com, dual-a-0001.a-msedge.net, pagead2.googlesyndication.com, p.typekit.net-stls-v3.edgesuite.net, edgedl.me.gvt1.com, a-us-east.rfihub.com.akadns.net, c.bing.com, translate.googleapis.com, e6603.g.akamaiedge.net, csi.gstatic.com, wildcard.owneriq.net.edgekey.net, h2.shared.global.fastly.net, www.googleadservices.com, e11294.g.akamaiedge.net, c-bing-com.a-0001.a-msedge.net, track.adformnet.akadns.net, translate-pa.googleapis.com, www.googletagmanager.com, pubmatic.edgekey.net, o
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	7187816
Entropy (8bit):	7.811852032698378
Encrypted:	false
SSDEEP:	196608:1fCy8wAafvB9W95jcOqihiDXHzk2w5gzOAiZiU8sXo:Uy8wAafEjnqzkt//s
MD5:	230D1965A035BC4C894941CAA3D19A32
SHA1:	317604EBA6E94E8777741D577B0EF160A0AF3258
SHA-256:	942C7EE37303C962628555E196EB35F4465BB45D204600DD2518DD20DDEBE5E2
SHA-512:	00AC51BDF37BDE44668E5CF20854F67DF1B222959F8876E2FC3D05814CDB7B11C728411E5CE04187C7FB9C7939CAB56CFFAA3A8F02BF0A17437DCF7AF51755A4
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........p............iC.....iU.....iE...........iR.....CB.....iG....Rich...................PE..L...\|.K[......................l......:............@...........................m.......m...@..........................................P...(l...........m.h.....m.........................................@............................................text............................... ..`.rdata.."3.......4..................@..@.data...$-... ......................@....rsrc....(l..P...*l.................@..@.reloc..l[....m..\...6m.............@..B........................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9416
Entropy (8bit):	5.44629255217399
Encrypted:	false
SSDEEP:	192:XlvnlXlSlIGlHlm3l8lvNl9lslI4ltlmdlGlvrlbl2lIilLlm7lglvxlhlQlIklh:VvlVkI4F8CvnXyIuHK4vpZoI0JgmvbLs
MD5:	C4C29BA80F69B5B9881D60586BD6E3C4
SHA1:	B2950750D7BA82378E6A540BF608FA00720A4EE5
SHA-256:	26C45C61C44BD5D6A544369B4C00C62BCE7C3C0A3DE893FE7B5496A88125E7DB
SHA-512:	F94556772A6873E0C79015952F90D3A61D91A208CC8E247938DEF3A15D967B53DA39FF6CDCE801589B531977848B8E0BA524821058D49DA513FBF52D70D7DF21
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Inter:wght@200;400;600;800&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2JL7SUc.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 200;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2ZL7SUc.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 200;. font-display: swa

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=114&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 468, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3008
Entropy (8bit):	7.8720725823782045
Encrypted:	false
SSDEEP:	48:1DqbHAILFywVeQAm5XHS7oB+LVXkRMBnFubixiXNp33zZb1N/v85hKEm2gN:1MgU84UBxXkqFzuB3dJNsudN
MD5:	03CEEB90C133E4306FD61A362C894B3E
SHA1:	DDBF6954C30B8A5B6D2457D1278A5058BCBA6539
SHA-256:	FDA06035D7B9696E330E52F9A1507F1F01FCE71C07E3DD07BD825A02CBD9BBDE
SHA-512:	510A2676A87BFDC9BC57DACD6BA05C2CA3468F02EB9D7B1A77BA4AA93C5BE2DA4E744733D8FDF739EA9D9C2A58DEC8BE879BE1D66F8085D91FB783623713E697
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$.........R.5....IDATx..}......x9.h...w.j...=L!.E.$.....[[..=....h." .#.75.C.......m.$(.J...65m}....A.;....Ko...ngwgwf_~.{........3......P..+p.. (2+T...P.C.3B..J.....FB...).F1.+..jP.5.P.....w.O.[SOj....:..n.M{.)...z.FQN.V.p.&.-.P..~R9...&.k3.y...kTn ..um.5!..u..eA=h$..zS...rE.R.i...7{t.).G.c.%o...gF......#W....~`.8...>......NC.7..f....L..6.(.j.6v...C.X..Y(.T.B....<.5.sZKB.B....LL(....>.3!..>,.`R7..e=).B......U.$z#..D...r.z;c.2..GS.9.........O...i.!......7....!49.!.2K}dV%.CR..>..-b.T=./..!d.).q.....t.o....?~.#t5.%.c...........1.._.K.$.=......E.uP. $8.F......A.F..s..T.p..@E.!s..t.-l)_..[....x..../[.B."0..9BO..7X.B.....8..3......m.22.L...("x.t.$...Z......9$V[.h.3Z...+.<...o.7..2.4.3...8.:.>(7Z.P..8+....N...m.......b..\|....t.*...&p.L...={...~....F0?..y...v.8.E.J.f.=........5.P.W..7'.P.;I..#.4....?e....e....4...G.........(3!....2.K%!t.f...P...:.B.u)..N......V.....J.0.!...h...3H.>.C,.B,.E..mao..R...L.Op.......G.,....8..H.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4554
Entropy (8bit):	4.52616327995327
Encrypted:	false
SSDEEP:	96:QJr5xEhb8548CdndToY8HFU0CGfODMQwNUSt:QJr54SuYlUbu
MD5:	BCD95CFB6B9474DBA955AAB2CFE0432B
SHA1:	49005DB192F26F706C5CF342B277F95D4978442C
SHA-256:	1A0EC73A3CA7F354865D6B95401C50627FDF5A9B0DA763A6F75FA818FD775B55
SHA-512:	4AF3717E2053C23C155A6003A9541304ADA4912C9134511D9CE3DF21EAE17A9D240C5BAD73CFCBE2728724DD804A9593DAA1B9B97CF8F303060689460D9596C7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42">. <defs>. <style>. .cls-1 {. fill: #07f;. }.. .cls-2 {. fill: #fff;. }. </style>. </defs>. <title>mf_logo_u1</title>. <g id="full_color_reversed">. <path id="flame" class="cls-1" d="M21.9085,9.2571a51.46,51.46,0,0,1,9.3283.9546c2.9084.5369,5.8493,1.5476,8.8277,1.5384,2.276-.007,4.1162-1.5889,4.11-3.5334s-1.8559-3.5149-4.1319-3.5079a13.3557,13.3557,0,0,0-3.8961.647c.3277-.2425.6626-.4753,1.0061-.6949A26.136,26.136,0,0,1,52.19,1.0269c5.616.2308,11.47,1.9781,15.7643,5.6908A19.8917,19.8917,0,0,1,74.5752,24.54,19.7456,19.7456,0,0,1,62.4484,39.6153a23.9951,23.9951,0,0,1-14.45.5274c-6.2135-1.57-11.64-5.0474-17.4846-7.5341a46.8579,46.8579,0,0,0-10.5715-2.6793l.0571.0015a8.9447,8.9447,0,0,0,4.1139-.6975c1.7275-.8285,1.7225-2.8315.8214-4.2928-1.0708-1.7366-3.2282-2.4456-5.0923-2.9507a24.3621,24.3621,0,0,0-9.9558-.4889,15.0645,15.0645,0,0,0-6.8543,2.4348A5.667,5.667,

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3026)
Category:	downloaded
Size (bytes):	178015
Entropy (8bit):	5.539929217544923
Encrypted:	false
SSDEEP:	3072:LldZAlCIWYb1jKC+ypDWMpME/hA9DfFWkbp9i54n:RfIHJclE/hA9DfYGgA
MD5:	E3D359BEE13CB9D8859A3E431E6FE8EE
SHA1:	19010113A46F8B51B4AA6C36BB40451460B573B9
SHA-256:	65E0464A58CFFAB73A262330F8F9E6671D11DB9B7EA7BE1C29A289847BE72CEF
SHA-512:	6437EE0D585D382626D28DB0BE842BB50CDE386EB55F8E7BBEE9FBF21DC4AA1004739B206B28E51D7B8F85FB99D57EC48676EC278583F989C277704BB1176582
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-829541-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"4":true,"3":true}...}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=function(a){return a.raw=a},fa=function(a,b){a.raw=b;return a},ia=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error(String

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32769)
Category:	downloaded
Size (bytes):	94840
Entropy (8bit):	5.372946098601679
Encrypted:	false
SSDEEP:	1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW
MD5:	B8D64D0BC142B3F670CC0611B0AEBCAE
SHA1:	ABCD2BA13348F178B17141B445BC99F1917D47AF
SHA-256:	47B68DCE8CB6805AD5B3EA4D27AF92A241F4E29A5C12A274C852E4346A0500B4
SHA-512:	A684ABBE37E8047C55C394366B012CC9AE5D682D29D340BC48A37BE1A549AECED72DE6408BEDFED776A14611E6F3374015B236FBF49422B2982EF18125FF47DC
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
Preview:	/! jQuery v1.7.2 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 43 x 58, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2380
Entropy (8bit):	7.905830643504667
Encrypted:	false
SSDEEP:	48:TIpoePU8QrBdlNmyNy3GuZKgcGPJyL3YfabMMG:TIpoeMXdlksQxgGheYTMG
MD5:	7056725D8CA68744457116D3B90CE50D
SHA1:	002C1E964A12049139A79D4379E7A2D15596C6D0
SHA-256:	40CE33401042FCBF767AAF93BB611E98E993EFD690680FBA615D479BEA0773BD
SHA-512:	FF1BEC52AEDFBCD9FF166CDD8A279AB2C29E7669C69EA6D53B5ABF484DF9CD0418D085D45E58C9D78C76DCF6A5D8DC8502F9CCAAF28B8E7F87F8F883D311EBED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...+...:.....)......IDATx^..\Y....NU...{g:}..:..N.3. ..q......gDp.....g}...C /...D...b..\|../.&!..N..kUW..v.oN...]uD...d.k..o..[k.D.....4.._..\|.+.].O."......g..........S...v.P..G?.../.i8 C...x.B......t.......kW.C...w7({.....}....>..b.%H.1).T.NKP}?...Kg.z.t.F.}r.......v....j.EO.Kk.....}....i.h...NkE_..%..R=.X..-.o..R.....%..0.(.?...4q...(.~..[...?....7.!.....L.)xU.o.e.....ZS).Y..^..i>~E.....w.k.5..i(.....TB..H.r.!.B0'.+r]M.~D_...D.S`....@n1...lZa.>.2...u......=....6...w..e......X4J....W.j.fF+9.......!..0.P....uI....lp..F~.fU..%qq............4......`..2.(.......Z......HeO....Ja........{.wZ.i.....5M..\%..2J....}...i.my..Z;..Z...(\|...sd,.1L..$:..j.A...\|.N.q.TL.........`........9....t5..4jzV.tQ.....p..Y..Wjd..(..$.`.a.t..V......y..o.e.f.D....+]a..Y. q.Q.)..u.J."As.....x....%B.....g.....6@Km^.. e..).0..........Ca.A.}}X~Yy.%.jR.".........](h..l...k.\|A.VK...d...O..8.u]....?...C.....~....c..a..Oc...yp.o...(..:..t...T...\/..[

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://76e5953c04163876c34343aa73551e05.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://dis.criteo.com/dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=${GPP_STRING_28}&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	17039
Entropy (8bit):	5.459006295521853
Encrypted:	false
SSDEEP:	384:9vnXyIuHKRvwgBINQZ4vpZoI0JgPvaK/I76XPFAXcJrV34UvcbbMi8XndpGmqpBM:WWXctV34ucboi8XdpGHpBM
MD5:	DC27EB3C60E549E6AFF68C0BEFEDFEF2
SHA1:	3CD9B8B9BD47A2467EE0DB649FDD405C58D52EAE
SHA-256:	726AF2DECF874E6144F3D445963DD4FD20824C2621E3245E208607602882E6C3
SHA-512:	F8BCB4BA770FFE3FABE84A18AC2B793455E89E2740C6AC737106680BE00D7136C6E984E8B738ED012E17D47065360FFA6F71F8D45D6A999D65129A4CDB05833A
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Bebas+Neue&family=Inter:wght@400;500;600;700&family=Roboto:wght@400;500;700&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Bebas Neue';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wdhyzbi.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Bebas Neue';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ cyrillic-ext */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	713
Entropy (8bit):	4.826611766298335
Encrypted:	false
SSDEEP:	12:tvGWfXommz98TR/aJ9vYnOIDhT6v75+KvGYDXoiSmPnXRFTAhSW/wx:tusXommz9eBC9vGOIDhT6vVvHksppAhE
MD5:	CC97A2B9E34D2FDAC72159ADBBCBFE05
SHA1:	B87821208EA330CBF74FB814F8F6FF60637847CA
SHA-256:	C813EB3E9C507E43A491F78C02971FD7A1DE82A2846F766A2155324F2E60C3AE
SHA-512:	49EB3996FB7BA0B0EEA2192D79BB376F2B65D23C4012FDE02DE4200D1DA3C56694D67946ADC1EB725B43C735F61FC539F0BCE212B7C866B1C58822A400251EBB
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="45.22" height="38.76" viewBox="0 0 45.22 38.76"><defs><style>.cls-1{fill:#e23b2a;}</style></defs><title>heart</title><path class="cls-1" d="M24.11,41.93,39.83,26.79Q45.61,21,45.61,15.43T42.41,6.75Q39.2,3.62,33.55,3.62a10.06,10.06,0,0,0-3.19.54,12.94,12.94,0,0,0-3,1.46q-1.4.92-2.41,1.73A23.31,23.31,0,0,0,23,9.07a23.37,23.37,0,0,0-1.92-1.72q-1-.81-2.41-1.73a12.93,12.93,0,0,0-3-1.46,10.06,10.06,0,0,0-3.19-.54q-5.65,0-8.86,3.13T.39,15.43A11.05,11.05,0,0,0,1,18.91,15.26,15.26,0,0,0,2.33,22,22.24,22.24,0,0,0,4,24.43q1,1.2,1.4,1.65a8.26,8.26,0,0,0,.69.66L21.89,41.93a1.58,1.58,0,0,0,2.22,0Z" transform="translate(-0.39 -3.62)"/></svg>

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	55834
Entropy (8bit):	5.937055596102233
Encrypted:	false
SSDEEP:	768:mWj9UreQNkqUrBzrLr6r1yZWZQrirfn74UZRtrLrvNqg:mmDrZrLr6r1y0arirz4UZpqg
MD5:	47DF233F8AFE393BCEEF993DC3925647
SHA1:	F299C078AD52F35EE8BB054106FB98927D48A3D6
SHA-256:	05154CB3E92A307D773056F43236E66198CAFBA14C8DD54EDD75268EF0D70C19
SHA-512:	246CCDBB3F10627257C1F1577B3EBAF7F4720C0AE3937172F044E2E93AA4E7AA4973FB7DE1FD90222A60AB470512B8A0A35A51026D5B661D44173BB42C67C571
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2407496164193484&correlator=3161227542607198&eid=31080125%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&gdpr=0&us_privacy=1---&gpp_sid=-1&iu_parts=183096492%2CMediaFire-Zone1&enc_prev_ius=%2F0%2F1&prev_iu_szs=728x90&ifi=1&didk=2298854458&sfv=1-0-40&eri=5&sc=1&cookie=ID%3Dfb7f03735d5241db%3AT%3D1703780530%3ART%3D1703780530%3AS%3DALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ&gpic=UID%3D00000daf1f27be5b%3AT%3D1703780530%3ART%3D1703780530%3AS%3DALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g&abxe=1&dt=1703780569380&adxs=384&adys=10&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe%2Ffile&vis=1&psz=960x1500&msz=728x-1&fws=0&ohw=0&ga_vid=1411026819.1703780523&ga_sid=1703780569&ga_hid=139214927&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=EloKDWNyd2RjbnRybC5uZXQSQDVlYTE5NTEzY2MzMWI1MTcyMDI1YzQzOWJkZDRhOWZiOTI3YTBkZjM1MmFkNjM2MzdjNDRhYjg3NGViYTZiMDYYp_DuicsxSAASGQoKcHViY2lkLm9yZxiJ7u6JyzFIAFICCGoSHQoOZXNwLmNyaXRlby5jb20YpuXuicsxSABSAghkEhcKCHJ0YmhvdXNlGITv7onLMUgAUgIIahIZCgp1aWRhcGkuY29tGKbl7onLMUgAUgIIZBI-CgVvcGVueBIsZXlKcElqb2lkMmgxVmtaek5EZFRRblZ0TVhGTk1qbDFTakZJWnowOUluMD0YtfzuicsxSAASGwoMaWQ1LXN5bmMuY29tGOP77onLMUgAUgIIag..&cbidsp=CrYBCAESGQoIcHVibWF0aWMQtAYgAlIIcHVibWF0aWMSGQoIbWVkaWFuZXQQ4wQgAlIIbWVkaWFuZXQSIQoMc2hhcmV0aHJvdWdoENAFIAJSDHNoYXJldGhyb3VnaBIdCgp0cmlwbGVsaWZ0EKQGIAJSCnRyaXBsZWxpZnQYAiIkMjhiYmI5NTQtYzk2ZS00Mzc5LTg2YjktOWI3ZGU0OTgwN2RmKgQIAyAAMgd2OC4xMC4wQOgHSgA.&nt=1&psd=WzE1LFsyLFtbIi8xODMwOTY0OTIvTWVkaWFGaXJlLVpvbmUxIixbXV1dXSxudWxsLDNd&dlt=1703780566939&idt=1264&prev_scp=dkey_present%3Dfalse%26buildnumber%3D121918%26dladtemplate%3D51%26button_delay%3Ddisabled&adks=630197753&frm=20
Preview:	{"/183096492/MediaFire-Zone1":["html",0,0,null,0,90,728,0,1,null,null,null,1,null,[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CLjvu53FsoMDFQL0lAkdT-gHxg",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-single

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2642), with no line terminators
Category:	downloaded
Size (bytes):	2642
Entropy (8bit):	5.189863761974754
Encrypted:	false
SSDEEP:	48:l9GmqiX+gZlhNIDRFryHNTOboQEHyOm6IPGYXT8LE3CA1r0Q2Nq:l95qC/eDqHNT6MZmRPGYX4BQrkNq
MD5:	5400D57D3C99621A705F935A7F03BE29
SHA1:	B1BEBF7179D6FBCF789EAE5BBE363E0E25245669
SHA-256:	1D7A77F24FC31ABF310CCB240B2E0A49F2582823F990EEF11A3ABC37F286EA12
SHA-512:	518FF77FF1E97290737DA1B3182BE21836EACD863C797138C8E1400801242D20040FD2DC92C50CB067ACA0EA25A0BF1EBCA557007977988743BC3859D05AE372
Malicious:	false
Reputation:	low
URL:	https://go.ezodn.com/detroitchicago/wichita.js?gcb=195-8&cb=12
Preview:	!function(){function e(i){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(i)}__ez.pel=function(){var i=[];function t(t,o,d,n,_,r,p,a){if(__ez.dot.isDefined(t)&&0!=__ez.dot.isAnyDefined(t.getSlotElementId,t.ElementId)){void 0===a&&(a=!1),parseInt(__ez.dot.getTargeting(t,"ap"));var f=__ez.dot.getSlotIID(t),s=__ez.dot.getAdUnit(t,a),u=parseInt(__ez.dot.getTargeting(t,"compid")),l=0,c=0,z=function(i){if("undefined"==typeof _ezim_d)return!1;var t=__ez.dot.getAdUnitPath(i).split("/").pop();if("object"===("undefined"==typeof _ezim_d?"undefined":e(_ezim_d))&&_ezim_d.hasOwnProperty(t))return _ezim_d[t];for(var o in _ezim_d)if(o.split("/").pop()===t)return _ezim_d[o];return!1}(t);"object"==e(z)&&(void 0!==z.creative_id&&(c=z.creative_id),void 0!==z.line_item_id&&(l=z.line_item_id)),__ez.dot.isDefined(f,s)&&__ez.dot.isValid(o)&&("0"==

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2502), with no line terminators
Category:	downloaded
Size (bytes):	2502
Entropy (8bit):	5.91357086103235
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt085Hp4pPZxIZxZEUB6:wsbSUtJfxrqLWWWdV6j1VJkZxIZxi
MD5:	28A50B00B429C4CD30434EC1AAD35753
SHA1:	3E9B70E7057F08C041867A00901C5F064B9CE484
SHA-256:	C86A1779F98D3EA42A6BB32ACB7184EBB8ED3AFDA8B501D4B45D166AC1B87AEC
SHA-512:	3EF4856975127E2F2C02BD6E63F601F9385687E450483AE19590A6FB4383074DF21FEF58B2B7CDE39FAF7C4DD84E34B48A8D5A0463EA96C0E61E2646BD4E60BA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/858128210/?random=1703780547888&cv=11&fst=1703780547888&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&gcd=11l1l1l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&hn=www.googleadservices.com&frm=0&tiba=Download%20PcAppStore&auid=1615816129.1703780548&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://privacy.gatekeeperconsent.com/consent_modules.json
Preview:	{}

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4864
Entropy (8bit):	4.788116350233764
Encrypted:	false
SSDEEP:	96:WH6k2MDRF81EHMGWw7AKh10LYiJgoc3bWGxH47Cb4LPA:+J2qRFxMlw1mLxO3bWl7Cb4LPA
MD5:	6EBDAD39FBE9CE29CBC5FA23DFB682CB
SHA1:	921971EA994A5234D6323EEA4E65AAE28AC56B65
SHA-256:	B1330AFCE12B4FD071B3F30D2B1957E10F1E6AD5CA107A183205872ED5D1F4FC
SHA-512:	34B8E859D1F79421E79C56065F7B9C5FB0EBD5544D958007A9C897E637A4768B09BBBBA9081D02056A6B1A30917A07DC6EFFD48FEA37733DE1E09EC909CE7D55
Malicious:	false
Reputation:	low
Preview:	<svg.xmlns="http://www.w3.org/2000/svg".xmlns:xlink="http://www.w3.org/1999/xlink".width="200".height="24">.. Define SVGs -->. <defs>. facebook -->. <symbol id="facebook" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M17,2V2H17V6H15C14.31,6 14,6.81 14,7.5V10H14L17,10V14H14V22H10V14H7V10H10V6A4,4 0 0,1 14,2H17Z" />. </symbol>.. twitter -->. <symbol id="twitter" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M22.46,6C21.69,6.35 20.86,6.58 20,6.69C20.88,6.16 21.56,5.32 21.88,4.31C21.05,4.81 20.13,5.16 19.16,5.36C18.37,4.5 17.26,4 16,4C13.65,4 11.73,5.92 11.73,8.29C11.73,8.63 11.77,8.96 11.84,9.27C8.28,9.09 5.11,7.38 3,4.79C2.63,5.42 2.42,6.16 2.42,6.94C2.42,8.43 3.17,9.75 4.33,10.5C3.62,10.5 2.96,10.3 2.38,10C2.38,10 2.38,10 2.38,10.03C2.38,12.11 3.86,13.85 5.82,14.24C5.46,14.34 5.08,14.39 4.69,14.39C4.42,14.39 4.15,14.36 3.89,14.31C4.43,16 6,17.26 7.89,17.29C6.43,18.45 4

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 17, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	267
Entropy (8bit):	5.629769605350647
Encrypted:	false
SSDEEP:	6:6v/lhP9ijOSf/KzeJshw2XwxD232lGnslFiaZaPWUysup:6v/70ixNwyoD2avieaPWl
MD5:	40D76E2F4035820A4725A3673D38B573
SHA1:	3293E90AD3C12689A1E9632FA42E4342F0541836
SHA-256:	CA867E759772EEEAA693CF49D0D9436BC971835735B769C811364061C0FEF440
SHA-512:	5D46D8089E1A15F1F3C0C7C7E84AB87E860301D5F965E6F34C117AF4BB1CC7ABEA09E897B9988D09D429121117F429C820CC628ACBE0394928655D2FAC036CB7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Fg....3PLTE.....................................................F.....tRNS._..O.. .?...0t.i...wIDAT..m.[.. .Ey.i.._m..dM.C....S'>..$.....\..{0...`.......B..6.F....A...4.6.b.,{....v_......?.n..`..c......T....'....7.F....IEND.B`.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2980
Entropy (8bit):	7.883955905859089
Encrypted:	false
SSDEEP:	48:0QUbu84U/vKO4Zqi/YEFWroYDx4YknPBic7W32lxkTpLkfhKm/Gkz:0QfU/COahY/X94xPBLS2lSRLO
MD5:	6098EB6327B309924273EB752E1AEA22
SHA1:	A88C791BBE2105EA004F808475FBBAB9594A47B9
SHA-256:	7F1343CA74E009A2949392688B30D4A9A8F7F642AE4B593C9FDC76284531B049
SHA-512:	D9E404A77CC37A67A21DACFCA66DABB38C50439B16F915725791D1D42600EA8465E32C4EAD5879A85167E24B6C17D4914A5652D86DC37B51DA2C277486C18DA3
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/abg/en_bl.png
Preview:	.PNG........IHDR.............z..X...kIDATx..ZYK\Y.n.1....("(..""Ape.2.N......<.Eq.%!!!.DEQDM....q.\...........a~@M.59mw...u.8..{.T.9..N..9<<$.T.......h.@?...4..T.b.i.....m...:T.KH....D....S....,...v....2..<.AFu.J..&..`M.....I3.UD......K...4??O...tpp..D....@......=cp..../K.T.....=.......tU._,...PZZ.....R..H7o...8....Wtt4.{.>\|.p.s.Z.@..:c@.Mi.....2..z.q......[.......Nm....m....a...=.D..Q^^.$.........H{{{.............kKc-. NX.U....@][z&...d.#..r.....#..........*;---l..G..D.uuu......`....t...5+{.~.J..?&;;;.y....y.G#W...,...\|t:.Yv.....N.....qpa..w..]y..........m.}.....-..r.g.../J.../...Q..g9..r.6O..O.>....>~......W......9...O.L........+TVV../itt..v{{.z{{.......ipp..p[:......{.....tmm.....444d6.q.XZZb............".m..JN......^.>\|..qz......}rr...:::(99."##....7........\'...RRR..BP...(A....V\|\|<=}.....$.......dm-...8.Jn....P..Q....q........j^.i..............s.D.}......\|...$.Y..........@...c,...=??.T....p./n{l)...$.....l+..f.L8........".g..k.aRR..8

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1213
Entropy (8bit):	4.312328151743703
Encrypted:	false
SSDEEP:	24:t4po/yLmie8JlbNaXcrNN8cIcVs1GCnyhsBmlx8W5/VL0Iy1aF:VTUbNaXcxN8cIcsRssBmd/RQ1m
MD5:	AB7D2E2A5C8EEC566BF58E5EADD1A90C
SHA1:	F196F75BA5C0F836948ABFB22E70276B83072395
SHA-256:	4E96C317406E2C84CA0A065CF8F77F26C9808C9C2E6258EBEA8814B18D6F5EA3
SHA-512:	D715E916358C680A9347721546187E069FB0A9580EA08E75C8BD539736FB1D039B6C1ADEBA65446951024A6E4403CE1D5CE58E8EDF2BDA7B03711D7571CBD3EC
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/tf_1_time_links.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab6"><path class="cls-1" d="M81.82,36.55l1.63,1.63-8.63,8.6,2.41,2.4a2.26,2.26,0,0,1,0,3.22L75,54.66A24.91,24.91,0,1,1,30.27,76.47a24.81,24.81,0,0,1,0-19.35A24.39,24.39,0,0,1,43.53,43.85,24.9,24.9,0,0,1,65.34,45l2.26-2.26a2.26,2.26,0,0,1,3.22,0l2.41,2.41ZM48.5,50.87a2.21,2.21,0,0,0,0-1.73,2.14,2.14,0,0,0-1.2-1.24,2.21,2.21,0,0,0-1.73,0A20.56,20.56,0,0,0,34.32,59.15a2.21,2.21,0,0,0,0,1.73,2.14,2.14,0,0,0,1.24,1.2,2.37,2.37,0,0,0,.85.18,2.18,2.18,0,0,0,2.12-1.41,15.89,15.89,0,0,1,8.74-8.74A2.28,2.28,0,0,0,48.5,50.87Zm33.6-16.31a1.08,1.08,0,0,1-.78.35,1.12,1.12,0,0,1-.81-.35L77.3,31.38a1.15,1.15,0,0,1,1.63-1.63L82.11,33a1.07,1.07,0,0,1,0,1.59Zm2.79-5.13v3.39a1.13,1.13,0,1,1-2.26,0V29.44a1.13,1.13,0,1,1,2.26,0Zm5.34,1.95L87,34.57a1.08,1.08,0,0,1-.78.35,1.11,1.11,0,0,1-.81-.35,1.07,1.07,0,0,1,0-1.59l3.18-3.22a1.15,1.15,0,0,1,1

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	4.445616470476398
Encrypted:	false
SSDEEP:	24:t4po/yWDcKjo//dzoX5U7837D6H5F3wVchiPJ43O4H413dOV:VhTjqOe703UwVciZS
MD5:	480A62AA64D0A5BA67C343FB6ED2E319
SHA1:	695D992D05D09C9C1E220015BC7B7F08F40CE6AB
SHA-256:	4D9CCF2F203E169C71FC4AB2310C23CFB469CB92AFF7B9D6D1422ECAA9AA39E4
SHA-512:	3A5AF4886945D45E6C854B090B2E8BB9DE3DA6390591DD50DF5BF05F7C64944F770FD16A63A26377C9334972C515034A14E7C097695933EED99D15EBA3F60DDB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab11"><path class="cls-1" d="M74.22,63.29l-3-3a6.83,6.83,0,0,0-9-.55l-2-2a6.83,6.83,0,0,0-.55-9l-3-3a6.75,6.75,0,0,0-4.81-2h0a6.75,6.75,0,0,0-4.81,2l-1.31,1.31a6.81,6.81,0,0,0,0,9.62l3,3a6.83,6.83,0,0,0,9,.55l2,2a6.83,6.83,0,0,0,.55,9l3,3a6.75,6.75,0,0,0,4.81,2h0a6.75,6.75,0,0,0,4.81-2l1.31-1.31A6.81,6.81,0,0,0,74.22,63.29ZM54,54a1.77,1.77,0,0,0,0,2.5l1.16,1.17a3.27,3.27,0,0,1-3.93-.51l-3-3a3.27,3.27,0,0,1,0-4.62l1.31-1.31a3.27,3.27,0,0,1,4.62,0l3,3a3.27,3.27,0,0,1,.51,3.93L56.54,54A1.77,1.77,0,0,0,54,54ZM66,66a1.77,1.77,0,0,0,0-2.5l-1.16-1.17a3.27,3.27,0,0,1,3.93.51l3,3a3.27,3.27,0,0,1,0,4.62l-1.31,1.31h0a3.27,3.27,0,0,1-4.62,0l-3-3a3.27,3.27,0,0,1-.51-3.93L63.46,66A1.77,1.77,0,0,0,66,66Z"/><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,2.08V74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	5.264870788900711
Encrypted:	false
SSDEEP:	3:YA0fRGPRXN1/9BywT2I/9cXpZNmjVEHQMw14:YAmRAd1byqcZZR/J
MD5:	D5CE39E5E7A355423E28BA0CE48A663A
SHA1:	C46C7642DB466883243C921497ADED8900867C51
SHA-256:	8C3996D3081BA3F7207D860B8E1DDA0B349B7C0AEA72C996CD3AAB307DAFB3CA
SHA-512:	C586D083BBA85A43001ED6218E811C54E36DC4D7A111D8BFC836E946B5B07A6665D991FB6119B260705E0DA45BD7067D7F7F579AF84EEF9FB0AC84FD32D6AF2B
Malicious:	false
Reputation:	low
URL:	https://oajs.openx.net/esp?url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&rid=esp&cc=1
Preview:	{"esp":"eyJpIjoid2h1VkZzNDdTQnVtMXFNMjl1SjFIZz09In0=","i":"whuVFs47SBum1qM29uJ1Hg=="}

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (516)
Category:	downloaded
Size (bytes):	3991
Entropy (8bit):	5.21715342895923
Encrypted:	false
SSDEEP:	48:35Y2zQVZJtGbG4GGMnxwFWGLwFOGZwFJGbMRBGy5GQ+GRMpGKGnGxMnKwkGUwcGF:pbzQqMHMJMDMnMS
MD5:	981B2A09F162F2792240C961ED87E0C0
SHA1:	3F8B989A9E81DFE8DF72C43EB7993674C20312C4
SHA-256:	128B4678C0B09A58B8AADD760BF8B2EE15355EFB1A8C32BAEC9F38F06B408BFB
SHA-512:	B8F23CC0426E443709C87EDCDFBE2F8BA95BF108394BC3A68F91B070642DB95FBADAEE23AB2B18B7B2D015ED00A3526EFCBF801AA89D4C92C52E44D657061677
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/vpi5heu.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . mundial:. * - http://typekit.com/eulas/00000000000000007735ee06. * - http://typekit.com/eulas/00000000000000007735ee08. * - http://typekit.com/eulas/00000000000000007735ee0c. * - http://typekit.com/eulas/00000000000000007735ee0d. * - http://typekit.com/eulas/00000000000000007735ee0e. . . 2009-2023 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2023-08-25 21:02:32 UTC"}*/..@import url("https://p.typekit.net/p.css?s=1&k=vpi5heu&ht=tk&f=47864.47865.47867.47868.47869&a=45407236&app=typekit&e=css");..@font-face {.font-family:"mundial";.src:url("https://use.typekit.net/af/7540d0/00000000000000007735ee06/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3") format("wof

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65469)
Category:	downloaded
Size (bytes):	1060123
Entropy (8bit):	5.885029173763929
Encrypted:	false
SSDEEP:	12288:9ArJWP/wskXFCEjHvAMCTdTvbBp/ItGYdL4d4QnuY0+LD:9AywskXocfCTdTvzCGYdL4o+P
MD5:	ED8C0D744114199DEA69D76962A61146
SHA1:	9A62C4ED22435CBE799BA8C6BB2422961F708A90
SHA-256:	E63E816369E01CC8FEA9D5325E870E3D93354C57F81B11EE0BE0D964D55D9634
SHA-512:	D367A59AC4C37972078F9C7A9965BBBF4505CB4FD05D7371B9F8284EF4B0FCC3AF5ECFB79DB1FE169020EF7AD8A492E5BA46C6C902D4C1EF6F16349A19F99B20
Malicious:	false
Reputation:	low
URL:	https://app.termly.io/embed.min.js
Preview:	/! For license information please see embed.min.js.LICENSE.txt /.!function(){var e,t,n,r,o={14369:function(e,t,n){"use strict";n.d(t,{$6:function(){return d},OV:function(){return s},Qe:function(){return c},X9:function(){return l},gb:function(){return u},wI:function(){return a}});var r,o=n(32924);!function(e){e.FORMAT_ERROR="FORMAT_ERROR",e.UNSUPPORTED_FORMATTER="UNSUPPORTED_FORMATTER",e.INVALID_CONFIG="INVALID_CONFIG",e.MISSING_DATA="MISSING_DATA",e.MISSING_TRANSLATION="MISSING_TRANSLATION"}(r\|\|(r={}));var i=function(e){function t(n,r,o){var i=this,a=o?o instanceof Error?o:new Error(String(o)):void 0;return(i=e.call(this,"[@formatjs/intl Error ".concat(n,"] ").concat(r,"\n").concat(a?"\n".concat(a.message,"\n").concat(a.stack):""))\|\|this).code=n,"function"==typeof Error.captureStackTrace&&Error.captureStackTrace(i,t),i}return(0,o.ZT)(t,e),t}(Error),a=function(e){function t(t,n){return e.call(this,r.UNSUPPORTED_FORMATTER,t,n)\|\|this}return(0,o.ZT)(t,e),t}(i),s=function(e){function t(t,

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14441)
Category:	downloaded
Size (bytes):	309790
Entropy (8bit):	5.561023382176239
Encrypted:	false
SSDEEP:	3072:Ez4a+mEdZAlCIWYMuUyO1jhaypDDMlM66OhoO7DfFWkEt48rIyvEWRq94X:84BfIHMuUy4oA66OhoO7DfYdtVrIyvL
MD5:	5DFAA1C458C104C5696BE5D93D059BBD
SHA1:	B1CD9F73B8E123822776181D1B6DE09106A0A9D9
SHA-256:	62A9A4433E711E019E154604EB627486AD94F50309E4B6DD33B3730BD72AA392
SHA-512:	C807202AF124C8D9B58F926F46DED34BE20B4DD878E0CD7BF67B58A159D68F44C89E1A061CCED07E8C1F608F0C9825D51AB109F51F397F679538499D70843274
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-VFQWFX3X1C
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":38,"vtp_rules":["list","pcapp\\.store","pcappstore\\.download"],"tag_id":17},{"function":"__ogt_ga_send","priority":28,"vtp_value":true,"tag_id":19},{"function":"__ogt_referral_exclusion","priority":28,"vtp_includeConditions":["list","veryfast\\.io"],"tag_id":20},{"function":"__ogt_session_timeout","priority":28,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":21},{"function":"__ogt_1p_data_v2","priority":28,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR"

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	37035
Entropy (8bit):	4.925648658318897
Encrypted:	false
SSDEEP:	384:wtcGGhB6/eFMm3lnAxCpph5wYgr6b8MdeIG6uXg:jbH11m5rgL
MD5:	FAC9F3F3AD16BF60363BA05B27AF4403
SHA1:	DC0D08CD0C3ED7B286064861CC2241C1DA78827A
SHA-256:	1FDD0B259B84F4EC7478D7FADABF0514DC8952AE2CF24DFA9520CD6475B91A7D
SHA-512:	CAC1266ECEE200CAB6D88A57438479DE26D025822946F36FEC7EE5428E149CA545E085A0FB7F89AC87D775F39AF309D57E6C6C11E0163C5892DB40020E8B37D6
Malicious:	false
Reputation:	low
Preview:	<svg.xmlns="http://www.w3.org/2000/svg".xmlns:xlink="http://www.w3.org/1999/xlink".width="1656".height="24">.. Define SVGs -->. <defs>. search -->. <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <path d="M18.65,17.03l-3.67-3.68A5.942,5.942,0,0,0,16,10a6,6,0,1,0-6,6,5.9,5.9,0,0,0,2.72-.65l3.81,3.8a.942.942,0,0,0,1.32,0l.8-.8A.942.942,0,0,0,18.65,17.03Zm-6.99-2.74A4.537,4.537,0,0,1,10,14.6,4.6,4.6,0,1,1,14.6,10a4.5,4.5,0,0,1-.64,2.33A4.6,4.6,0,0,1,11.66,14.29Z"/>. </symbol>.. sort -->. <symbol id="sort" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <rect x="11" y="6" width="10" height="2"/>. <rect x="11" y="10" width="7" height="2"/>. <rect x="11" y="14" width="4" height="2"/>. <polygon points="8 6 5 6 5 15 3.05 15 6.5 18.45 9.95 15 8 15

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	246115
Entropy (8bit):	5.586679707910326
Encrypted:	false
SSDEEP:	3072:E1s+dZAlCIWYMuUyO1juzypDDMlMT6LhA9DfFWk458rIy55qd4w:6XfIHMuUy4qAT6LhA9DfY3irIy58
MD5:	9D3E05019D550773A8EE7687596988DD
SHA1:	572E9DC0CCC8AE9EB0400D104974511EE1D9AF5F
SHA-256:	FC1DE87799242EFA632A9FB96A1728636A76D924C70959DA8443C633F0E0E6E3
SHA-512:	A8DA686F2FE2338F4FA3CA91A6E331F832CEA3EB9416A8BF0EAE8FF1BC3812854DA2F77433B2016DE32D50192AFFC28D13FD52D06D89DF3F4C8F7EB161432176
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-2RW30JETPH&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":9,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":9,"vtp_includeConditions":["list","mediafire\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":9,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":20},{"function"

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50296, version 1.0
Category:	downloaded
Size (bytes):	50296
Entropy (8bit):	7.996029729235154
Encrypted:	true
SSDEEP:	768:VkKvXN/LIhca+0gRDXK203kx+EFn5LzZeN/I3jHDCenVVNHcueXK5p3znAZBZdfE:VkKvyh107K2EW+E1eN/I372qjWBZdwe2
MD5:	B02AB8B0D683A0457568340DBA20309E
SHA1:	E18C3B8737970D37BE1BB85B0F588303A89E63BB
SHA-256:	0D8601A776B7DC777CD23BC42392D05A43DF0D6402328E8913B58811083B513D
SHA-512:	509792D83FE043CC84C560548A6AF42E43C7D94EEC0CE7B9C4B6C28FCA70C49EC77E65320D063A91209EEE7D363E03C7526CB2C2AA807766C5D213D3FC3174F3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
Preview:	wOF2.......x......U(..............................B..z..n?HVAR.!.`?STAT. '...@+...8.../V.....h.....>.0....6.$..x. .....c...[.EqET..v..F.&.....r...(.]p..,..[p......d.S.}....'&.1..xo....U.. ...Q...CVU.X5}$..bK........l~...-1I..nu.Vb..ZJ.u..Z.Nk'.e..?.....&.........N...$...........:..]..x]T...n.L....`...!JT.3x-....xq]..EEH.S..q....7.t....t...J.].A.y...h..].,..{i....P.Z.\.5....6}9....?......Z.e..e..Q...k....K..=....hn..n..1........5`.#.c...%..%.bRm.&.M......#......73.....q.....{...3.%.....Q"Q..b....nTy.....,.lG..b'....V=.....g..DNO#%.C6.K..Q]P.GfU...q.0..Brw.P-.\|....s...0....Z..1..n@B.....k.w..O..'.D!....J....M..._.Y....X.0.s..H...5...2S..S......e.....0..X=...n....HG.1.#N[J........$h..PA.;.^.?{."...)W.twu.N...h:......9....Q.R.L..KO.&E...6ky":.b!.2.(J..BR@LPDE.#.b..v..p...v....wU......Nw'.<...S;.....'y/..b3..].v{.].N\.^...n.O\.vk........ ........Vd8?.n..$h[Z.}.._w_..N.O.O\..ne..@Bl2.Q[W...;...Z?...<.T.X".@...AZ......\..%..h...[....3..4,[.3HK_..8.v...s.)v.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 112 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	583
Entropy (8bit):	7.500296490028757
Encrypted:	false
SSDEEP:	12:6v/7lxBfCFESQ78VWQlsyw6Px9/F78CJNst7TiPzJlqHDe:sfyESQ78rCyw6PXF7ZXLl4e
MD5:	E0ABC4FEA89D2C5153B73CD02AC5BA13
SHA1:	00465EF774805C82FB5B8A40B743F7B1A1D1A7D6
SHA-256:	F917A9105C311331B1D40F4D2BDBF11233C1C465616C1A9C46232F451463B061
SHA-512:	202AA7F925729CD1FE7F7E66B4217D90CD05B5FB8DDE0B3991461F88AFA11C1744A3F56974296EC155733669DB44D96B6A84593A76F2E5BE9C63016E3150F04C
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/footer/social/footerIcons.png
Preview:	.PNG........IHDR...p...........;j....IDATx..MN.1..=.p..\...0.......d..%..nI.........\`..p...^......X...I....>....B)%x......D. .E.p......l.".s.L.....@?.n5q?........b..x..C.......q.....<C.,.A..@E.O.pY~......oP;Q`..D..@. ..H. .M`.(...&S..(p.:F....(..Y72gb...Di..y....l@...#....T..d.........Z.2o..B+.=pe.%.8.-y...'..h.../.!...L...f..#...../.3..2...T\|,bvG.ddP..9.....y'..<R.8C...".Qp.3.N .....Q`."..t...w. ...h.K_.>.(o.{..(`(.{k....>.@s.g.y+.8.L.[..V.U.@V.....u..&.M....XZ.4.....o.#......f5..Pv..D... ......~/g`....m.p..0r.9W...P....8I.....D....6.2..p..}.....IEND.B`.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	592
Entropy (8bit):	4.754171518329006
Encrypted:	false
SSDEEP:	12:trZoHIuCkXlrLhBhXUfUyrPnIgH7EFxkAHFShllR:ttoHIu/rU3HakaShllR
MD5:	F90265042F4A7C54D64A029B5546D89A
SHA1:	E134B0CCE9B03E350241570432EFA28A6CA2DE5F
SHA-256:	E7FE2A19CEBA78D9632432E3FFEA94DC13BED034EA3E2054C8A9841F5995E122
SHA-512:	FBD68FAD52BB605AE98106FC7C0DE703AC3AA8C6530CB623A048C8AA888B201154043E9BF5A322A586F25DDA3A44E057CE85FFFDA748A5565D73FBDB025ECAD6
Malicious:	false
Reputation:	low
Preview:	<svg width="44" height="30" viewBox="0 0 44 30" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M22 9.28562V20.7141M22 20.7141L27.4545 16.9046M22 20.7141L16.5455 16.9046M42 20.7141C42 16.5063 38.7438 13.0951 34.7273 13.0951C34.6844 13.0951 34.6422 13.0955 34.5995 13.0963C33.7176 6.63425 28.4122 1.66663 22 1.66663C16.9152 1.66663 12.5276 4.79049 10.489 9.30623C5.7492 9.63122 2 13.7614 2 18.8092C2 24.0689 6.07015 28.3333 11.0909 28.3333L34.7273 28.3331C38.7438 28.3331 42 24.9219 42 20.7141Z" stroke="white" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.085055102756477
Encrypted:	false
SSDEEP:	3:x3rMl:drK
MD5:	E1B468C52D580BB0C563F7DDAC593474
SHA1:	D41AF16632A19F7BEB11A6471387F576EB3D3BA7
SHA-256:	179F1CEA3A0D7D6A99E2A7C10A0B27AE9831C71978051A3EDB0743203DA8C10A
SHA-512:	95E27DC11252999AF74B28CF6D96EDAB1AC69861A59BF72B6E2DFC63E790FA9D9D43DCC57E68622BD9DA021948F3E92EBCAA8891D32285C9EB78F82AE8CD6778
Malicious:	false
Reputation:	low
Preview:	missing_event

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3357
Entropy (8bit):	4.584804289234705
Encrypted:	false
SSDEEP:	96:/cGxX80qHIM6F+jNGDey1nd7KdQZnrJVeNo1DU:TbhXq7xQZ/eUQ
MD5:	B3BB5BF9102F80054D199F293046DB84
SHA1:	DA895FAF7E3BE63D6F966C5651068954483F74DD
SHA-256:	8539C91AE0A82F8CAB27D481EA38AC4E66D1E5B36701FE295BCBA4399B9255BD
SHA-512:	563AC8D5546E50ACB2E895685D1CB0EDC4EDF50452E8629C46E7CB18460C714B66366658F24F0E705D1AB631F4E17E0947083F7DE854A32B4E1E1298DC5F29C6
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42"><defs><style>.cls-1{fill:#07f;}.cls-2{fill:none;}.cls-3{fill:#fff;}.cls-4{fill:#0e2866;}</style></defs><title>mf_logo</title><g id="full_color"><g id="flame"><path class="cls-1" d="M21.91,9.26a51.47,51.47,0,0,1,9.33,1c2.91.54,5.85,1.55,8.83,1.54,2.28,0,4.12-1.59,4.11-3.53S42.32,4.7,40,4.71a13.35,13.35,0,0,0-3.9.65c.33-.24.66-.48,1-.69A26.14,26.14,0,0,1,52.19,1C57.81,1.26,63.66,3,68,6.72a19.89,19.89,0,0,1,6.62,17.82A19.75,19.75,0,0,1,62.45,39.62,24,24,0,0,1,48,40.14c-6.21-1.57-11.64-5-17.48-7.53a46.86,46.86,0,0,0-10.57-2.68H20a9,9,0,0,0,4.11-.7c1.73-.83,1.72-2.83.82-4.29-1.07-1.74-3.23-2.45-5.09-3a24.36,24.36,0,0,0-10-.49A15.06,15.06,0,0,0,3,23.94,5.67,5.67,0,0,0,1.2,26.16c3.08-8.54,9.2-7.58,13-9.92a2.16,2.16,0,0,0-1.57-3.93,7.24,7.24,0,0,0-2.92,1.46l-.86.65S11.9,9.26,21.91,9.26Z"/><path class="cls-2" d="M24.93,24.82l0,0,0,0Z"/><path class="cls-3" d="M24.84,24.73l.06.06Z"/><path class="cls-3" d="M57.3,1

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 21, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	232
Entropy (8bit):	6.210134866687666
Encrypted:	false
SSDEEP:	6:6v/lhPforSyb/6TKu0sZdQdolpC+gIWfwSczv/tVp:6v/7orP/6TKuVzQdEyhfwSczt7
MD5:	315D507ADE0BD7367A65F05234AA9EA0
SHA1:	1423CFEC33DD614897F94F9E13D07885309096B2
SHA-256:	C0E500135E4ABC7A069D3656F5C5BDB4F3C5D0E869950EBC6E6E4A6D2130991E
SHA-512:	E5BF5CAD247F54C38AB924DB564FC4A1BF59D58B602D04161AF1337AFD6679003ECE052B902DAAAA0B5BCDA1CFBD9DED58202A06C07D14C3B0749C6E37E57E90
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/cross-icon_2x.png
Preview:	.PNG........IHDR.............[9......PLTE.....=..@..>..>Bmu.....tRNS..@.MR......pHYs.................tIME.....7'#.6....\IDAT..e....0.C..@.....\...gR....W^J...gl0h.};`Q7...,x.S.KJ}Pa......P.&....}.....y2g..^....!....2.....IEND.B`.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2641), with no line terminators
Category:	downloaded
Size (bytes):	2641
Entropy (8bit):	5.899302399688678
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08A54GMxj1XFxb9mxZOgQxO2:wsbSUtJfxrqLWWWdV6j185SxXxb9MZW7
MD5:	A9D4FD6371D32399D6919BD4A9BF2E99
SHA1:	10F0FB1AB2ECB1149DA0D3C332D78CF1600D443C
SHA-256:	0F6B7905380303B67D66AE2E5B0D48EEEE443324A7B1651F40F8B1222602BCFF
SHA-512:	769A1DE74BE7F644FAB918895158988551D595185FE17348A65826EE07353E38B9AFB6167060A6F00A05F16177E12BE9CD5FC8EE52011D999B492D4DD30415D5
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11219589166/?random=1703780591807&cv=11&fst=1703780591807&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9123342550&gcd=11l1l1l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fconvertwithwave.com%2F%3Fsrc%3Dd-cp20278471669%26ob%3Dobgcobedobem%26dvc%3Dc%26k%3Dfile%2520converter%26crt%3D677032990697%26adp%3D%26plc%3Dwww.mediafire.com%26tgt%3D%26sl%3D%26cpd%3D20278471669%26iid%3Dwav-cvt%26gclid%3DEAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE&ref=https%3A%2F%2Fwww.mediafire.com%2F&hn=www.googleadservices.com&frm=0&tiba=Wave%20Browser%20-%20Efficient%2C%20Intuitive%20and%20Personal%20Web%20Browser&oid=af779c44-13ad-47a2-ad3d-9786811ff14d&userId=af779c44-13ad-47a2-ad3d-9786811ff14d&auid=59812670.1703780592&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&vxii_pid=12&vxii_pid1=10067&vxii_rcid=615d9f76-6c39-4dc6-b81a-085a08461685
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (976), with no line terminators
Category:	downloaded
Size (bytes):	976
Entropy (8bit):	5.162779483652769
Encrypted:	false
SSDEEP:	24:IZT72fU6EzzOWS2q9MdIOlwufqBySRvu8XwKD/u0MFC5Nz:gnKXY2MdV3SvdX3u05H
MD5:	1CC8F6676B659B180458D516866C84C9
SHA1:	50F3AC9EDF56668F955D180E3001991D5979E169
SHA-256:	7AF805FC2BDA263E9826C3433ADB07B0E8881AFECB62D611961D767D68C3AC05
SHA-512:	A7D4A3B8FAEBA43D85024D65B79E1B9B8ABC8F91D423556F5AAF94CCD0E707A6240AA38A289487D35B068AF551B677A1BB56EF56373E25B4A8317FAB1EE2D5D0
Malicious:	false
Reputation:	low
URL:	https://go.ezodn.com/detroitchicago/tampa.js?gcb=195-8&cb=6
Preview:	try { !function(){var i;__ez.vaep=(i=[],{Add:function(e,t,o){if(__ez.dot.isDefined(e)&&__ez.dot.isValid(t)){var d={type:"video-ad",video_ad_impression_id:e,domain_id:__ez.dot.getDID(),t_epoch:__ez.dot.getEpoch(0),data:__ez.dot.dataToStr(t)};o&&o.hasOwnProperty("impression_id")&&o.hasOwnProperty("ad_unit")&&(d.impression_id=o.impression_id.toString(),d.unit=o.ad_unit),i.push(d)}},Fire:function(){if(void 0===document.visibilityState\|\|"prerender"!==document.visibilityState){if(__ez.dot.isDefined(i)&&i.length>0)for(;i.length>0;){var e=5;e>i.length&&(e=i.length);var t=i.splice(0,e),o=__ez.dot.getURL("/porpoiseant/lemon.gif")+"?orig="+(!0===__ez.template.isOrig?1:0)+"&va="+btoa(JSON.stringify(t));__ez.dot.Fire(o)}i=[]}}})}();} catch(err) {var hREED = function(er) {return function() {reportEzError(er, "/detroitchicago/tampa.js")}}; typeof reportEzError==="function"?hREED(err):window.addEventListener('reportEzErrorDefined',hREED(err), {once: true}); console.error(err);}

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4554
Entropy (8bit):	4.52616327995327
Encrypted:	false
SSDEEP:	96:QJr5xEhb8548CdndToY8HFU0CGfODMQwNUSt:QJr54SuYlUbu
MD5:	BCD95CFB6B9474DBA955AAB2CFE0432B
SHA1:	49005DB192F26F706C5CF342B277F95D4978442C
SHA-256:	1A0EC73A3CA7F354865D6B95401C50627FDF5A9B0DA763A6F75FA818FD775B55
SHA-512:	4AF3717E2053C23C155A6003A9541304ADA4912C9134511D9CE3DF21EAE17A9D240C5BAD73CFCBE2728724DD804A9593DAA1B9B97CF8F303060689460D9596C7
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/header/mf_logo_u1_full_color_reversed.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42">. <defs>. <style>. .cls-1 {. fill: #07f;. }.. .cls-2 {. fill: #fff;. }. </style>. </defs>. <title>mf_logo_u1</title>. <g id="full_color_reversed">. <path id="flame" class="cls-1" d="M21.9085,9.2571a51.46,51.46,0,0,1,9.3283.9546c2.9084.5369,5.8493,1.5476,8.8277,1.5384,2.276-.007,4.1162-1.5889,4.11-3.5334s-1.8559-3.5149-4.1319-3.5079a13.3557,13.3557,0,0,0-3.8961.647c.3277-.2425.6626-.4753,1.0061-.6949A26.136,26.136,0,0,1,52.19,1.0269c5.616.2308,11.47,1.9781,15.7643,5.6908A19.8917,19.8917,0,0,1,74.5752,24.54,19.7456,19.7456,0,0,1,62.4484,39.6153a23.9951,23.9951,0,0,1-14.45.5274c-6.2135-1.57-11.64-5.0474-17.4846-7.5341a46.8579,46.8579,0,0,0-10.5715-2.6793l.0571.0015a8.9447,8.9447,0,0,0,4.1139-.6975c1.7275-.8285,1.7225-2.8315.8214-4.2928-1.0708-1.7366-3.2282-2.4456-5.0923-2.9507a24.3621,24.3621,0,0,0-9.9558-.4889,15.0645,15.0645,0,0,0-6.8543,2.4348A5.667,5.667,

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	953
Entropy (8bit):	4.727177358640599
Encrypted:	false
SSDEEP:	24:t4po/yWTVchiPJ43O4H413dO6qS7tprbR7FYP:VFVciZ5q8p5JG
MD5:	C2387384DCB9CA892F2124BB05EF0BA0
SHA1:	FCDAD37E45375884BEA88802F1381A15297C7160
SHA-256:	84D163BB68CE0DF35852C6F242353DCA8089CFFA2431BD6413D6F46C7B7FB368
SHA-512:	2C26D90D52F534B7A09E48029A1FD7DA4AEDF40653B014DF31ADB775FA56B067362EF62E060ED0AC0CE047EF99662FB31ABDC5B96C640EEA099AA2B87CE04A4C
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/pf_direct_download.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab12"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,2.08V74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,2.4,0,0,1-2.4,0L34,76.39a2.41,2.41,0,0,1-1.2-2.08V45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3A2.4,2.4,0,0,1,60,29m0-5a7.4,7.4,0,0,0-3.7,1L31.51,39.28a7.4,7.4,0,0,0-3.7,6.41V74.31a7.4,7.4,0,0,0,3.7,6.41L56.3,95a7.4,7.4,0,0,0,7.4,0L88.49,80.72a7.4,7.4,0,0,0,3.7-6.41V45.69a7.4,7.4,0,0,0-3.7-6.41L63.7,25A7.4,7.4,0,0,0,60,24Z"/><path class="cls-1" d="M48.6,61.55l10.16,8.12h0l.05,0a2,2,0,0,0,.29.18l.11,0,.28.1.11,0a2,2,0,0,0,.39,0h0a2,2,0,0,0,.39,0l.11,0,.28-.1.11,0a2,2,0,0,0,.29-.18l.05,0h0L71.4,61.55a2,2,0,0,0-2.5-3.12L62,63.94V47H58V63.94l-6.91-5.52a2,2,0,0,0-2.5,3.12Z"/><rect class="cls-1" x="43.01" y="72.01" width="33.98" height="2"/></g></svg>

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31445)
Category:	downloaded
Size (bytes):	102861
Entropy (8bit):	5.47882858741267
Encrypted:	false
SSDEEP:	1536:2NHBKMPZpV8m1b2PZvQvS/rEye+uttaSWgY5Rjlb5nDUrFrPhO103L5M/+:qAU2PRQK/Yy/ut9WJ5RjRdUrFVtK2
MD5:	9E56CB5ECB723C8DC4CA44E166053466
SHA1:	1456821FF493C15BD0447FDD78D3A8039123E53F
SHA-256:	F33F6A0454B8702F25DA3736B82EBC84F16B41D75D4F8034886D954F89B8FB93
SHA-512:	5D813ED4382FCA15BA4328D8353CD3F0156941C2E0C455D8A8D468DE754CC750D314FB457EC3F070BB2F27FDA257AC34FF75F52E19FE7E09E4A02E75A1A5F1AE
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2024
Entropy (8bit):	7.890621627952746
Encrypted:	false
SSDEEP:	48:2QQquroacP263PKBDxk47F/GNoU3DVcePXx2vq3l7apS:2Uurr63PKBC4J+oSDVtPUy3lES
MD5:	E23CDD516B2E6CE177B098D5B982D501
SHA1:	FA053B4ABDABC4D3DE0FA7E2E06BA9B936BC5293
SHA-256:	90AB603DED429F5EBB7FCB6D317A3898C55B67DEA60A16AA792FA3AD8D39E541
SHA-512:	12C5D728A1AF0FB5BF8F7D233E9256E71FA41B3F6CBF83807802DB787E2D5BF169D153F28B73F0F451769EBB243E5A8929D62CFB30D25CEBF10185B86D4792CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....uIDATX...kl............lcc....y....E@..CcQ.D)I.&.T..T....)..5R....."U.mZA...+T.-....1.B.8&.0..1xm..<N?.=k..u..3......=3s.....P.Z.pe..2`.0.T.....].N!......w....<..~M1A.9.Q.....@~.d.@...t>.kI.!..P..yk...K.jZ...."..jh\........o..=.3.?..'F.@..k.L...,@5.V#..J.QR....g.. j./R..NiI1..9./>.?.......{{..8x...9..u.\|......vlgN .o~.........?'B7..j^U...TSk5n. ..$.=.+.......)...W.n.Bg...X..A.1p.2\}@5.N.P.Z.4..]..$.......`F..n.z.[dger.Z.'Pk/O$...j....2.h.O.....P......P.8...\...#"D.V2\..>'.".j...$@.)F.FJ......]/.......z.l."?'..@..n".!j.j^]5.@.~.E.......6(.......E..M....1.h5F... ..n...%.x.)U....x`..dgf.....ar.S).T8....&M..&p.D^....4..@.Z..J........."f...F.....X....KJx....").....6(.I......4[t.....j-..........`..W.....%...G~.........]...O....<......\.sI.B...Y>rn......N.=....l.u...\...<.i....+\|q.l......\|..8......T..D.j\..p".S.9.}.....+.e.wg..-(z."...@MUe..w..3.....

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	51223
Entropy (8bit):	3.7811623450943674
Encrypted:	false
SSDEEP:	1536:v3/iI2FvBs03RLwo+O3Y1NKMuVtlTyYKkuUU:ZN
MD5:	8A6BB43720E9C07A6E5B74DCC7D78158
SHA1:	1AE8CD3E377442ED336B7DF216370E91DC5D1360
SHA-256:	05CFE92D9794A54258A19BFEC7AE0FAA73F61B66416983136594B4F95BB114DD
SHA-512:	6C56ADDB788C19CFE36D7F745721E61782082E93844964C9992C30E7F3F52D85C59EED5FECF9FD5856166D0219FB96B134CDD4A776057842C7D8BA25630593E1
Malicious:	false
Reputation:	low
Preview:	<svg id="highlight_continents" data-name="highlight continents" xmlns="http://www.w3.org/2000/svg" width="402" height="210" viewBox="0 0 402 210">. <defs>. <style>. .cls-1 {. fill: #fc8d59;. }. </style>. </defs>. <title>continent-na</title>. <g id="north_america" data-name="north america">. <path id="path2407" class="cls-1" d="M164.789,5.606c-1.256.068-3.325.17-4.58.221a26.178,26.178,0,0,0-2.8.22,4.476,4.476,0,0,1-.933.068l-.424-.051.424.356c.339.272.373.34.135.357a.546.546,0,0,1-.407-.187.386.386,0,0,0-.424-.1.6.6,0,0,1-.56-.153c-.288-.271-.508-.322-.356-.067.068.1-.152.169-.509.169-.509,0-.61.051-.526.272s.034.254-.271.152c-.95-.271-1.561-.271-1.781.017-.2.289-.221.289-.221-.017,0-.288-.135-.3-1.916-.2-1.052.068-2.409.152-3,.2-.611.051-1,.051-.882-.017.407-.2.187-.407-.441-.407a1.48,1.48,0,0,1-.848-.2c-.136-.136-1.866-.2-6.005-.221-5.92-.034-7.837.068-9.041.475a2.408,2.408,0,0,1-1.391.085,3.79,3.79,0,0,0-1.629.034,18.54,18.54,0,0,1-2.256.254c-1.951.1-3.1

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1266
Entropy (8bit):	7.712506358726459
Encrypted:	false
SSDEEP:	24:cAOaho1Cw80NmE9xBw+DXboOUSM6yQK05r9zQ5Op0ghAotav8R6D:cAvC0f0wE9xBw+voO/9yQKs10ghAhaE
MD5:	2130332BDDD4C6626CCE106314AC6984
SHA1:	FE79DBC46D35C5E786FE2487AADD002C3192F47C
SHA-256:	6EB6FC498653776659B11D9F43364E84F96791FF7DC2DADA75ED6EB6702F97B2
SHA-512:	D694C1783564F4703972FC54086A6DD5AED898794978E12202A144532957E39C165A8269A3350788D7CC00CDD85A28C0FB127352DF843BE137DC908BFBE2101E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T....IDATx...[.UU.....$B.X.(.#.D.?.U.0zI.........8FQ.0.I{..:$...J(#H.#i...2L.../=i.y.{..0.{..{.}....y..Z{...5..: """""""""""""""""""""""""..UTCfv.0....Q`.......0.\.x#.>w?.....W.w.g.1E...ZPc.K..;m........=.e?.<.a,.m.G.>.....:..ck.......M.G.lI.^...g....v.Y-.sg..?..";.h...f...x...f...x.z.C..kf..u)l3..J.w.K.C...J.....ZrL..E...@..o\......[.+.._kfo..?)b.....Z&....\.f`....@;.......1';..3>3...9.T.....;.O.jU.!.......@.0......./..~I..e...Z.5m..~.x:P....w?../...$....".N....w.1P........n.M.S.2......}..>.x..=RV.=.!./......Q......X'I...>.'.2/"........pcL...M-4..D.f....XWV......j.3..@..).H?..!....i....ks..PV..7..Q...0..;..p.9..M......x...!.C.4./$..%M1i........F.D.5N.. ..FH^...e.5..@.c..F..t.<.Z.u....\i........"......%.3..c.\.M......}OR.NNtH..ZB...~j.Z...X.n...j{...+..`...........Y.r.3......E..@...p....g..s.{.$W..../.J...u....'...B..3......p..3..NTj..b....5[I;.K..m.....YV..MYwd\|f..B.J..`fK.O........R...5.sY7.).\3..1.#

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 42, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	363
Entropy (8bit):	7.222721269081384
Encrypted:	false
SSDEEP:	6:6v/lhPU82uA/8oqisIsWIN4IC2eH7ORaB2JiN3OvpUkyPow4CEjjX+9htIk0Bip:6v/78Buwqi7srN4IrebOE2gPkYXE+9zb
MD5:	853E3C671ADABBC17B0AD9929D507085
SHA1:	D778BEF4963B1359A96FC44BE0F5154B47B065B6
SHA-256:	873B28A0419545D56F83B0E1CC449CE219F35C579BB7CE2CDF2D8FD6D374A2F1
SHA-512:	92B01BB803705D01E9295309756441F325D92D87C10ACCA7EB90D6CBC2D2CC95F9A818A5A86C79B09F180CFB8440950309EF8FBEA2946867A22094A9B32900CD
Malicious:	false
Reputation:	low
URL:	https://www.mediafire.com/images/icons/myfiles/default.png
Preview:	.PNG........IHDR...........o......2IDATx...?K.q........`XACCDP........-.B..!.z.aKC`:..Im....RKN..D...tD.....M.......9...E...E.,..=2'{L.f.6... U.a.>A\.e.<&;.A..c...l..).\cr......aMaq.0%..>.l*,.1.$..8.%...pF.S.b. [.E...tI..'.RQ.L..;.EC......_YQ....~}..Wx.(...y....T.1..U.4......+.B...jL.7.....Y....Q9......c.P$..yh...<<..'y....$}.d_>....L....IEND.B`.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssWOV8zfBHGOZ85HoulnTSiH3exYfD2C8rKX969OxyD2bXlbY9kKZEGBASurTLXpkTvM2D-64GdryF-LVPurV0k22spzHrctTXQ6zpzHi_7IJ4soq4Oxw_Tm4t_VV4l_EpKzQfnnltA1NZ-NcUrdmncBWz_&sai=AMfl-YS-37NHG8rfobRGAaqfAUQUzaac4BewyyPA53MvcbiajYYuOQDORBydNx1-7j2GVOINirv6LjUGfM2He9qcTDyKod2V9h1l0RSHmNjmBuRWWqjFbHYz3ZtcHL-XhUREEWX1vD1bLIvRcmMJEfKLfQ&sig=Cg0ArKJSzOWs4vGj94jcEAE&cid=CAQSTwAvHhf_zhxe9bh0ZmUXoiCvgswRjYbmAY5eg9FIT4uooQIvuvbSZBJEIFa0k7uDGon3N1PBp2IJtKJEzJbt95woIgIo3dz1lS3l734nD4QYAQ&id=ampim&o=152,120&d=336,280&ss=1280,1024&bs=1280,907&mcvt=1001&mtos=0,0,1001,1001,1001&tos=0,0,1001,0,0&tfs=1390&tls=2391&g=100&h=100&tt=2392&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.280394654123195
Encrypted:	false
SSDEEP:	3:KRiCn77R:0hnp
MD5:	3CC9DBA88E24AF69515D8081571B4478
SHA1:	F9E28108A65B18E1BA54A25B58EDCE5CD7D6B7E1
SHA-256:	F3AC4A4C803D381322171CCE2E4130E1EEE69AC9D7A1CEAA0C898306F0AD225D
SHA-512:	F2E806200953664E22A21D40FD6CCD81697D3F69723DC41D293774B4AEFA9B1096A2C5A324AC8647FFD596BA45CF93FF8FDC0E66FF8347D4755DC0CBFFCB02F2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmqhJe7ebgtshIFDWcd3soSBQ2LTorD?alt=proto
Preview:	ChIKBw1nHd7KGgAKBw2LTorDGgA=

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13165)
Category:	downloaded
Size (bytes):	304212
Entropy (8bit):	5.503360537999066
Encrypted:	false
SSDEEP:	6144:+VPCQYGPPpc5Y/yBNtuhAgai3YPhpR4JXc8p:+PR/yBNtbJ38p
MD5:	71DFC72EAA61663B4C7F700D99C0CDA6
SHA1:	35D256905ACD24179EA49B7DEA03758297DA0FB1
SHA-256:	23F048563190229A9A6342840870A7F01FFF40EEFF6568A65B0E7C86C317DD94
SHA-512:	A343E18F312F805FF304894F14A5DDF959A1042EDC384B134B926CBB3BE9B2F4939F1A20FC58D028790AA63EAD94CD4232B1ECE73DF6B6ACB7250F7C5ECB255E
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js?hash=d62197507f1d9af64ac8f40ae2838b60
Preview:	/1703774787,,JIT Construction: v1010603338,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 47 x 47, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	558
Entropy (8bit):	7.331891387747921
Encrypted:	false
SSDEEP:	12:6v/7Y9f8BFM+nyjiVzHzahLVk3JT3IJgnp9f0szuxQcrawa:YFZyjsTahLVkZ0gpWsCWcQ
MD5:	5C3D1EFD1C43793BB232DFFDE6A088E8
SHA1:	8EE6F446611045F441700DBC3248A85D03FD6CD0
SHA-256:	01CEF4B8CB4C142AE6E1CA309B3983F372431912A7731B5B608E8021BFCC8652
SHA-512:	1EF875A9F4C073F59FB8D925601169BF6BFE411DC809E3D137982224F128630F6DC7F4317414BE34B9504A9316E205C93AF4D01D02DE6837A06FD81843BE00E5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.../.../.....D.c....BPLTE...6..5..5..3..5..5..6..6..6..5..0..5..5..4..:..6..5..8..6..7..6....b.....tRNS.._...o?./..O.... .O/.......IDATH.... ..9.AQk]y.W]M......c...E.T.@..D.."..D. C...Ms....1g...k..v...R...4U.............0$#.g..1.S..g.ZqA..'6...ol...H.r......{.@..^.p.....{^...+y...W.d..+..+...a./.Yg..Oz.B...{.NtM.xH.N!#.........."..z..N..q.......V....S\.'.f....[8.Y...c.%....Ul...R.....b.o....?.;.9'...C...z..h....sb...~<}.V.nM_...U....]..dP3.t..........\.}0:...Q.:d.2..x..G.U^_?..{=G=...._.aR....R.;.B.:3i......IEND.B`.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	224876
Entropy (8bit):	5.3835232442107275
Encrypted:	false
SSDEEP:	1536:u92erR6HVaaN8sDU4W9NpmHgwA8DbGw5xPF6ow8dMwRS14G+JSeqK/wTyj5bMsy8:QSHENpmHgwVIow8dMw01GJx55yik6Y/c
MD5:	0C70A849C2209468573A7621DF9FC697
SHA1:	75C951D42E64902046962C95F2E9C5FDEDF8AFFB
SHA-256:	4FDFD40DC4640506829319A81FD61B379E2B70A0CDEDDDBC1218508085CEB888
SHA-512:	FC364A129DC4BBBB97EF2EC4625B01B50CCE145385F5AA9500BC2C2B6A2E9B255B46C5BAEFFC4F4980890FB9BE9676E4FEDDE11FC509FB49744420741945F2F1
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.618aa075c4d9b6424e07.js
Preview:	/! For license information please see modules.618aa075c4d9b6424e07.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	992
Entropy (8bit):	4.56024922147393
Encrypted:	false
SSDEEP:	24:t4po/yLts8f/JdJWJ/MNBJTzUk37biewlcrr:VaZDwQvUWbiewlc/
MD5:	D0D7EC9C0600D8356AFFDD4B1D6C2EB4
SHA1:	A393FEEAAE1CBB24E8D0918D6C1B45A21D3AADE8
SHA-256:	030209A81AE29C80A93B1518FFA7BF493BB08D5FAA0E1D36E173E62327163899
SHA-512:	64919D25AECF6E16417DDC7523C25D0F126F0740EAB291B4CBEFA57FF6CB8371C818C730322BDDF3B5953364EEF691488728506033C7324B0A3D55FA26684195
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab3"><path class="cls-1" d="M71.19,70.63c-11.41,8.6-28.29,15-43.41,13.26,2.86-4.11,4.07-9,1.8-14.47-3.67-8.88-17.18-9.16-20,.57s5.61,13.84,14,15.38a41.86,41.86,0,0,1-10.56,7.29c-1.43.74-.17,2.9,1.26,2.16a41.21,41.21,0,0,0,12.09-9,53,53,0,0,0,5.78.39A66.08,66.08,0,0,0,72.45,72.79C73.72,71.83,72.48,69.66,71.19,70.63ZM18.65,81.75c-6.32-2.37-10.56-11.13-3.24-15.52,5.4-3.24,11.26.46,12.48,6.11a13.09,13.09,0,0,1-2.75,11.17A36.84,36.84,0,0,1,18.65,81.75Z"/><path class="cls-1" d="M110.26,25.33A1.67,1.67,0,0,1,111,27l-6.86,41.14a1.69,1.69,0,0,1-.86,1.21,1.65,1.65,0,0,1-.83.21,1.8,1.8,0,0,1-.64-.13l-12.13-5-6.48,7.9a1.58,1.58,0,0,1-1.31.62,1.45,1.45,0,0,1-.59-.11,1.71,1.71,0,0,1-1.12-1.61V62L103.3,33.61,74.66,58.39,64.08,54A1.7,1.7,0,0,1,63.87,51l44.57-25.71a1.64,1.64,0,0,1,.86-.24A1.66,1.66,0,0,1,110.26,25.33Z"/></g></svg>

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (997)
Category:	downloaded
Size (bytes):	1109
Entropy (8bit):	5.27524428195527
Encrypted:	false
SSDEEP:	24:2QNh/maNVKHmnVPoeuYXOUw76uHoaRWMrWOkwGvnTy2gYU9rTXr:dJmaNG2VPgYsKawMrh8nG2gYU9rzr
MD5:	FBE92038AA9B8D58FC93CFE47E2987AF
SHA1:	EEF8BD2A46F667BA964CB865285EC57502B894E8
SHA-256:	66F8ECD359CCF9D79AE9C4AD10312DE1A65DB446344B2667E54D604F25D3165B
SHA-512:	88FF32162819D0064D55FDF37427D7F19C26890B056284E4F9EF1CA208ED8FB36ED8E8BA1191800B01030459A8DF91D007C30E603AE50F357C50AC5F0F09FF4A
Malicious:	false
Reputation:	low
URL:	https://the.gatekeeperconsent.com/cmp.min.js
Preview:	(function(){var getUrlParam=function(){var param="?force_regulations";var url=document.location.href;var results=new RegExp("[?&]"+param+"=([^&#]*)").exec(url);if(results==null){return "";}else{return decodeURI(results[0])\|\|"";}};var xhr=new XMLHttpRequest();var consentUrl="https://privacy.gatekeeperconsent.com/consent_modules.json"+getUrlParam();xhr.open("GET",consentUrl);xhr.onload=function(){if(xhr.status===200){var json=JSON.parse(xhr.responseText);for(var key in json){if(json.hasOwnProperty(key)&&json[key]!==null){const ezCmpScript=document.createElement("script");ezCmpScript.src=json[key];var ezHead=document.getElementsByTagName("head")[0];ezHead.insertBefore(ezCmpScript,ezHead.firstChild);}}}else{console.error("Error: "+xhr.status);}};xhr.onerror=function(){console.error("Error: consent request failed:",error);};xhr.send();})();function __setCMPv2RequestData(){var browserLang=navigator.language.split("-")[0];window._CMPv2RequestData={"language":browserLang,"stylingLogo":""};}.fu

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MjUwNTcyMTE3NTA3MzM3NTY3NjM2OQ%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	37035
Entropy (8bit):	4.939323707654456
Encrypted:	false
SSDEEP:	384:wtcGGhB6/eFMm3lnAxCpph5wYgr6b8MxAc6wMFW:jbH11m5rgx
MD5:	78BA220259933F24DC696A3B1E085444
SHA1:	39C72D416A8564F5C2D9CFEE8C9DDD17CEA17807
SHA-256:	7BA1BC2084DEF769E77A7DBF97CD91D68FE6C6D55B5D183A7D36630DA8DA2B02
SHA-512:	B7622AF8523D9A31BA20AA960745E2A6DF4D1583B940A94C8380CF1D802ABFBFB1F183927DD457280F8F9477AFCF670BA17B80EB8F03884A867638F251AC2525
Malicious:	false
Reputation:	low
Preview:	<svg.xmlns="http://www.w3.org/2000/svg".xmlns:xlink="http://www.w3.org/1999/xlink".width="1656".height="24">.. Define SVGs -->. <defs>. search -->. <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <path d="M18.65,17.03l-3.67-3.68A5.942,5.942,0,0,0,16,10a6,6,0,1,0-6,6,5.9,5.9,0,0,0,2.72-.65l3.81,3.8a.942.942,0,0,0,1.32,0l.8-.8A.942.942,0,0,0,18.65,17.03Zm-6.99-2.74A4.537,4.537,0,0,1,10,14.6,4.6,4.6,0,1,1,14.6,10a4.5,4.5,0,0,1-.64,2.33A4.6,4.6,0,0,1,11.66,14.29Z"/>. </symbol>.. sort -->. <symbol id="sort" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <rect x="11" y="6" width="10" height="2"/>. <rect x="11" y="10" width="7" height="2"/>. <rect x="11" y="14" width="4" height="2"/>. <polygon points="8 6 5 6 5 15 3.05 15 6.5 18.45 9.95 15 8 15

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	210681
Entropy (8bit):	5.5597620993718095
Encrypted:	false
SSDEEP:	3072:GHdZAlCIWYVUyO1jRfIypDDMv0MWXdXAhA9DfFWkY4X:6fIHVUy4FQ3WtwhA9DfYq
MD5:	69E7A13DDA4FB352CB4EED35A85B51AD
SHA1:	D8CA511876E3B97865439278E8E36AB8461914AA
SHA-256:	97C7EB47C3427140FA5D34F26A8C4424C8E61E95A3FFFA31BE38EB67CD51A487
SHA-512:	47A16A40CD8C888C118B191E4FBDA5DEEB7CE9EADC7893398082A6D114A9958AAFB8E16D9117735F0ECB5A6DC28DAA37607C36C7587C1EE598E1AFDECAB213CA
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-11219589166
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__c

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 43 x 58, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2380
Entropy (8bit):	7.905830643504667
Encrypted:	false
SSDEEP:	48:TIpoePU8QrBdlNmyNy3GuZKgcGPJyL3YfabMMG:TIpoeMXdlksQxgGheYTMG
MD5:	7056725D8CA68744457116D3B90CE50D
SHA1:	002C1E964A12049139A79D4379E7A2D15596C6D0
SHA-256:	40CE33401042FCBF767AAF93BB611E98E993EFD690680FBA615D479BEA0773BD
SHA-512:	FF1BEC52AEDFBCD9FF166CDD8A279AB2C29E7669C69EA6D53B5ABF484DF9CD0418D085D45E58C9D78C76DCF6A5D8DC8502F9CCAAF28B8E7F87F8F883D311EBED
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/filetype/file-app-v3.png
Preview:	.PNG........IHDR...+...:.....)......IDATx^..\Y....NU...{g:}..:..N.3. ..q......gDp.....g}...C /...D...b..\|../.&!..N..kUW..v.oN...]uD...d.k..o..[k.D.....4.._..\|.+.].O."......g..........S...v.P..G?.../.i8 C...x.B......t.......kW.C...w7({.....}....>..b.%H.1).T.NKP}?...Kg.z.t.F.}r.......v....j.EO.Kk.....}....i.h...NkE_..%..R=.X..-.o..R.....%..0.(.?...4q...(.~..[...?....7.!.....L.)xU.o.e.....ZS).Y..^..i>~E.....w.k.5..i(.....TB..H.r.!.B0'.+r]M.~D_...D.S`....@n1...lZa.>.2...u......=....6...w..e......X4J....W.j.fF+9.......!..0.P....uI....lp..F~.fU..%qq............4......`..2.(.......Z......HeO....Ja........{.wZ.i.....5M..\%..2J....}...i.my..Z;..Z...(\|...sd,.1L..$:..j.A...\|.N.q.TL.........`........9....t5..4jzV.tQ.....p..Y..Wjd..(..$.`.a.t..V......y..o.e.f.D....+]a..Y. q.Q.)..u.J."As.....x....%B.....g.....6@Km^.. e..).0..........Ca.A.}}X~Yy.%.jR.".........](h..l...k.\|A.VK...d...O..8.u]....?...C.....~....c..a..Oc...yp.o...(..:..t...T...\/..[

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19986), with no line terminators
Category:	downloaded
Size (bytes):	19986
Entropy (8bit):	5.253227111919225
Encrypted:	false
SSDEEP:	384:XrqR6Q0npafIm4rKi/BwEXN1w29mItq0W5i6G:Q70nBrKuB0Uqti6G
MD5:	DD1D068FDB5FE90B6C05A5B3940E088C
SHA1:	0D96F9DF8772633A9DF4C81CF323A4EF8998BA59
SHA-256:	6153D13804862B0FC1C016CF1129F34CB7C6185F2CF4BF1A3A862EECDAB50101
SHA-512:	7AEA051A8C2195A2EA5EC3D6438F2A4A4052085B370CF4728B056EDC58D1F7A70C3F1F85AFE82959184869F707C2AC02A964B8D9166122E74EBC423E0A47FA30
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 44 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	519
Entropy (8bit):	7.324236135674253
Encrypted:	false
SSDEEP:	12:6v/7qJDr7SPvZS5attoppt7BcY7gXWlENssJ+G/fMXzmlrsBo4b:t70sstQt7BDgmlEWjufMXzmve
MD5:	D09A78D421E280D60BB8AA7751BA5265
SHA1:	260C8149E0BBEC543785877721879F8E5A2CBB99
SHA-256:	D704E96A2E3BA3C946FF6473758A6B80FBF58EDFF4E85EBF73DD89EF879C94EA
SHA-512:	248234668E532517D86ADC3AF95E4434BE276F5BA0EEBC31B126607E474696EA08B225B6032E617615B3A8E91E0B9B3D32016D42DBE2A4C1519F0ADD928223A5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...6............<PLTE...6..7..5..5..5..6..7..5..4..5..6..6..6..0..6..5..5..5..6....9#....tRNS......?o..__. .O/.......gIDATH.... .EsA..k....h'....s...wCN.....y.g.}:....\..zx.!..&;...+.Ol%.....s.._.*.3u\|...X.E_....4.k..H..UT<...{%..1......F^}.J..........._.).R......,R.v).a+........X...'-jLY..Es_...+..`>..n.a.;.".....]...e.......'.;..............nN.O:c?0.].~.E/.YOI{b.E.:.....:...PJ.....n...5....Z...H.[.(w..3D....Cf2..L..es:.."<q&.....s...V.Ie&....I..........$.A.K.....IEND.B`.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	dropped
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x500, components 3
Category:	dropped
Size (bytes):	15440
Entropy (8bit):	7.396585899789576
Encrypted:	false
SSDEEP:	384:DM7uOi3sGM94x4aXnygnqioE0L8k8k8k8uwp0bWBckxPv0n:gyDcGe6ieoEetttDVbgckxHK
MD5:	FD86F279BD1733FC641882EDD44AB5D0
SHA1:	575D10B03DEC1D135738F6D5AE57C70A324C7CB0
SHA-256:	BFD85AF5FE194DA15D0DFE6014AE2353E981642449FA434CC8719E830F54B0BE
SHA-512:	B512FD1356AF5FA05FE406A9E6AACF66ABB8728D0DD809C04690BA4A31B65431AD4D319C7768D9A0E7030DB68FFDC8BEF82F9ACC2CFF7EB9F0449AF0062E2F8F
Malicious:	false
Reputation:	low
Preview:	......JFIF..............http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2023-11-01</Attrib:Created>. <Attrib:ExtId>8fc3b0e4-5d9a-4603-a9f1-965c7ea4aeb5</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>PDF Manipulation (1200 x 628 px) - 9</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:pdf='http://ns.adobe.com/pdf/1.3/'>. <pdf:Author>Mor Dov</pdf:Author>. </rdf:Description>.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlwhD6T4e-McBIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	344
Entropy (8bit):	7.112579199460549
Encrypted:	false
SSDEEP:	6:6v/lhP70wbCEBUiRqlkpNQ4K8UaayHTjpu13ABjp:6v/7ZCGRQkpS4K9abJy3G
MD5:	5D6A9042290382DB005F19EFD1D315C2
SHA1:	CEC7064B54AE5AB78487BD30F92A2555510E118B
SHA-256:	53B99E4BDE7498900885E58F9D6C383258F8A59B04389D6B54D3D4B89537B6F2
SHA-512:	48B4468088C9FC3B8D65A16651F0CDBB83EAB2D5BA1020BFE8A16028EB90B20E5B5A579C34EBC1ECA7D3AF21BCC4EF36BC41ED72B02C447C83F56C82963481C7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/abg/icon.png
Preview:	.PNG........IHDR.............;.J....gAMA......a.....IDAT(.R1..@..Z........,l..;.....A....hPDD...`r..A....M..-....UI..O.%.QB.[D....;.nA...:..^S.].....].B0..mH]..I..f.F./.4H... .g..*....C...Q..T..]..B...8..0....#...(..N.80\.t./.SA..i..O.N~2.B.t.....6..#.6.(.......w..... ....`..3.Q.....md.A._.O.mC.L........}O"...........IEND.B`.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.492897276113269
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkpYn:wpoSySv6yF8pY
MD5:	C0DDB93C144B94DA946DC9F727D05538
SHA1:	517BA8265D63543D2F4F2D3E2247A9A9CEE79E9D
SHA-256:	4760B35732ACF6B7C363E144C5FD126EAFEE7315885510FEAF23B0D53938D33F
SHA-512:	FE7BBEF81355A517C2124C01EBA6CB7460E36F0E608849E37721C23B53FE1C9349CBE949016BCD2CABF97629AAB127CC6318B5EC4F6ED87BDB2982580843AD73
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAn9uqUg1dGU6RIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9b?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgA=

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27227), with no line terminators
Category:	downloaded
Size (bytes):	27227
Entropy (8bit):	5.395015729135881
Encrypted:	false
SSDEEP:	768:ImDshciqb+Ua3d97GoYa4NbQtE/X/RHmNSgMxFIHv5nlssJy3D/NUmmy/oQ:ImDshciqb+Ua3d97GoYa4JQtE/X/VeSH
MD5:	699BFB3D7C9F50E553E70C27072D996F
SHA1:	6987936A5958CCC6474493C737CA0E8E4513366D
SHA-256:	D32492CCA00DF8DD9ABFCDA39FF9A412ABF12F3E823D8734E64BD6BF13BDC839
SHA-512:	3DABFE342B6F156D5629A25879132FF55608971F996E67ECDD4FC855E623EE8BC5FFB24A506D6D8BA87E38EC09EB05D4A36EA5E9DE194BE281E70D0C59603107
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/js/gopro_121918.js
Preview:	var awY=0;var boG=6;var bnx=30;GLB_aSalesTaxZipCodes=window.GLB_aSalesTaxZipCodes\|\|[];function SX(errorCode,paymentType,pidNum,targetID,postdata){var aOz=((errorCode==53)\|\|(errorCode==54))?false:true;$.ajax({type:'POST',url:'/dynamic/log_purchase_errors.php',async:aOz,data:{error:errorCode,payment:paymentType,pid:pidNum,description:targetID,details:postdata},success:function(returndata){}});};function asF(aww){try{var awg=aww.split('&');var avt={};for(var i=0;i<awg.length;i++){var awh=awg[i].split('=');avt[awh[0]]=awh[1];}return avt;}catch(e){biX(e,"asF");}};function biX(err,sFunc){aMessage={};aMessage['url']=window.location.href;if(sFunc){aMessage['function']=sFunc;}if(err.name){aMessage['name']=err.name;}if(err.message){aMessage['message']=err.message;}if(err.lineNumber){aMessage['line']=err.lineNumber;}var sDetails=JSON.stringify(aMessage);SX(200,0,0,'javascript runtime error',sDetails);};function aOM(){try{if(document.getElementById('payment_method')){var VH=document.getElementById

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	56354
Entropy (8bit):	5.948830543686717
Encrypted:	false
SSDEEP:	384:SW0A3XEft9UreQNq2pHjPEJpmTy66kx+7W6dW7A/hIhuhahg0S+fe0S+hEUFU02/:SW+9UreQNgJorEjq7o74+F5z
MD5:	391E2FD15653E1B7A0C4C161F61403AE
SHA1:	526091C23E9E0CE8914D7E7B08A2A4D39B77F650
SHA-256:	799FDA0F054A19B8E7FF8FF0A3979B78B1182C926A98FED5850E76CDF687A0C4
SHA-512:	EE2784D1D04A915F92B986F7AF2F1F27211341105463062F7D5B3A35016BCB65FB1CD427F33BA8F00E688CE0CAF878A889615161F5457A0D85E50CD4BACA4DBF
Malicious:	false
Reputation:	low
Preview:	{"/183096492/MediaFire-Zone2":["html",0,0,null,0,280,336,0,1,null,null,null,1,[["ID=7c1726920070e603:T=1703780532:RT=1703780532:S=ALNI_MZaIe4Z12q2Zx8bFZww8CpDej5Czg",1737476532,"/","mediafire.com",1],["UID=00000daf1f9178fd:T=1703780532:RT=1703780532:S=ALNI_MYKPnz9dOUMeMDqQc4IWbByiQVb2w",1737476532,"/","mediafire.com",2]],[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CKOWqYvFsoMDFfn14wcd7rcPIA",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}h

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	419
Entropy (8bit):	5.159793519581347
Encrypted:	false
SSDEEP:	6:tI9mc4slzvo/Ujagux0+BN5PFXAv50BU8R+yfQdbmItPUPGMWSjs5SjPUvEnUtB:t4po/yMtFXJU3siboGMWdHEnEB
MD5:	422B4B28F80C1BA0A09F7BBE30BEE39E
SHA1:	AF65D5FFAC9B41D39588C49A303283F946598A5F
SHA-256:	DC3FDE586E82046749F5690C97512F0A92CD3F29C1DCC07368935CF3C26859E4
SHA-512:	BB1B4FE6B66992E668F2974F56606CE00DF3BE1B22155F2904F275C2B9F14FEFCE5B68DB17EE3C9A32C3AA72F4F5D3D5C4F8F6025EB6CF00D6D410BE8A15885D
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/tf_organize.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>features-svg ready</title><g id="ab15"><path id="folder" class="cls-1" d="M80,84H35a6,6,0,0,1-6-6V42a6,6,0,0,1,6-6H53l6,6H80a6,6,0,0,1,6,6H38.68A3.94,3.94,0,0,0,35,52V78l5.69-21.24A3.71,3.71,0,0,1,44.27,54H87.83a3.71,3.71,0,0,1,3.58,4.67L85.82,79.53A6,6,0,0,1,80,84Z"/></g></svg>

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.496574330097901
Encrypted:	false
SSDEEP:	3:C/2A3njBWk9JyiA:C/nXjB7A
MD5:	1B177A4068E01AC77B85B091C87251BD
SHA1:	EA7A08A7C139D4A7512B6BAAB5AAC4A3E288B255
SHA-256:	F77F47058428A1C21DAD5A75AC13FBFDEB9858947218FEE2112FDED5972A0B5D
SHA-512:	6E6D693775AA9C94540D0CA0549C98446048189D49A3716895F62C3EFE3893F0B28FEDACDCD46394782B7972D0B981E87EA291E76EF2490258FCABA2A0906D92
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=&j=window.advBidxc.mnetRtusId
Preview:	window.advBidxc.mnetRtusId({"status":"Unknown","userid":""});

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (53468)
Category:	downloaded
Size (bytes):	53469
Entropy (8bit):	5.393388587891896
Encrypted:	false
SSDEEP:	768:bemBuCcWQj1YgnrZK0eHkwImvBPQyWqCB/k/mvvNz0mMGaNFX5o6nSXkYaTjOqS:zur/+mdRwIqYXAXPnSXkYa+J
MD5:	1D958450B2602269F3AF72656CB98C73
SHA1:	8A466D9186E55440B79BD9B510C54240BA1B7AF1
SHA-256:	8D4FE82EACEB065B8B1AE87FAF66E55A6AB65E7A30E268FA99FC4A1F5C5C1416
SHA-512:	7B733DB12273BE388B7F8A13A88ABE99884CEAD83891FB3F84EC667B5740BC7DEEDE5560E5245FD1A1C18A9E0BE622FE059E0D155640466FF9ECFFCA6C0AA44F
Malicious:	false
Reputation:	low
URL:	https://btloader.com/tag?o=5678961798414336&upapi=true
Preview:	!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e,t,n,s){return new(n\|\|(n=Promise))((function(r,i){function o(e){try{c(s.next(e))}catch(e){i(e)}}function a(e){try{c(s.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?r(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,a)}c((s=s.apply(e,t\|\|[])).next())}))}function n(e,t){var n,s,r,i,o={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]};return i={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function a(i){return function(a){return function(i){if(n)throw new TypeError("Generator is already executing.");for(;o;)try{if(n=1,s&&(r=2&i[0]?s.return:i[0]?s.throw\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 21, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	232
Entropy (8bit):	6.210134866687666
Encrypted:	false
SSDEEP:	6:6v/lhPforSyb/6TKu0sZdQdolpC+gIWfwSczv/tVp:6v/7orP/6TKuVzQdEyhfwSczt7
MD5:	315D507ADE0BD7367A65F05234AA9EA0
SHA1:	1423CFEC33DD614897F94F9E13D07885309096B2
SHA-256:	C0E500135E4ABC7A069D3656F5C5BDB4F3C5D0E869950EBC6E6E4A6D2130991E
SHA-512:	E5BF5CAD247F54C38AB924DB564FC4A1BF59D58B602D04161AF1337AFD6679003ECE052B902DAAAA0B5BCDA1CFBD9DED58202A06C07D14C3B0749C6E37E57E90
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............[9......PLTE.....=..@..>..>Bmu.....tRNS..@.MR......pHYs.................tIME.....7'#.6....\IDAT..e....0.C..@.....\...gR....W^J...gl0h.};`Q7...,x.S.KJ}Pa......P.&....}.....y2g..^....!....2.....IEND.B`.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsu1_rKIta01zV39iyJuDBBtYRyO3xntSrK8ZVHP--enrCz_hAHyb0D0i3O1yfQ-9muMa5Rdop_crWQLs0qLmiURpIUMmMZo5I-oCR-Vcjy7h98ywJT4BT3LDIokZbeG8X5gU9_BfBsUYyyJQbl6RgoWlxE0&sai=AMfl-YR8Nmw-WdsUC2bbgBPurPpQY-1aOdcmplAAFIiH2Sv__VGGby7eDMDfkRR4NR0FgZHjOTj8cDemUg-DvMCsDiBZ8ggiF7uynC_DVGeUB34muXoY6lnVV5rxvdVV&sig=Cg0ArKJSzGpPAJuBauq3EAE&cid=CAQSPAAvHhf_tYgSDlH-yR4Uh4o8LoPSE0GUaL0nhztLjb6CahFq2fxv3BOMU1WSKKnNO-tvURdTRZfKk6G5thgB&id=ampim&o=384,10&d=728,90&ss=1280,1024&bs=1280,907&mcvt=1006&mtos=0,0,1006,1006,1006&tos=0,0,1006,0,0&tfs=1131&tls=2137&g=100&h=100&tt=2137&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7191
Entropy (8bit):	4.84919166700648
Encrypted:	false
SSDEEP:	96:uZkQSFOAT0PQ7vQOjU7wHQGkn21b1b4X26YPAv8psVtTS4KmsJDO:YSFjZ7QOw7wHQGkn04GMv0sfAO
MD5:	5DEEC671444ACFB84FB89B020C8FFAA3
SHA1:	230153275C4C8D49B8D7FFD45D04A1D17C4998A6
SHA-256:	8699804EF32CCC3B40E409B12F7DD6BDC9463DCC49BDC41A60688A8203E71C7E
SHA-512:	CC70898488B961B71667466AD29EAAC6573BC1A4FC62D1799F7E7EA2D1D427635FB30441BCF057B99C2B6C1033584D06FE70970404308C6CB52F67B96BDE3E57
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/collaborate_color.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#cce7ff;}.cls-3{fill:#ffdac7;}.cls-4{fill:#e2a688;}.cls-5{fill:#b2b7c4;}.cls-6{fill:#80c3ff;}.cls-7{fill:#b3ddff;}.cls-8{fill:#ffdb80;}.cls-9{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab2"><g id="color"><circle id="bg" class="cls-1" cx="95" cy="95" r="94"/><rect id="file" class="cls-1" x="89" y="18" width="24" height="30"/><g id="pic"><rect class="cls-2" x="104" y="22" width="5" height="5"/></g><rect class="cls-2" x="98" y="29" width="11" height="2"/><rect class="cls-2" x="98" y="33" width="11" height="2"/><rect class="cls-2" x="98" y="37" width="11" height="2"/><rect id="file-2" data-name="file" class="cls-1" x="145" y="55" width="24" height="30"/><g id="pic-2" data-name="pic"><rect class="cls-2" x="160" y="59" width="5" height="5"/></g><rect class="cls-2" x="154" y="66" width="11" height="2"/><rect class="cls-2" x

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	649
Entropy (8bit):	7.516032109054317
Encrypted:	false
SSDEEP:	12:6v/7iKmHREPbW6nw5tA+8LVYZZmsZP2qsZ/GKd2d0mmVqDLxDxlXYRqBZklwut4:Ilpw5l82ksZetNAqfVe9DxlXrBZklwV
MD5:	FE548BA0CE578BB71B19D698597A19F2
SHA1:	BC3E79C56F938E0A62EF302064B322CCD5B35231
SHA-256:	AB0E3C18CCDDD0DAC5FDDB8EE491AF2F1CA5F9DEB0089681A4BAC89B9F5B635B
SHA-512:	E9DEE5C91549FCA113FE4625FBC8767C8143D491E6F684E754F503F11DB72A306595E9697204B9A4E63C0B5F571F0FA2218A7E4F893760B54DA92C08DD0E34E2
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/fa/img/timer-blue-icon.png
Preview:	.PNG........IHDR...<...<......")@...KPLTE...6..5..6..6..6..6..4..6..5..5..2..7..6..:..5..0..5..6..4..@..6..7..4..6..rm......tRNS...?_....o/./...`....OO.X-I....IDATH.... ..# " .n[..IW.CU............._Rc.$...X..o...... V.7p...\|..na._..%+L.m..#Y."#...i..E-.Qo3.....eW.zi..&X.x:V0./^Z....;.z.......>P.....w.......>.....R.J.....+3(.y.o..9.h.w..P...fbNF...U....c.............*4XENG...q.>..s:.9j.....FNn..gCx..y.G%..x..!.d..D....gA^.k...).l.....2uU..Hyid.).(...\-..&...9N.<=.J..C.P.(.h.....!..T...Z...O..o.....Bh.qG6UM?..n.g.....W...%.!..WZS\...X...}.........g...g.G..R.3.l.......(......0.E......$...]u.e...d..C.5h.......IEND.B`.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1083
Entropy (8bit):	6.076477135307642
Encrypted:	false
SSDEEP:	24:zp1htZdWwh82lYSKwHI6eVIxT3HyJ3VrOxHvG85dzvxV:zqvnLJWeJ3tar5d1V
MD5:	4C42A3A9EF3453BDE7FBBB7B66FFB5AA
SHA1:	7C353F850F4ED3E309BD49B15C6F83F445A7FA3E
SHA-256:	B11DB7FBCABC28810909058A90E5921566B4A6220F62DD3C0AA8D3D716CBC2A5
SHA-512:	CD6C969EF7B34DE0246A4A51AE6E68F6AB075804192420C51FE0228DFE5F3597C921C6B66F0367B6ED218A8D0AE0B30E0DBEBF9857A9E5B11018A0F0045162ED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............?.....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C208ED45C221681188C6A582F4669035" xmpMM:DocumentID="xmp.did:C69A8287E89E11E18452987382A7E98E" xmpMM:InstanceID="xmp.iid:C69A8286E89E11E18452987382A7E98E" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2675BE1D0524681188C6A582F4669035" stRef:documentID="xmp.did:C208ED45C221681188C6A582F4669035"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>mM......PLTE..................h......tRNS........

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 29 x 23, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	235
Entropy (8bit):	6.322170907091895
Encrypted:	false
SSDEEP:	6:6v/lhP2BSEX6yb/6TKFw2mK5hPBep8kHwlZXjp:6v/76/6TKys/kHwlf
MD5:	2754568278FDC1392CD34618097DA372
SHA1:	9AF8ECC591F839EA6D93186C9C2D3762182C88E1
SHA-256:	C84BA3B9AA9C70422B2EAAC134CDFF4955ED11DF7EEA3C485179C3A138BF06FC
SHA-512:	042A6651D1EF32E187F4DE29C2D8B93B4FE6B7D3A374D552D8ECEDEEC1734EBF4F426F7226038DE2491A7781D4E983AA18B723A3DF11162520E3D08A860EA850
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............&YZ....PLTE.....y..w..z..z........tRNS..@.MR......pHYs.................tIME.....7'#.6...._IDAT.....0.D.'.P.....`.........g.v.%.,.....5..;..>.[9..1.3....j...<......y6,....~..Y.../...(.f#V....IEND.B`.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14814)
Category:	downloaded
Size (bytes):	14931
Entropy (8bit):	5.302387391074923
Encrypted:	false
SSDEEP:	384:nrJ8mveR3bwIcLxjNvLL2zOc55uem5mJJMzKREiQz3y5:m2Wbw3LzvLL2zP55uh5mnPCiQe5
MD5:	6029AB56E19EB94B90DEEB7CFBCC2AF7
SHA1:	1949B275934521063F838EDA4F974935F57F8A30
SHA-256:	B53B6AD23B258CE11EED97786741510819A369348AFCF1260856FE3041FC33DE
SHA-512:	1CFD0B7306EC4546F206B3FDFDFBBAF95FD9B2619096279D60822EBA21CE9145F02B7E37753BB1E9AE450FC14DDE73626EFA08A6A54B801D52FEFEC681E0AC1F
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012310301456000/v0/amp-ad-exit-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-ad-exit",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:e}=Array,{hasOwnProperty:i,toString:r}=Object.prototype;function s(t){const n=Object.getOwnPropertyDescriptor(t,"message");if(null!=n&&n.writable)return t;const{message:e,stack:i}=t,r=new Error(e);for(const n in t)r[n]=t[n];return r.stack=i,r}function o(t){let n=null,e="";for(const t of arguments)t instanceof Error&&!n?n=s(t):(e&&(e+=" "),e+=t);return n?e&&(n.message=e+": "+n.message):n=new Error(e),n}function c(t){var n,e;null===(n=(e=self).__AMP_REPORT_ERROR)\|\|void 0===n\|\|n.call(e,t)}function u(t){return JSON.parse(t)}var l=/(?:^[#?]?\|&)([^=&]+)(?:=([^&]*))?/g;function a(t,n=""){try{return decodeURIComponent(t)}catch(t){return n}}function f(t){const{location:n}=t\|\|self;return function(t){const n=function(t){const n=Object.create(null);return n}();if(!t)return n;let e;for(;e=l.exec(t);){const t=a(e[1],e[1]),i=e[2]?a(e[2].replace(/\+/g," "),e[2]):"";n[t]=i}return n}(

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15265)
Category:	downloaded
Size (bytes):	15266
Entropy (8bit):	5.073237591788211
Encrypted:	false
SSDEEP:	192:JV5xWfrh5TGZVF5J2zGidXXxFsWBQa1g/vp/cs6SZO0Z:YMZwBQv/AC
MD5:	BE2729CEB1643B4894F389D6ACBB0153
SHA1:	AFD8FE824DFAF305A1EC289BFD3CF00C4E5CA4DE
SHA-256:	36E1D43BEDBBD162AFA81677D08391D10627216AED52D6834FE9CEABE896040F
SHA-512:	933D519F58D4A9C933D7587576C9A3C69008ED6D96C9F8703BFFDE8BD7488AD546B343160B8692257DE5A90528385788217B8900018D10F8682E418AC285C489
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/Page-36e1d43b.css
Preview:	body #termly-code-snippet-support{display:block!important;pointer-events:initial!important}.--header-fade:before{display:block;content:"";position:sticky;left:0;top:81px;width:100%;height:32px;z-index:1299;transform:scaleX(1.05);background:linear-gradient(0deg,rgba(255,255,255,0) 0%,rgb(255,255,255) 100%);background:linear-gradient(0deg,rgba(255,255,255,0) 0%,rgba(255,255,255,.1) 24%,rgb(255,255,255) 100%)}@media (max-width: 740px){.--header-fade:before{top:64px;height:32px}}.rebrand{display:-webkit-box;display:-moz-box;display:-ms-flexbox;display:-webkit-flex;display:flex;justify-content:center;align-items:center;align-items:stretch;flex-direction:column;background:white}.rebrand__header{background-color:#fff;padding:8px 0;position:-webkit-sticky;position:sticky;top:0;left:0;width:100%;z-index:1500}.rebrand__header .wave-logo{margin-left:12px}@media (min-width: 740px){.rebrand__header{padding:0}}.rebrand__header__content{display:-webkit-box;display:-moz-box;display:-ms-flexbox;display

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/5907?limit=0&id=0f8e274f16016abd8e83d2b12cd8f240
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=20&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1833
Entropy (8bit):	4.334581241263797
Encrypted:	false
SSDEEP:	24:tkpo/yLF8aawfbccCgzOKf3AwaCQlAKadyrnLeJalJfb8QdXWjxe6mAe/KL:JjqnEeZQLAobRXWjxe6s/KL
MD5:	DD0470A3CA0F622188E091F1D2A9F3AC
SHA1:	CA4D80A071FC0ECE5FE39813DF7833696ABAD894
SHA-256:	3C8F97D9E63715B1FB2FFC629EFAA1BE51038C256C9E0D364649DEC804463F9F
SHA-512:	FEFB0B17B4E85821A41CB0DE5409D9A34F06451742B64AF0AB38ABCB1B64541D78A506635EAEC40B36935730B698143E4D4C910593CDD1FAD823372A55F7CD52
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/tf_10gb.svg
Preview:	<svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><path class="cls-1" d="M52.92,64.39a1.42,1.42,0,0,0-1.37,1,10,10,0,0,0-.41,3.4,10,10,0,0,0,.41,3.39,1.42,1.42,0,0,0,1.38,1,1.43,1.43,0,0,0,1.37-1,9.72,9.72,0,0,0,.42-3.37,9.69,9.69,0,0,0-.43-3.4A1.43,1.43,0,0,0,52.92,64.39Z"/><path class="cls-1" d="M77.12,69.65H75.44V73h1.78a2.63,2.63,0,0,0,1.66-.43,1.59,1.59,0,0,0,.54-1.32Q79.41,69.65,77.12,69.65Z"/><path class="cls-1" d="M90.8,62.83a13.2,13.2,0,0,0-7.49-4.73,9,9,0,0,0-7.56-13.85,8.51,8.51,0,0,0-5.84,2.18,18,18,0,0,0-6.59-8.09,18,18,0,0,0-22.8,2.18,17.34,17.34,0,0,0-5.27,12.73q0,.53.07,1.51a15.5,15.5,0,0,0-6.57,5.75,15.7,15.7,0,0,0,2.13,19.62A15.17,15.17,0,0,0,42,84.75H80.25A13.49,13.49,0,0,0,90.8,62.83ZM44.95,75.25H42.23V67.81l0-1.22,0-1.34q-.68.68-.94.89l-1.48,1.19-1.31-1.63,4.14-3.3h2.23Zm11.37-1.44a3.83,3.83,0,0,1-3.4,1.62,3.78,3.78,0,0,1-3.35-1.67,8.83,8.83,0,0,1-

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3850 x 44, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	77777
Entropy (8bit):	7.958862210527548
Encrypted:	false
SSDEEP:	1536:W3sNDI4kXb/58zcTtt8keFwp2/Cekf+rinZtfyZQucMrI6B:Ms5I/b56otv9p2KeyKbM6B
MD5:	4B0BCBEBCA1DAA97B01EA6E48045452C
SHA1:	F737B6AAF5B6AA859654524F6D9C5CE1E62BEF80
SHA-256:	B7FE1DB6B4419FC807AD7E66D4C75BB4CE6C1324673C7DD963C54BF56CEDBDF9
SHA-512:	92B9F6BE3CE5941DD1F594B469176584FF68DF65C64CF97FBC665FA586ACAA60EFDD3371193D3E1F35CDF4280AF155B85491FE9BCC4CC603A6D64598FDFE87E4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,......?.P....pHYs.............../.IDATx..y\|....?.....+.......zQok+J..^x..TX&.?.H....b""*..(..b..Z...V..zTDQ.#......<...3.&...........3..nvg...\|?./13...........................................................v-............................................................C.q............................................................. ..u"".^.rpppppppp.E.....q../.pRo......................3.v..............................z..&.vpppppppp.q.....kkk........................................................#.P..........[<.x..@ ...r.L.d.....\|...rppppppppppppppppppppppppppppppppppppppppppppppp......................n.7.}W.........~..../.................................................#.P.........GH4...\|>...V....i.=zt.....-:p.M_2....'..mnl.~.1............................Qow...................G....`,.?......0.@......`.....XOD....f~.....3gn.>......zbw.SSS.{!DF.q....8.....!.(...}mM...1........;#...S....\|./$0U....@U...`..N9.....FYYY..E.,c...6m:..v/..?..

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (891)
Category:	downloaded
Size (bytes):	892
Entropy (8bit):	5.204042193986703
Encrypted:	false
SSDEEP:	12:tu+CC+7GvplznXEZu+5nMZbjdozvnv2RDF5T4Brk8chL0QAhVbOwEu55Ap7nb5OH:tu+CfEptE4onMZbjovv2RIxScb1JwOfv
MD5:	38CC50BF386C12C0284103FA6CF6218A
SHA1:	144887B6C6FB842B405159CA0DBD5EB2A3637749
SHA-256:	F7904FF96874340E87D9F16753E3E32B17964BB78E497C67CC8CCE66610F5988
SHA-512:	F6B83F0B23762427C0A36239BA4A63D6E018160C893FC7041722B5B9D46E013FE4337B3D84F69E018CCD4248D9D1D098D7CD461473559FA766986F9427592E73
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/clickwrap-agreement.vue_vue_type_style_index_0_lang-c05b7e4b.js
Preview:	import{d as p,r as e,e as v,f as _,h as d,q as k,l as a,U as o,k as c,w as u,n as y}from"./index-41235507.js";const f=p({__name:"clickwrap-agreement",props:{lightTheme:{type:Boolean},buttonName:{}},setup(g){const n=e("/terms"),l=e("Terms"),s=e("/privacy"),r=e("Privacy Policy"),m=e("/blog/how-to-uninstall-wave-browser");return(t,b)=>{const i=v("router-link");return _(),d("div",{class:y(["underbtn-agreement",t.lightTheme?"darkBlueLink":"blueLink"])},[k(t.$slots,"default",{buttonName:t.buttonName,termsLocation:n.value,termsText:l.value,privacyLocation:s.value,privacyText:r.value,uninstallLocation:m.value},()=>[a(" By clicking '"+o(t.buttonName)+"' button, I agree to the ",1),c(i,{to:n.value,class:"link--simple"},{default:u(()=>[a(o(l.value),1)]),_:1},8,["to"]),a(" and "),c(i,{to:s.value,class:"link--simple"},{default:u(()=>[a(o(r.value),1)]),_:1},8,["to"])])],2)}}});export{f as _};.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	295
Entropy (8bit):	6.975307958372994
Encrypted:	false
SSDEEP:	6:6v/lhPLOzLMMDaUMir+kRaAotDyhKmqcw4tGS3Q4wu4Dy+lbp:6v/7DTka4r+kRadA4cw3S3Q4n4Dr
MD5:	D848A2953307AA510BDAD31F5BF84671
SHA1:	E9D6D8DAA9255F99E4E778FF4C4B47806BDB18C1
SHA-256:	7FD59024B6CA83F11F7A3448EC148309A13B705725716DF134F699E60A96EB1B
SHA-512:	338B5E0E93084FE0BE5A46E437AD6E7E3CD600444B26A62CD2908C01409D739FFDCD8C3DF5C4C948BE59C93866B5DEF5C4759636F149377385BC59F7C7684B3D
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/icon.png
Preview:	.PNG........IHDR.............kFI.....IDAT8.c8.....f.t.W(.tv....-;.....?'..Y_:X..n.s..a....X.....e.I...4...S.E......,.>...3oh`1.<L.&g..9 -..a.9`.X.,=.G..a..,D.W..Tv......-..rq;.d.aA..bt}. ....Y.r\......1.Q...)..f ....q%:.-.....Z..u...o.>...,1...qZ.K..8...^..Z ..J...2..^.......IEND.B`.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59104
Entropy (8bit):	5.991145510786779
Encrypted:	false
SSDEEP:	768:6Wh9UreQNo5OvJoiq5m0E3XMNCsM/v74o45MGjKN:6k5Ov3sS4oEU
MD5:	3CDAA84402F1CA19578DB62950D8D506
SHA1:	BB0C2891FA74E83E2ED866B2F30F0B5C69CF980D
SHA-256:	45BF0C44F494E790F7B6F229F2C0F6412C466FA00EC1346A46C9924DACD5FB08
SHA-512:	0D8D59D32C9BD251015C088A96EE67215626FF396699B56B0C34E1F8B2A493E4038B08D11016E4763F8D8FFD3A7B7D4637BFB06778F6F7E6EA0924D6C77CF011
Malicious:	false
Reputation:	low
Preview:	{"/183096492/MediaFire-Zone3":["html",0,0,null,1,280,336,0,1,null,null,null,1,null,[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CNbwwp7FsoMDFenR4wcdu20PSw",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-singl

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	124268
Entropy (8bit):	5.372722491888243
Encrypted:	false
SSDEEP:	1536:FfbNpPkLPgCPKZe5SESpT9Up3I0gb+D8vKYIzKzCxWA9GzK8xEo:FfbLIwfL+/gb+D80xQzK8xEo
MD5:	2EA69735400D22316151EE8CAA049D79
SHA1:	BFDBE85EACB0F8DF033B958F9FFD21BE1ACF239F
SHA-256:	A3445310C729D3F95CCAA8B2A90DCD483F5751AB02FC487FDE5137C575142436
SHA-512:	A69C2A3E0DDCEE410E6CDF0A785C6EA0B9B95571E37C7E5B22E96F5A9873ED233E598F35E2B1EDABC844E79DD8BA9FEF31B00BAC663240DB8D3AC7808EE46B40
Malicious:	false
Reputation:	low
URL:	https://www.ezojs.com/ezoic/sa.min.js
Preview:	!function(){var e={9662:function(e,t,n){var r=n(7854),o=n(614),i=n(6330),a=r.TypeError;e.exports=function(e){if(o(e))return e;throw a(i(e)+" is not a function")}},9483:function(e,t,n){var r=n(7854),o=n(4411),i=n(6330),a=r.TypeError;e.exports=function(e){if(o(e))return e;throw a(i(e)+" is not a constructor")}},6077:function(e,t,n){var r=n(7854),o=n(614),i=r.String,a=r.TypeError;e.exports=function(e){if("object"==typeof e\|\|o(e))return e;throw a("Can't set "+i(e)+" as a prototype")}},1223:function(e,t,n){var r=n(5112),o=n(30),i=n(3070),a=r("unscopables"),s=Array.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),e.exports=function(e){s[a][e]=!0}},1530:function(e,t,n){"use strict";var r=n(8710).charAt;e.exports=function(e,t,n){return t+(n?r(e,t).length:1)}},5787:function(e,t,n){var r=n(7854),o=n(7976),i=r.TypeError;e.exports=function(e,t){if(o(t,e))return e;throw i("Incorrect invocation")}},9670:function(e,t,n){var r=n(7854),o=n(111),i=r.String,a=r.TypeError;e.exports=function(

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4864
Entropy (8bit):	4.788116350233764
Encrypted:	false
SSDEEP:	96:WH6k2MDRF81EHMGWw7AKh10LYiJgoc3bWGxH47Cb4LPA:+J2qRFxMlw1mLxO3bWl7Cb4LPA
MD5:	6EBDAD39FBE9CE29CBC5FA23DFB682CB
SHA1:	921971EA994A5234D6323EEA4E65AAE28AC56B65
SHA-256:	B1330AFCE12B4FD071B3F30D2B1957E10F1E6AD5CA107A183205872ED5D1F4FC
SHA-512:	34B8E859D1F79421E79C56065F7B9C5FB0EBD5544D958007A9C897E637A4768B09BBBBA9081D02056A6B1A30917A07DC6EFFD48FEA37733DE1E09EC909CE7D55
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/icons/svg_dark/social_icons_sprite.svg
Preview:	<svg.xmlns="http://www.w3.org/2000/svg".xmlns:xlink="http://www.w3.org/1999/xlink".width="200".height="24">.. Define SVGs -->. <defs>. facebook -->. <symbol id="facebook" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M17,2V2H17V6H15C14.31,6 14,6.81 14,7.5V10H14L17,10V14H14V22H10V14H7V10H10V6A4,4 0 0,1 14,2H17Z" />. </symbol>.. twitter -->. <symbol id="twitter" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M22.46,6C21.69,6.35 20.86,6.58 20,6.69C20.88,6.16 21.56,5.32 21.88,4.31C21.05,4.81 20.13,5.16 19.16,5.36C18.37,4.5 17.26,4 16,4C13.65,4 11.73,5.92 11.73,8.29C11.73,8.63 11.77,8.96 11.84,9.27C8.28,9.09 5.11,7.38 3,4.79C2.63,5.42 2.42,6.16 2.42,6.94C2.42,8.43 3.17,9.75 4.33,10.5C3.62,10.5 2.96,10.3 2.38,10C2.38,10 2.38,10 2.38,10.03C2.38,12.11 3.86,13.85 5.82,14.24C5.46,14.34 5.08,14.39 4.69,14.39C4.42,14.39 4.15,14.36 3.89,14.31C4.43,16 6,17.26 7.89,17.29C6.43,18.45 4

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=3c35df97-b65a-42b9-abca-61d06d8e5fc4/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	4.444940714705788
Encrypted:	false
SSDEEP:	24:t4po/yGVchiPJ43O4H413dOnMwVlDSEH3GnMvR4M/tb3rsd672JQUg7m:VLVciZMvVFSEH3lvtlE6725
MD5:	9A293B765E14B09C5B6400BFCB7FD340
SHA1:	4B5EDD950529D148AD05A4156B9A2644096742F5
SHA-256:	C7070B09D24214746DA99508E59302BB5D881F993B837A6F72F52BEAD62EBA97
SHA-512:	1BF42DD2337521E31E6222E41D5A2665235C0D98CC8B7C66851A2181391FD22E4AEF0056D3AEA8FF7C849A2FE672F83C7C7D1EC17E12C276F37B878E22DD392E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>features-svg ready</title><g id="ab14"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,2.08V74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,2.4,0,0,1-2.4,0L34,76.39a2.41,2.41,0,0,1-1.2-2.08V45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3A2.4,2.4,0,0,1,60,29m0-5a7.4,7.4,0,0,0-3.7,1L31.51,39.28a7.4,7.4,0,0,0-3.7,6.41V74.31a7.4,7.4,0,0,0,3.7,6.41L56.3,95a7.4,7.4,0,0,0,7.4,0L88.49,80.72a7.4,7.4,0,0,0,3.7-6.41V45.69a7.4,7.4,0,0,0-3.7-6.41L63.7,25A7.4,7.4,0,0,0,60,24Z"/><path class="cls-1" d="M65.43,73a17.88,17.88,0,0,0,0-5h4.21a9.74,9.74,0,0,1,0,5m-6.41,6.93a19.49,19.49,0,0,0,1.72-4.43h3.67a10,10,0,0,1-5.39,4.43M62.91,73H57.09a15.67,15.67,0,0,1,0-5h5.83a15.67,15.67,0,0,1,0,5M60,80.41a16.89,16.89,0,0,1-2.38-4.93h4.76A16.89,16.89,0,0,1,60,80.41m-5-14.9H51.38a9.87,9.87,0,0,1,5.38-4.43A21.47,21.47,0,0,0,55,65.52m-3.64,10H55a21.47,21.47

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.900070484651259
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkpgKTywK2Fmork1:wpoSySv6yF8pGwKe+
MD5:	E30AD6141FA81DE2217C9C0041C0ED48
SHA1:	8A3E76774DD53251B473E5BE425476A58557F7E1
SHA-256:	4E7E1C31F4C5937628737B3E056341873A96AC83ECC05B3E943097F601BFBAA4
SHA-512:	0DD8BE9D6A32484E66D970AD76DEF95CC5742460C774978DA884C7B041002113E9D817AF385FA3BD77D52D3082803F9F91F81B9458CB35754098CA1176EE9C3B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAn9uqUg1dGU6RIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9bEh4JT9PDcTY11YoSBQ1nHd7KEgUNi06KwxIFDZSQkvo=?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgAKGwoHDWcd3soaAAoHDYtOisMaAAoHDZSQkvoaAA==

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	713
Entropy (8bit):	4.826611766298335
Encrypted:	false
SSDEEP:	12:tvGWfXommz98TR/aJ9vYnOIDhT6v75+KvGYDXoiSmPnXRFTAhSW/wx:tusXommz9eBC9vGOIDhT6vVvHksppAhE
MD5:	CC97A2B9E34D2FDAC72159ADBBCBFE05
SHA1:	B87821208EA330CBF74FB814F8F6FF60637847CA
SHA-256:	C813EB3E9C507E43A491F78C02971FD7A1DE82A2846F766A2155324F2E60C3AE
SHA-512:	49EB3996FB7BA0B0EEA2192D79BB376F2B65D23C4012FDE02DE4200D1DA3C56694D67946ADC1EB725B43C735F61FC539F0BCE212B7C866B1C58822A400251EBB
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/heart.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="45.22" height="38.76" viewBox="0 0 45.22 38.76"><defs><style>.cls-1{fill:#e23b2a;}</style></defs><title>heart</title><path class="cls-1" d="M24.11,41.93,39.83,26.79Q45.61,21,45.61,15.43T42.41,6.75Q39.2,3.62,33.55,3.62a10.06,10.06,0,0,0-3.19.54,12.94,12.94,0,0,0-3,1.46q-1.4.92-2.41,1.73A23.31,23.31,0,0,0,23,9.07a23.37,23.37,0,0,0-1.92-1.72q-1-.81-2.41-1.73a12.93,12.93,0,0,0-3-1.46,10.06,10.06,0,0,0-3.19-.54q-5.65,0-8.86,3.13T.39,15.43A11.05,11.05,0,0,0,1,18.91,15.26,15.26,0,0,0,2.33,22,22.24,22.24,0,0,0,4,24.43q1,1.2,1.4,1.65a8.26,8.26,0,0,0,.69.66L21.89,41.93a1.58,1.58,0,0,0,2.22,0Z" transform="translate(-0.39 -3.62)"/></svg>

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvLEOZCiHEl6AYJfStANsVU5fqlCmU8wbxWrw1539xMOvNXFFSKTyR8da2jHYaDmLKJWjbeOBRJUnxl7PFiYWMUUSCfayIkX0Y5LggWmYloVACPdqrszQ2uFB3MmUzzodY8JVMqXRJrYq3V4WCmxYNjBrW1&sai=AMfl-YTgrzMIDxBuuTShKv7lYuC-LL7jjjjBZZ1cvbMKD74afOntcdDZKxsKG7So2FCyYDkIcjiZuJCWQiQP-HRJHqKGst1CvkHu4WBDn-aN38F11PhDCHs7uscA33Ac&sig=Cg0ArKJSzBKQiE4J2UP9EAE&cid=CAQSPAAvHhf_tBofzHBnnY1I6bcJbRK2fpFoITtHFxIiK2qeU4A5LL9fS_-1W9WmouoOWg9VbN0jfsdWtAakgxgB&id=ampim&o=152,120&d=336,280&ss=1280,1024&bs=1280,907&mcvt=1011&mtos=0,0,1011,1011,1011&tos=0,0,1011,0,0&tfs=351&tls=1362&g=100&h=100&tt=1362&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/ct=y/c=3722/tp=ADSP/tpid=e52c68bd2ec041bc8bb423ef3441546f
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (445), with no line terminators
Category:	dropped
Size (bytes):	449
Entropy (8bit):	5.326941944943739
Encrypted:	false
SSDEEP:	6:qTthqIY9UxVHmEvX6jHzKRwszpuEIRuL5loXFNRXuRYA/bRIM2PLVe/NX96rzRHS:qTEuxVZgH/sI0llokRt/Jq5e/mvRy
MD5:	D68F5C79B585EEAADA3EBC02208C314C
SHA1:	A2EA8912707E477EB1B559187B600CE01BECE9E1
SHA-256:	7154FA4E43375900E0A5763222D361B4AAC5C08DB03EBCD76573615794FF8DD2
SHA-512:	D483E4ECF5C81D644D182186D2E20162F9830C0DE8B99D3C43192402987654943CFDD3724DE43DEE6307530A5FE18F98A35A7D1863E902AF3D5A4ACBA11E8086
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><title>HTTP Status 405 . Method Not Allowed</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 405 . Method Not Allowed</h1></body></html>

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (646)
Category:	downloaded
Size (bytes):	56598
Entropy (8bit):	5.387318875369569
Encrypted:	false
SSDEEP:	1536:9mJGR4muNKBZ2ZAgkem5PigoFtLlj+KguMp8+TSIKNeJdqWWWbnMNnCn0doH69:E5tLlr+HLaz9
MD5:	A4FF03E3D8274EBE2833A0A33A541E12
SHA1:	EA86E71D6A6668F64E3FAA5B69466360D437DC7B
SHA-256:	8A1CA667F8BE1D9635B262DC3B15AEECC9D61E0FC2457A1F95CCF6D0BC25A37A
SHA-512:	747CD4AE50C5E2A0A6512345460471797F7F5F6D12DC55C64AD545AD363D70FEE3ABBDBA16187F539547F6B0A25178D97BA24FD43FD53ABD0E4838719A0486A9
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/c/4545/cc_af.js
Preview:	(function(){var ccJs=function(options){var mode="BCP";var useFPC=false;var includeReferrer=false;var runOptimusOnly=false;var cmp={daisybit:null,wait:250,done:0,start:0};var baseDomain=".crwdcntrl.net";var validPrefix=["bcp","cn"];var bcpDomainPrefix="bcp",async_props={async:false,asyncBehaviors:{},asyncOpportunityIds:[],asyncOpportunities:[]},behaviors={},bcpd_callback=null,consentSetCB=null,consentGetCB=null,pv="pv\x3dy",dobcp=false,placementOpps={p:[],pt:[]};var domain=document.domain,test=false,.sep="/",delim="/",autoFire=false;var _cc_testCkeName="_cc_cc";var _cc_testCkeVal="ctst";var referrer;var _cc_idCkeName="_cc_id";var client,bcpClient;client=bcpClient=4545;var actualClient={id:4545,useFirstPartyDomain:"NEVER",domainPrefix:"",cookieDomain:"",cookieDomainIDN:""};function setCMPWait(waitMs){cmp.wait=waitMs}function setTest(testOn){if(typeof testOn!="undefined"&&(testOn==true\|\|testOn==false))test=testOn}function parseQueryStringToParameters(doc){var qs=parseQuery(running.src.rep

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1249
Entropy (8bit):	4.507675403977368
Encrypted:	false
SSDEEP:	24:t4po/yW8LhXJ43O4H4VIXjiAyj17zZZcS6Ojuun9B9w9/fA:VEZuRk0S6Ojuun9oBA
MD5:	482729F2C68B4C66A8F3D8254C9C59EE
SHA1:	0E370AB6B890344DBA7BF63C85505C578A770566
SHA-256:	AF5E7ACE999413E0657FE05C8BC104C4555449C74D779C591305CD363073548E
SHA-512:	4E851B308F3215D620C7DA7FB871324822D36592CD4C07B2A1741F1C022DF48A26B4D863D0FA0C23F416C145E19CCB87C4DCA67431D3045D684C55B2730DB055
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/pf_no_ads.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab9"><path class="cls-1" d="M88.49,39.28,63.7,25a7.4,7.4,0,0,0-7.4,0L31.51,39.28a7.4,7.4,0,0,0-3.7,6.41V74.31a7.4,7.4,0,0,0,3.7,6.41L56.3,95a7.4,7.4,0,0,0,7.4,0L88.49,80.72a7.4,7.4,0,0,0,3.7-6.41V45.69A7.4,7.4,0,0,0,88.49,39.28ZM32.81,45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3a2.4,2.4,0,0,1,2.4,0L84.71,42.88l-8.71,5V46.45a2.29,2.29,0,0,0-1-2.11l-.31-.16a1.73,1.73,0,0,0-1.79.14c-1.31.94-5.39,2.8-7.92,4.27a67.61,67.61,0,0,1-6.11,3.13V51H44.71A1.71,1.71,0,0,0,43,52.75v7.57A1.71,1.71,0,0,0,44.71,62h3.17v1.92L32.81,72.57ZM72.42,65.2,72,65S67.77,63,65.14,61.42c-.48-.28-.95-.54-1.4-.78L73,55.34V64.5C73,65.18,73.06,65.44,72.42,65.2ZM58.81,57.7V54.36h.9a49.64,49.64,0,0,0,5.43-2.71C67.77,50.11,72,48,72,48l.42-.16c.64-.24.58.45.58,1.13v.58ZM87.19,74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,2.4,0,0,1-2.4,0L35.11,77l13.18-7.54a8.71,8

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7087
Entropy (8bit):	4.838967944508341
Encrypted:	false
SSDEEP:	192:f91L1o1G1A1mK1W1jjtGKIT0HxT41HmTgHdT/sTKMpU4Ug:l1L1o1G1A131W1jjtGKIT061VFE1
MD5:	510705596D4E0C18083DD41E5DEF0526
SHA1:	901D611CED86EB441B9C0053F6A3F9C10D1364D7
SHA-256:	76399C7E8D135705D5032F4B5A423D17FF63FEA7172F0AB306518776DD216F52
SHA-512:	3D9C8AAF1FED4BDDC1A1C2C1E7763112947DD77F5FEB1EB13A408F1128FF0C5E8398FDA26947AD039B7EF9D620E24DF69B071A304FF3ABE0B422EE2C4F038BC0
Malicious:	false
Reputation:	low
Preview:	{"uuid":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","id":2474921,"name":"https://convertwithwave.com/","over_consent_quota":false,"over_consent_quota?":false,"consents_count":92400,"provisions":[{"id":null,"key":"allow_banner_custom_languages","type":"boolean","config":{"value":true},"data":{},"create_time":null,"update_time":null,"delete_time":null,"provision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","resource_type":"website"}},{"id":null,"key":"allow_banner_custom_styling","type":"boolean","config":{"value":true},"data":{},"create_time":null,"update_time":null,"delete_time":null,"provision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","resource_type":"website"}},{"id":null,"key":"allow_banner_extended_regional_consent_config","type":"boolean","config":{"value":true},"data":{},"create_time":null,"update_time":null,"delete_time":null,"provision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","resource_type":"website"}},{"id":null,"key":"allow_cookie_

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 622 x 948, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	26402
Entropy (8bit):	7.980181237992742
Encrypted:	false
SSDEEP:	768:9qrz8dBiizDKyPBn0AG2TSY5ND9dnVpd4CFEYW:YcdBiEDDuOSY5lr5s
MD5:	60E1910D77B2F40536DA8A50793F5E8B
SHA1:	0BC07C9048D8294F54314269E04F140B020FCA67
SHA-256:	2FCDA32A86BEA80FE0E301F3FAF1FC81A48F05447FBBDAFCE096449DA26745A2
SHA-512:	739772A6ED143874C32731D149F691F58E5DBB52BF9EB7944748878F4CC43CD32CE334BD53244C13AA3AFA518FD0058D8C53C2F8475F216029BB4E9E30391405
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...n.........a.R}....PLTE.(f.2x..r.+kg.Ej..f.IDATx.].o3E._...".4@..8G<........Id.#>.$..$......P.(r...4........DA.......<....o.;.x....J_.........ov.#.....g?..a..(.\.mB.....?.iw...W...s..m....b.....%..!.\.%....4.#B../..(...\|..r.0....}.K4. dLZ.O..rM7r>H`.6\|JI..........f&jtP.a..z.....E..z.>%.,.\.86.. .+.-. .\|..V.Du......#s.2.a.0........XJ....t.8..sh>.U..[B..k &^..'hu.j...aF\k.W..o......NJ).s>..$.k"..D.4..X?p^H.N\|dvl.Kf_..W.....'..=u.(f...!?..n..f..h..e..D{^D#..?.s..D...%......%.(.i..hD..t.\.#...2.D../.O...,.h"/.E. .W8../.\|'.......{.%@\ne....(.\.,....;...k..h..z^..P7".W{..(.~......k0.........2........z...) .rk...nD..g..Z....3.`.S....~...{.3.F.?.=.r.....Q9.....*^H....NL#..9.J..G...5g.\|.~ ...S....)1.;}M.:.d.V]QK9.w.9S...TD...b.w.K.1.......f........QW.p\..0.{tX...........u..Y..L.2.[........8..}L..]c.n.d..Q..L...... ...P.q.D\|/...._Ii....Y_...L...Z.. C.B>...Z.DsPn...v./}..-.7.9...N.. .......n-H./.\....;...-g....&..x..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 29 x 23, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	235
Entropy (8bit):	6.322170907091895
Encrypted:	false
SSDEEP:	6:6v/lhP2BSEX6yb/6TKFw2mK5hPBep8kHwlZXjp:6v/76/6TKys/kHwlf
MD5:	2754568278FDC1392CD34618097DA372
SHA1:	9AF8ECC591F839EA6D93186C9C2D3762182C88E1
SHA-256:	C84BA3B9AA9C70422B2EAAC134CDFF4955ED11DF7EEA3C485179C3A138BF06FC
SHA-512:	042A6651D1EF32E187F4DE29C2D8B93B4FE6B7D3A374D552D8ECEDEEC1734EBF4F426F7226038DE2491A7781D4E983AA18B723A3DF11162520E3D08A860EA850
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/right-icon_2x.png
Preview:	.PNG........IHDR..............&YZ....PLTE.....y..w..z..z........tRNS..@.MR......pHYs.................tIME.....7'#.6...._IDAT.....0.D.'.P.....`.........g.v.%.,.....5..;..>.[9..1.3....j...<......y6,....~..Y.../...(.f#V....IEND.B`.

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	325
Entropy (8bit):	6.544362369327944
Encrypted:	false
SSDEEP:	6:6v/lhPfcHsavlXnmLYaYpLfCW+JS1io8DSN2dUdu2Snbz1S1u2FgdLOp:6v/7SzFSYaFk1io8mj/c/16FEg
MD5:	DFA91A5FE2CDD73904C2D05F97A99110
SHA1:	728D3A1A0E5B3D9A4C739CD14E7EF60611AF9B50
SHA-256:	2B0A06678BDABFBBB38BE9A7E1A8823806A71323A48B64E702147851C8908E78
SHA-512:	3017A0D6048FAFE60DB458237059779DBD5AAFC3D3C6B45AE82C37A1F8A6845386FB4E3B0A6AD19CB8DC752F2105CCDE30523EFB8E119CAFBAFA39A3425C16F5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............7uQ...TPLTE..........................................................................................tRNS. ....._...?..u=....IDAT(...I..0.DQ!21u.vF..=1q..2.....W.I.j.(.t.R...F.....Y.6".C..M...J.Ye&.,.D...,....\|.....~..i...H..l ...).`.....~......r?...BDEO7\|U..%v....% (F>n.....IEND.B`.

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	315
Entropy (8bit):	5.377718757501969
Encrypted:	false
SSDEEP:	6:TMVBd/gEO58FiLUECc4sZXUg9BXSBU/9mc4slZKYnic4soSIXdhC/O4LZNHwY:TMHdjIMu5E4Bn/KY8XdU/P1z
MD5:	34BD6069C9F08BB444C86B8D099A000E
SHA1:	F78F72953D6F9F639D26F4E38C1D822B52E86763
SHA-256:	82B94716473AA225E715E117802145C5D2D725AA1BA9D476D61A5D3DA16A8C26
SHA-512:	5762D0CE880F5150A5ADB0395F3EB2A2F177091FA3F033E768CAB09D7E8D149F6BD98CF081F3A84EC63B92491BBE580977E4C784972157AEE94282824B29930A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24"><path d="M7,10L12,15L17,10H7Z" /></svg>

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 24x24, 8 bits/pixel
Category:	dropped
Size (bytes):	10822
Entropy (8bit):	3.878568995984578
Encrypted:	false
SSDEEP:	48:sKOwPsP29feqf0FKadK26lvh+esr3YURXyASdz/J70hvQ0UR2Sq:sK2sf0FKadK2lZrfoJUQ0U
MD5:	A301C91C118C9E041739AD0C85DFE8C5
SHA1:	039962373B35960EF2BB5FBBE3856C0859306BF7
SHA-256:	CDC78CC8B2994712A041A2A4CB02F488AFBAB00981771BDD3A8036C2DDDF540F
SHA-512:	3A5A2801E0556C96574D8AB5782FC5EAB0BE2AF7003162DA819AC99E0737C8876C0DB7B42BB7C149C4F4D9CFE61D2878FF1945017708F5F7254071F342A6880A
Malicious:	false
Reputation:	low
Preview:	............ .h...F................... ..........v...@@......(.......(....... ..... ..................................................................................................................................................................................,-.,..,..,..,..,..,L.,......................,..,S.,..,..,..,..,..,..,..,..,..,..........,..,S.,..,..,..,..,..,..,..,..,..,..,..,..........,..,L.,..,..,..,..,..,..,..:..,..,..,..,..,C.,......,..,L.,..,..,..,..r..............[..,..,..,..,..,..,..,..,..,..F........................,..,..,..,C.,..,..,..0..[.............................,..,..,......,..,..,..,..,..,..:................[..,..,..,..............,..,8.,..,..,..,..,..:..,..,..,..,..,L.........,).,..,..,..,..,..,..,..,..,..,..,..,......................,C.,..,..,..,..,..,..,..,..,..,..............................,L.,..,..,..,..,..,S.,...

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 738 x 292, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	21609
Entropy (8bit):	7.981178821301492
Encrypted:	false
SSDEEP:	384:wHB2v9h/PLtHaX+1KcvgEYNN2lKZ19bd3XYLRk0/YkLip3eQf8mWrUfJb6K5IBi:wHIFxPLJG+1DONklK/YLziRehH2x6Ka0
MD5:	30FC76D6B2556E296DA05D1CB1278C8B
SHA1:	8810B1670B62E848DAE36098287505103B7CD425
SHA-256:	FDB57C5DBC2A536D1A81B06340541E290B921EB23DB83B25AF9E01AD88181E56
SHA-512:	52AE04948A2FFDCAE1F139C7C0273119D4DF197BCDEA94FC937C1810BA2FB31AD1AD8CB85B9DB51F6358AA77425925BEEC65C302DE34657655343391B0C638DE
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/press/web_v2.png
Preview:	.PNG........IHDR.......$.....]d.9....PLTE.........17=................................................,27............................../..7.....(-3........%...7........JMQxyzVY^eef>@C....oop....@z-j.......4.........$(--..Z`i............[..214...o...............(.K......t..<.....\.....p..............=.................Q../..Pw.....#h.........`iu......_....7Ld ..)..#.-9/_37LO3LI....2$....1+)2#=:...........\|cX..9...qBIPt<.y`..g....f\|pSj.P'u..e.cg.E.............Y1[....H&4......smR%..z{2.1.......... >#.,........_.....^....R,IDATx..Y.O#U.....)..i.....d..]b.n".....7.j4..M..GB$....Q.#n\|$f............1~.{^..o.9{.....0.T........)kPp.vaddd..5.cDm(l.`.3%..tPq...aq.Z%y..T. ..f`...z)R..gN..h.....!..SXig}.I...l...+?W.p..H.g...N...5.L4<..(...8.X....e..bg.K[..HE7~]7..~'.(.......HP.z.....Q....o./.>..k}.d:W..!..."m.Q.....B.(4&...X.=....1n.....T;.O.&y..>..!.H=.2.P..@.4.q..6.\|%_..O.R...i..>.gl.......V%/..o.G.;U.V...@.......1.j...I..-P)A.o..!C.....0..T.&...sR.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	56110
Entropy (8bit):	5.957430352388791
Encrypted:	false
SSDEEP:	768:oWX9UreQN4JorA+7COq+7D+7V+7B+7tBvBh+75+7c742Bp5Z/+h:oy69oauYGI4WZM
MD5:	15FBAD857708628FAFEE80F8F5E38601
SHA1:	C6F992BA8D6BB193B70FD1CECC8B9B3CC14676A8
SHA-256:	2DE22E9CB5D36E8B19F331D0CEAF9834101B25A1318E3371AAF702027D7CC12C
SHA-512:	6ED14C7C15B9EECACB8ACAD909FD29EAA129CE36725C85100B204A79E1B46C654A27B34663D7C43942F05A7B4B85F5999D0C4D6BCC8CEEF9ED6041DCA711805F
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2407496164193484&correlator=373274877852442&eid=31080125%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&gdpr=0&us_privacy=1---&gpp_sid=-1&iu_parts=183096492%2CMediaFire-Zone2&enc_prev_ius=%2F0%2F1&prev_iu_szs=336x280%7C300x250&ifi=2&didk=2784911678&sfv=1-0-40&eri=5&sc=1&cookie=ID%3Dfb7f03735d5241db%3AT%3D1703780530%3ART%3D1703780530%3AS%3DALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ&gpic=UID%3D00000daf1f27be5b%3AT%3D1703780530%3ART%3D1703780530%3AS%3DALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g&abxe=1&dt=1703780569395&adxs=152&adys=120&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe%2Ffile&vis=1&psz=960x1500&msz=336x-1&fws=0&ohw=0&ga_vid=1411026819.1703780523&ga_sid=1703780569&ga_hid=139214927&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=EloKDWNyd2RjbnRybC5uZXQSQDVlYTE5NTEzY2MzMWI1MTcyMDI1YzQzOWJkZDRhOWZiOTI3YTBkZjM1MmFkNjM2MzdjNDRhYjg3NGViYTZiMDYYp_DuicsxSAASGQoKcHViY2lkLm9yZxiJ7u6JyzFIAFICCGoSHQoOZXNwLmNyaXRlby5jb20YpuXuicsxSABSAghkEhcKCHJ0YmhvdXNlGITv7onLMUgAUgIIahIZCgp1aWRhcGkuY29tGKbl7onLMUgAUgIIZBI-CgVvcGVueBIsZXlKcElqb2lkMmgxVmtaek5EZFRRblZ0TVhGTk1qbDFTakZJWnowOUluMD0YtfzuicsxSAASGwoMaWQ1LXN5bmMuY29tGOP77onLMUgAUgIIag..&cbidsp=CrYBCAESGQoIcHVibWF0aWMQtAYgAlIIcHVibWF0aWMSGQoIbWVkaWFuZXQQ4wQgAlIIbWVkaWFuZXQSIQoMc2hhcmV0aHJvdWdoENAFIAJSDHNoYXJldGhyb3VnaBIdCgp0cmlwbGVsaWZ0EKQGIAJSCnRyaXBsZWxpZnQYAiIkNzZiNGU5OWYtMGIzYS00N2NmLTk3NmQtNDA2N2JiNGMzNzZjKgQIAyAAMgd2OC4xMC4wQOgHSgA.&nt=1&psd=WzE1LFsyLFtbIi8xODMwOTY0OTIvTWVkaWFGaXJlLVpvbmUyIixbXV1dXSxudWxsLDNd&dlt=1703780566939&idt=1264&prev_scp=dkey_present%3Dfalse%26buildnumber%3D121918%26dladtemplate%3D51%26button_delay%3Ddisabled&adks=3841872593&frm=20
Preview:	{"/183096492/MediaFire-Zone2":["html",0,0,null,0,280,336,0,1,null,null,null,1,null,[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CLqqup3FsoMDFWjh4wcdjHsKEA",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-singl

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	578
Entropy (8bit):	5.177198230214231
Encrypted:	false
SSDEEP:	12:FwUuHnTyDRWZrlAjod0ezEFO1ETMAvIjXINV47i4AxH8KXQ2F7KnEFin:SUuHT6RWZrlAj00hO1ETBwTK4u41W/zi
MD5:	6BFC90B3044FA6CD3957531C464D8681
SHA1:	2217FAAADAAB2948FC78DDB370018C55726A9E0A
SHA-256:	85C85E00B03CE0A853D22A9988590983C2A1654CA51F93A0A220CBD4AD511E20
SHA-512:	C14F48832BB1D75970D74C35E84771B7A613F06371632D4DCC646B0BA8771C2B737737E494EE029BB2E926093180220A8419243E0FB2A5D4DC63FDEC131EAAE1
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/src/main.js
Preview:	if (typeof pixelEvent != "function") {. var s1 = document.createElement("script"),. s0 = document.getElementsByTagName("script")[0];. s1.src = "/src/main_code.js?nocache=1653289192543";. s0.parentNode.insertBefore(s1, s0);.}../////!!!!!-------Antivirus review ONLY ---!!!!//////.var download = function (entryApp) {. pixelEvent({. evt_src: "downloading",. evt_action: "click",. entryApp: entryApp,. });.. window.setTimeout(function () {. window.location.href = "download.php?entry_app=" + entryApp;. }, 100);.};./////-------Antivirus review ONLY ---//////.

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2776), with no line terminators
Category:	downloaded
Size (bytes):	2776
Entropy (8bit):	5.123321516846334
Encrypted:	false
SSDEEP:	48:IzAyUQu3mu3zYIXGb7VEUfUMnjjpeXNaY9sg694xU7zDm7vmpFjd83KvJsSVHrgm:G1ULkEwnjVeXNaY92CU7zK7OpFj63XSj
MD5:	A3A9A9EE8E72DB69D54E805F0586C651
SHA1:	9423B498B1B19136B84D704924324D3A805965AA
SHA-256:	72E960BAA80EC819264A604F2F8A8E5C21F81B785EBC17595211AD170D8B1BDC
SHA-512:	EE97AC661082B66013EDBFF75C1A7AAC9224F696409687A9599968ACCAEA7C88731D84662385B411DA595A0D510F50B40066EB283C9BBC4F1DD6CFE8516267F1
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.uidapi.com/uid2SecureSignal.js
Preview:	(()=>{"use strict";({551:function(i,e){var n=this&&this.__awaiter\|\|function(i,e,n,o){return new(n\|\|(n=Promise))((function(r,t){function d(i){try{c(o.next(i))}catch(i){t(i)}}function g(i){try{c(o.throw(i))}catch(i){t(i)}}function c(i){var e;i.done?r(i.value):(e=i.value,e instanceof n?e:new n((function(i){i(e)}))).then(d,g)}c((o=o.apply(i,e\|\|[])).next())}))};Object.defineProperty(e,"__esModule",{value:!0}),e.getUid2AdvertisingTokenWithRetry=e.__uid2SSProviderScriptLoad=e.Uid2SecureSignalProvider=void 0;class o{constructor(i=!1){this.registerSecureSignalProvider=()=>{const i=this.retrieveAdvertisingTokenHandler();i?(window.googletag=window.googletag\|\|{cmd:[]},window.googletag.secureSignalProviders=window.googletag.secureSignalProviders\|\|[],window.googletag.secureSignalProviders.push({id:"uidapi.com",collectorFunction:()=>n(this,void 0,void 0,(function*(){this.logging("collectorFunction invoked");const e=yield t(i);return this.logging(`collectorFunction pushes: ${e}`),e}))})):console.warn(

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2584), with no line terminators
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	5.7696984896163865
Encrypted:	false
SSDEEP:	48:SPqX6hmf55UzGtwCCO1BWqPWD5WH87BHqPWUP2kq7nJCJHpn:eo/falgzWgWD5ASgL2ZJCpx
MD5:	EB2241263A0975AD34A6839AD61EBE54
SHA1:	AA8DC627200EDAA692E472C54D205D2DE322C11B
SHA-256:	8596A082199D6D6E21150AB875B547236A6D0400AAEFA3AA5DA026123A41F4E4
SHA-512:	B850CF20FF20D73CC4A4F3B5C506656C8B1CE424D762853CEC6F7BB176C25EA1848807F1E1466DB86A128D51A06030EDDEBF18C8BDB2D66FA6C7868BFF29D894
Malicious:	false
Reputation:	low
URL:	https://otnolatrnup.com/Tag.engine?time=-60&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=36846&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=60&fpe=1&bw=1280&bh=907&res=1280x1024&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe%2Ffile&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone
Preview:	g367CB268B1094004A3689751E7AC568F.Media = {"Items":[],"ClientSideFilters":null,"DecisionProfileId":"8caf6976-afec-4d8c-954c-f85b5b466b76","DecisionProfile":null,"Server":"INFINITYWEB1"}; g367CB268B1094004A3689751E7AC568F.MappingPixel = { UserId : 'e52c68bd2ec041bc8bb423ef3441546f', PlaceMappingPixel : false, CallExtractionAPI : false, ExtractionAPICallbackUrl : '//otnolatrnup.com/leapi.engine?audIds=' }; g367CB268B1094004A3689751E7AC568F.ImpressionPixel = { PlaceImpressionTrackingPixel: true }; g367CB268B1094004A3689751E7AC568F.MiscData = {"Connection":"Keep-Alive","Accept":"/","Accept-Encoding":"gzip","Accept-Language":"en-US,en;q=0.9","Cookie":"IKSR={}; INF_DFL8=false; IUID=e52c68bd-2ec0-41bc-8bb4-23ef3441546f; ISSH=704416; VMI=; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP={\"Profile\":{\"Audiences\":{\"Audience\":[],\"ThirdPartyAudience\":[]}},\"CreatedDate\":\"2023-12-28T16:22:03.9451729Z\"}; ILPLU=#12/28/2023 4:22:03 PM; ILEALC=#12/28/2023 4:22:03 PM; ILMPF=#True; IPMPLU=#1/1/0001 12:00:0

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (647)
Category:	downloaded
Size (bytes):	514678
Entropy (8bit):	5.669850658889447
Encrypted:	false
SSDEEP:	6144:58+cCxHn6/Wk+Zx1raepBj8oQHOlkjc7n/NrfQjFw/hrPutvvQmkUtV6:5/bZk/ShQumirfqFw/MKmkUK
MD5:	37C6AF40DD48A63FCC1BE84EAAF44F05
SHA1:	1D708ACE806D9E78A21F2A5F89424372E249F718
SHA-256:	DAF20B4DBC2EE9CC700E99C7BE570105ECAF649D9C044ADB62A2098CF4662D24
SHA-512:	A159BF35FC7F6EFDBE911B2F24019DCA5907DB8CF9BA516BF18E3A228009055BCD9B26A3486823D56EACC391A3E0CC4AE917607BD95A3AD2F02676430DE03E07
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that control, are controlled by, or are under common. control with that entity. For the purposes of this definition,. "control" means (i) the power, direct or indirect, to cause the. direction or management of such entity, whether by contract or. o

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	181
Entropy (8bit):	6.107611925782035
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFlfSQ7Urzp/vhffNJK3/lzxtb9YNTeL8qoWtrTk+r+Nx1p:6v/lhPIFkQ7yzp/pffNEdz9YNEpNNV6j
MD5:	78226526732869ADD09512E9B4BE3090
SHA1:	F1CE9C760E17E69509CABE114392A108A6C839BC
SHA-256:	720671166AC43ABA99E3952B0B9341AB4E0FEE1FD891DB54E2A07F05DB653142
SHA-512:	94659C05B956F29792C1730088BE4A65C11C8636ED77632172DB71BE356FF72848628258FB8DEEA45FBBC901E8531C0B7A09225B977E5EF18C4084D986BD9C95
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................R...0PLTE<Z....m..Uo..........m........To.ay..........o5g....@IDAT.[c`....Ah6AQ..K...`.....=`.. T...W..`6666.36``RRRR.WR@0`......4.5.....IEND.B`.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	47245
Entropy (8bit):	5.920170951891972
Encrypted:	false
SSDEEP:	768:uWs9UreQN1eJ/pqmPpc9qmPpcp8Sn74jqmPpcWPrLrbD9jy:u+gqmRKqmRE4jqmRNDI
MD5:	19F7A3AF2890720DC81A30E923F90913
SHA1:	AE93FB418BD03DADCED7232326DDFB3021F0F5C9
SHA-256:	C22B27FCCFBAB066A67DCDD31190FC69B2FD5549FF65924BEE7EBA511530C2FC
SHA-512:	8CFCB9867F33091DC829EA86078574EE6921CF087E315A1B94F1B6DCD14A8A85D920D11711CC18E08627DBFF60B705369C37843B8C8559C1EF7BF327A78D9579
Malicious:	false
Reputation:	low
Preview:	{"/183096492/MediaFire-Zone1":["html",0,0,null,0,90,728,0,1,null,null,null,1,[["ID=d46f6dec2523e133:T=1703780532:RT=1703780532:S=ALNI_MYB7iey3d6VdIWlF1WPyc2Jxz2s4g",1737476532,"/","mediafire.com",1],["UID=00000daf1fe89616:T=1703780532:RT=1703780532:S=ALNI_MZj_O4Yb6YncPANU4N2O6OpPP0ozw",1737476532,"/","mediafire.com",2]],[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CNO0kYvFsoMDFQT3lAkdF6wHCg",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6362
Entropy (8bit):	5.394671909339693
Encrypted:	false
SSDEEP:	192:pNa5N4NXNRqNWNIJNENFQNDN8NJXNtNGgN+lNn1NhN6NmeNhNzFNM:vafWdRQciCFe5KJdjZwn73Am03/M
MD5:	2B9883233106E38B628134B62C687A20
SHA1:	7C8BDFE1FAFEAFD2DEA0EE3136686BBDBBE45905
SHA-256:	9A4EB2C9445287C34CB0A9ED5CC673460362483F0855BC91F8230DFA46A955E1
SHA-512:	6DF87A79A5866E3AD0446BF857287ADAA212FF32B8277561FE300158D3850F9D1717DA65DFCFC2AB325A66C4F021BA8D92871A0F59B862187C699D3A1E6D4682
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C700
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2) format('woff2');. unicode-ra

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15740, version 1.0
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	7.9866977438851
Encrypted:	false
SSDEEP:	384:RRlYHoE1mbF2cZgh17dAdJ0mB1cpOxvLTcZjh1LOz:JYIB2Sg/dYui1XBHwG
MD5:	B9C29351C46F3E8C8631C4002457F48A
SHA1:	E57E59C5780995FF2937AB2B511A769212974A87
SHA-256:	F75911313E1C7802C23345AB57E754D87801581706780C993FB23FF4E0FE62EF
SHA-512:	487AC3FD483F8EA131989857BCF1782C295AC72022BC2EBD4BF19001433D6DB65000E192E58B7A6F70F627D15C58F9FED9BA5FE0216363354BEC5A396299DAD9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......=\|.......l..=..........................d..d..^.`.. .X..<.....x..s........6.$.... ..\|. ..:.(..l.V38.......;..'....F.........)..!B..V..U......;..q....O#..cx..mt.w[.......x.UG\|n}........]k[....;J.....<=..F.$'/.......w...r$`....b(g..9C4....#.BK..G..9".Q...ld...j..C.l.F.i#.+.UO...%.E.Z..C..."......k1._....M.Y....-..H......Gm3.....YiJ.s..b..>..W..U.."..2..-.O........(H...0$....7l.7}.j...".C...w?/.oB%<K..d...'H....M]...k.."...E_k.............8.\...A.1U.9 5.@Jb.)J....Hkb ....!.n._.s.:5E......k..}.^...7]f.,a.7..a.H...J^.~...uWJ),....Z.7A..Ra:..k...}.R....G k$.{...%...R...."X6...A......p..V..IH[... .m..H.q.x.?\|......b.#:.c..Z.V.}..:P$j..c..B..^...HH......?......=.#^ q.@R...I....#.$O.H.N03~.@`...........8e.......>!...d..I.........g<)2......P....u..V.........c.1sK.."G.#...^;....=w....[G.}k.y.?.........c.a..\9f..zx..("mGj.."...d..........>c.!..Z.xm...=....v.V..:.6s.....J.oz#.....Y"d.....6>1...i...IQ..;2......\d......n..y....K..Y.L...O.2.....

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7580)
Category:	downloaded
Size (bytes):	8867
Entropy (8bit):	5.3681680139583845
Encrypted:	false
SSDEEP:	96:Z8RbvcJH9EryKuvOzluK/hbgEK1SQUMLRXl7JVDnEVnfV4KjY/uANxqMc0kU0UtG:QbvcZYDblnVQoQLvbI94KjYmcTlNXw
MD5:	9038F5587328682FD32C84478BF470B5
SHA1:	05ABD6365EF8998C23E12C9049FF9B7267027529
SHA-256:	311B0B310AB6403016C13EFAE0B9912866A930CAADF98816CA47EE60DE9D4930
SHA-512:	E91E8C23DE78D93E94C09155225DBA208014D8362C5C9332CD268212805693E561D3D67151B82090D5EA42186535EF75554F21323E39D51B34BC62C7D5C42608
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-1232118.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1232118,"r":0.4703531566413535,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":false,"legal_name":"MediaFire, LLC","privacy_policy_url":"https://www.mediafire.com/policies/privacy_policy.php","deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"google_optimize":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["survey.type_button","error_reporting","client_

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1178)
Category:	downloaded
Size (bytes):	1179
Entropy (8bit):	4.908938887169041
Encrypted:	false
SSDEEP:	24:dt1qBLcVESqBLcV7077iuc5THAHNGJqBLcV76i0EMG0svxvkwIh5:rIBAmBA7patGUBA76fYbIh5
MD5:	B09E7A7F5594114BEB672D32D5C0F7D5
SHA1:	53270DB52BF264C174770ABA8B267E53B426B687
SHA-256:	D79F04A6FE527FD5EBC145F217124C2B4530DA6A77B7BCE92DF01F9E7C75678C
SHA-512:	2B4C53ABEA7EE2A90A380EDECF982FE869AC26088585DB99FEF03D4AFC164C9705D7CAFBE7467C2CCFAC4F15F4226C4B902A1AA3339018D079EC0098AC588747
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/footer-d79f04a6.css
Preview:	.footer{padding:40px;border-bottom:1px solid #4d4d4d;width:100%;display:-webkit-box;display:-moz-box;display:-ms-flexbox;display:-webkit-flex;display:flex;justify-content:center;align-items:center;flex-direction:column}.home{color:#555;text-align:center;display:-webkit-box;display:-moz-box;display:-ms-flexbox;display:-webkit-flex;display:flex;justify-content:center;align-items:center;flex-direction:column}.home small{font-size:12px;opacity:.9}.home .scroll-top-link,.home .scroll-top-link:hover,.home .scroll-top-link:active,.home .scroll-top-link:focus{color:#22669d}.footer{border-bottom:0}.footer>*{line-height:1.5;margin:0}.menu.footer-menu{list-style:none;padding:0;font-size:.9em}.menu.footer-menu>ul{display:flex}.menu.footer-menu .menu__item{list-style:none;padding:0;margin:0;display:-webkit-box;display:-moz-box;display:-ms-flexbox;display:-webkit-flex;display:flex;justify-content:center;align-items:center}.menu.footer-menu .menu__item:after{content:"";display:block;width:1px;max-wid

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.844555459508597
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKHNqFjKW6s1d2/4VgWaee:PLKdXNQKHNwjgE84VgL
MD5:	74A981E3AAAA1F7200E5F87B03883703
SHA1:	22CF9554C2D813A219B2982AE769695119AC1092
SHA-256:	55052D853A3F144505DC773EF237AC838AF312C0180FF293F7CF1A3847345EAB
SHA-512:	0E3190F7E3DE1B0127001342B33BCD3F23AD1BF113FEA94A97F9D4A59C9C6BFEEC61A5889BB69FB0D16BDED2656529DFFD69E48D4A4B32E436346772D7D8FBF2
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js');

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	986
Entropy (8bit):	4.577609893742807
Encrypted:	false
SSDEEP:	24:t4po/yLbbdNIZ4pGZURi9S2bai3UwhMVwhtpxZZEJ4CxWEZkm:VsbW4pGf9/NTMJ4cWEZ
MD5:	48F4D3CE124BFE86FED5D8946A83C38D
SHA1:	F9E38516283D36396DA526D690C1A7898E90480E
SHA-256:	A1910EE580F391ABDB4D8D184AE2F6DC85612505382DCBD4E5DBF3E4EBB461D6
SHA-512:	CBB78C6CB02DC2C1EA868DCEBCABA9867F00953D6BD9061F19F678675075EFBABF96C3E63E8B14AB749F0A10950D2939090898A23159A4DE6F87FDF23AEB98FD
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab4"><path class="cls-1" d="M75.07,80.86a4.7,4.7,0,1,0-3.26-1.38A4.45,4.45,0,0,0,75.07,80.86ZM84.34,56.6a1.08,1.08,0,0,0-.33-.8L77,48.74a1.08,1.08,0,0,0-.8-.33H70.43v9.27H84.34ZM42.61,80.86a4.7,4.7,0,1,0-3.26-1.38A4.45,4.45,0,0,0,42.61,80.86ZM29.39,35.19A2.23,2.23,0,0,1,31,34.5H68.11a2.35,2.35,0,0,1,2.32,2.32v7h5.8a6.29,6.29,0,0,1,3.95,1.63l7.17,7.17a4.92,4.92,0,0,1,.81,1.09,6.57,6.57,0,0,1,.51,1.1,6,6,0,0,1,.24,1.34Q89,57,89,57.36t0,1.38q0,1,0,1.27V71.59a2.35,2.35,0,0,1,2.32,2.32,2.91,2.91,0,0,1-.14,1,1.36,1.36,0,0,1-.49.67l-.6.42a2,2,0,0,1-.85.22l-.81.07q-.22,0-.92,0l-.81,0H84.34a9.27,9.27,0,0,1-18.54,0H51.89a9.27,9.27,0,0,1-9.27,9.27,9.27,9.27,0,0,1-9.27-9.27l-.81,0q-.71,0-.92,0l-.81-.07a2,2,0,0,1-.85-.22l-.6-.42a1.37,1.37,0,0,1-.49-.67,2.93,2.93,0,0,1-.14-1V36.82A2.23,2.23,0,0,1,29.39,35.19Z"/></g></svg>

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3752
Entropy (8bit):	4.201035151772803
Encrypted:	false
SSDEEP:	48:8VGSY79uXL0pJB2ftLyOG0TeCX2XYaRrEkYlm16MbXjsUTEfFiIEYyRDVuJ7dMJ8:VsYpKfWCXQdW/5Mrk5EXDVuJcPUj
MD5:	2278B27F4EC7326AB53DD04D6E06BDE9
SHA1:	46B6322A0E18E99726B679A7BA148760A3069705
SHA-256:	5678FC26969D953C1FA2C0B974765F128C2BCB8ACEB3772C394D0DC28529BCBC
SHA-512:	F638A743D482397C8F5EA23BE6E201A74339B5C6286E021ACC87A4CD55C7D3EF4FDFCC353D22953B3F94EFAC7800A9C5ED3B4F2D675F51D9BBA2FE101E014D4B
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/share.svg
Preview:	<svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="outlines"><path id="bg" class="cls-1" d="M95,187a91.92,91.92,0,1,1,90.94-78c-.11.67-.22,1.34-.34,2A92.14,92.14,0,0,1,95,187Z"/><path class="cls-2" d="M95,1a94,94,0,1,0,92.68,109.73c.08-.4.14-.79.2-1.19A94.07,94.07,0,0,0,95,1ZM3,95A92.43,92.43,0,0,1,4.58,78H15v39H5.67A91.72,91.72,0,0,1,3,95Zm92,92A92.16,92.16,0,0,1,6.18,119H17v-7.82c.69.18,1.59.48,2.59.8A76.67,76.67,0,0,0,42,116.15V133a1,1,0,0,0,1,1h61a1,1,0,0,0,1-1V82.38a11.51,11.51,0,0,0-3.39-8.19l-17.9-17.9A1,1,0,0,0,82.9,56H43a1,1,0,0,0-1,1V68.56a.9.9,0,0,0-.28,0l-7.58,2.21a7.49,7.49,0,0,0-2.34.89L21.17,78.16c-.25.14-.6.37-1,.63-.67.43-2.12,1.35-3.16,1.86V76H5a92,92,0,0,1,181,5H180V79a1,1,0,0,0-1-1H167a1,1,0,0,0-1,1v2h-2c-.7,0-3.22-1.61-4.16-2.21-.41-.26-.76-.49-1-.62l-10.66-6.48a21.35,21.35,0,0,0-3.75-1.46l-13.51-4.4

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1067), with no line terminators
Category:	downloaded
Size (bytes):	1067
Entropy (8bit):	5.10193755743693
Encrypted:	false
SSDEEP:	24:ICGaSqIfyMWI/85ojbbJIOlSqIuHL0+8/8etNCXw8/u0MFC5Nz:RGaSqU/85ojbNVSq+NCX7u05H
MD5:	78C9F2DAF6E31D1A649D1BBD3FB61668
SHA1:	1CFAE2A2F1D283230CD2EF76B4CAED083A09EC8A
SHA-256:	E2E2A10F2CB324627B3E07CC7789AD5C4626E4068A4089A8071F60E67168E3CD
SHA-512:	0532BE0CD53D4CC90B99FCDFD370E11CF9874CBFD7BF8CB2D5F6A585417DDD9386400BA92DF8B5E964DD8CF46BBEBDDF4DD69814D25EDDFEE141642ACF28B61A
Malicious:	false
Reputation:	low
URL:	https://go.ezodn.com/detroitchicago/vista.js?gcb=195-8&cb=5
Preview:	try { !function(){var e;__ez.extra=(e=[],"divId",{Add:function(i){if(void 0!==__ez.dot&&"function"==typeof __ez.dot.isDefined){if(__ez.dot.isDefined(i)){if(i.hasOwnProperty("divId")){var t=__ez.dot.getEzimFromElementId(i.divId);null!==t&&(i.group_id=t.full_id)}i.pageview_id=__ez.dot.getPageviewId(),i.domain_id=__ez.dot.getDID(),e.push(i)}}else setTimeout((function(){__ez.extra.AddPixel(i)}),1e3)},Fire:function(){if(void 0!==__ez.dot&&"function"==typeof __ez.dot.isDefined&&__ez.dot.isDefined(e)&&0!==e.length)for(;e.length>0;){var i=5;i>e.length&&(i=e.length);var t=e.splice(0,i),d=__ez.dot.getURL("/detroitchicago/xtra.gif");__ez.dot.Fire(d,t)}else e.length>0&&setTimeout((function(){__ez.extra.Fire()}),1e3)}}),void 0!==window.ez_extra_cmd&&window.ez_extra_cmd.forEach((function(e){"function"==typeof e&&e()}))}();} catch(err) {var hREED = function(er) {return function() {reportEzError(er, "/detroitchicago/vista.js")}}; typeof reportEzError==="function"?hREED(err):window.addEventListener('re

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11219589166?random=1703780591807&cv=11&fst=1703780591807&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9123342550&gcd=11l1l1l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fconvertwithwave.com%2F%3Fsrc%3Dd-cp20278471669%26ob%3Dobgcobedobem%26dvc%3Dc%26k%3Dfile%2520converter%26crt%3D677032990697%26adp%3D%26plc%3Dwww.mediafire.com%26tgt%3D%26sl%3D%26cpd%3D20278471669%26iid%3Dwav-cvt%26gclid%3DEAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE&ref=https%3A%2F%2Fwww.mediafire.com%2F&hn=www.googleadservices.com&frm=0&tiba=Wave%20Browser%20-%20Efficient%2C%20Intuitive%20and%20Personal%20Web%20Browser&oid=af779c44-13ad-47a2-ad3d-9786811ff14d&userId=af779c44-13ad-47a2-ad3d-9786811ff14d&auid=59812670.1703780592&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config%3Btransport_type%3Dbeacon
Preview:	<html></html>

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2502
Entropy (8bit):	7.885521295962446
Encrypted:	false
SSDEEP:	48:kfcMDcv54meKZVcvTOodUWfYKESWX7OI40t+34oXROODmtnt31tN+kniLDX9:kRwRPVsqCUctWX6IHg3jEODmtntl+Fh
MD5:	FF862C0E7A4755ADF3682DA543BCE1E4
SHA1:	9DB9B9C9BB176AEE7F639F5F4A4CD702105358B6
SHA-256:	36133CA07927C88A7CC578FDDBAED3C668AB75087834D0CA13DCA5DE4EC856C1
SHA-512:	F7BD41F50C64D5DFC88989D0DDEE4C2CE816A08DC7410E5176C9386052791C04991022D406ED15BD0B6CA8C1E1ED83CD2E3B37C0F601DE26646F0FC49FCA0E6F
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/adchoices/en.png
Preview:	.PNG........IHDR................W....IDATh..go.I....&s..g....I.8...6Yd0".(..#.."..d.t&.x.q6.8.7...'...u......wX.!.C........O.>.e....I....2.,.,....A.....,tV....m...6..SR....'.JKKi..l..<0=.={x........::}.4M.0....C.;w.......)==]y..Ky..?6..\.z..r..w...r'C5.:....a..z.....k.}....6y.d...1..x...5.........H...EDD....p.i..}...\|....Y.....<..{.;.V.9..t...\.hm..Z.y..]........C.u..#F......,x..-[.5x.....5..I.N.....&Xx...6....;......z..?.....n..N.u}...>}..7..\|:~.8..q...U[[K.z..v..@.^.t...k.*++..X..........\...L;..t.........%%%Qyy9{..]...n7......u.X....,x#.....m...F}...[.n).....G..U.x\\|.(l..r..IZ.f..'._UU._?h..g.RZZ..5<..3.z.jZ.v-.C.D...799..........TQQ...r.....u.VZ.b..:t..4...!.A......5..k.5;X....:p.......y..E.=...,v.Vj....=z4..;...1c.p..;.}....Pc.......i...Ba..;v.....}.v.4...yn.c`....C.xO.......4./l.....5..f.a.]n.]....=...8(.....X..Bs...a..z+P...........>.\..".mX(3.(/...W.......S.......<..jYY...U+.1;;...._..F...D.~....y.fo.QSS.}.......

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2024
Entropy (8bit):	7.890621627952746
Encrypted:	false
SSDEEP:	48:2QQquroacP263PKBDxk47F/GNoU3DVcePXx2vq3l7apS:2Uurr63PKBC4J+oSDVtPUy3lES
MD5:	E23CDD516B2E6CE177B098D5B982D501
SHA1:	FA053B4ABDABC4D3DE0FA7E2E06BA9B936BC5293
SHA-256:	90AB603DED429F5EBB7FCB6D317A3898C55B67DEA60A16AA792FA3AD8D39E541
SHA-512:	12C5D728A1AF0FB5BF8F7D233E9256E71FA41B3F6CBF83807802DB787E2D5BF169D153F28B73F0F451769EBB243E5A8929D62CFB30D25CEBF10185B86D4792CD
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/wave-ico/wavebrowser-32.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....uIDATX...kl............lcc....y....E@..CcQ.D)I.&.T..T....)..5R....."U.mZA...+T.-....1.B.8&.0..1xm..<N?.=k..u..3......=3s.....P.Z.pe..2`.0.T.....].N!......w....<..~M1A.9.Q.....@~.d.@...t>.kI.!..P..yk...K.jZ...."..jh\........o..=.3.?..'F.@..k.L...,@5.V#..J.QR....g.. j./R..NiI1..9./>.?.......{{..8x...9..u.\|......vlgN .o~.........?'B7..j^U...TSk5n. ..$.=.+.......)...W.n.Bg...X..A.1p.2\}@5.N.P.Z.4..]..$.......`F..n.z.[dger.Z.'Pk/O$...j....2.h.O.....P......P.8...\...#"D.V2\..>'.".j...$@.)F.FJ......]/.......z.l."?'..@..n".!j.j^]5.@.~.E.......6(.......E..M....1.h5F... ..n...%.x.)U....x`..dgf.....ar.S).T8....&M..&p.D^....4..@.Z..J........."f...F.....X....KJx....").....6(.I......4[t.....j-..........`..W.....%...G~.........]...O....<......\.sI.B...Y>rn......N.=....l.u...\...<.i....+\|q.l......\|..8......T..D.j\..p".S.9.}.....+.e.wg..-(z."...@MUe..w..3.....

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	5824
Entropy (8bit):	4.082510213920796
Encrypted:	false
SSDEEP:	96:N4WP9X6mnadTnkl5B60Ll6eaYTCZllJ80bhGmSSG:N4y9XqTn82eaYTCZekhGmSSG
MD5:	19239C8711EE135A888A1DD0302440E7
SHA1:	8F9EC29D2079DDA3CDD74FB6158F4545E2796B84
SHA-256:	09EF7680FAA1C0C068292B284ED3274D81779B3ECF6FBEE1D22E11BD4A366A0E
SHA-512:	0A8824C1EA6CFEEEFFD353BB62AF9400CA87E6129CC6FE1A1A084ED9BC66DB715B6F0C7EB4A9A09A75769FEEF5B5ADEC4945A46BE707731172A16FCC630DF4DB
Malicious:	false
Reputation:	low
URL:	https://www.mediafire.com/templates/upgrade/upgrade_button.php
Preview:	<!DOCTYPE html>.<html>.<head>.<style>. html, body, a {. margin: 0;. padding: 0;. border: 0;. outline: 0;. }.. html {. font-size: 14px;. }.. body {. display: flex;. align-items: center;. justify-content: flex-end;. height: 100%;. padding: 2px;. box-sizing: border-box;. }.. .show-focus-outlines :focus {. outline: 0;. box-shadow: inset 0 0 0 2px hsla(0,0%,100%,0.9), 0 0 0 2px #002369;. border-radius: 4px;. z-index: 1;. }.. /* ==========================================================================. Button styles. ========================================================================== /.. / Core style */. .Btn {.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 731 x 458, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	97578
Entropy (8bit):	7.964941817393392
Encrypted:	false
SSDEEP:	1536:2xcbDOGcrDi+r5UP0iddcsXm7yCzHm/8wexWJKif0nHRoXEgQ5fTBKMxTOZYOWrs:2xcuNP7VUszwCj88viExtgQFs6AYJ1m
MD5:	3328F78EF3C4B0D395C172FF7714FDBE
SHA1:	38229049EAFDE9F07E466DEF3B71DC81D6BCAF75
SHA-256:	63D946F7492A0CB783794291D8A605BF4AC4197606061EBF3EFA4A10C2F83BE1
SHA-512:	1AEA9979E2301CC342CC1204BFB78B0B10CF63E88AA3F5CFCB7438468E5B93CD6886026485B558E9EB5E3870A7476ECE0B5AADC8CCE08394088B93AFE9DB510C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............w9....PLTE...&-8."-.%/!4.'1)1:. . +%+4,4=17@..,..(......4<D.X...2.`...8Qf..... H.j.%4N.s...$.,".O..."../..><BJ..C.G......U9>G +:&0.>..{...N...."Q.. ."B../..%..(.5...f.....q.\|...= .$2)4A..I$0>.(8..{.......]..TAFL./...K.(Y..^&4G...R....7.$.....,..E.....0H-Lg)=R..<..........$.. ..8..P.....1......../Q....,..-.+Fa.'...U..\|.<...............J...*AZ.C..^.....A..'..!.....4.H......0..k..O.{}....CKTNPT....,9404.......&..........ikmPW`...Nc..h..&.....;......1`dj.5b......Wm.....A......>.%.....tst.r..\^a....@.'...[.mt\|....9...........N.J].,!...7E[....8tJ,-..B.........\\UCVv6..Xi....3M...{...- ..!n\|..c..SI.^..\|....X.@.....y.........sK...5=tp......ueE9.......qwwT...Y.W.@G.^2..2J...U.......UB(`.....J....rf.KK.s...t.=.rO....l..\|.\|1..y...h.v.........Y..>.y.U...9..".(.%...y.IDATx....A...j@H..2.vs.M..7..{.\|...7..DA...>...t.nO......I...CM..z.d.p.^?D.B}.b...FZ.....K.[.'g...V.....%...^.3=e...S.k..,H...W.x..?.6..\..j[...~.^....5l.h...${..G.GW.G....!Y

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESENsJZHGl8ALruYxKoIjbX0E&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	1.9733781811385676
Encrypted:	false
SSDEEP:	12:suZHtjTPH80V0wiAaxJLaj5jphDI3iSsfn:suZh5iAaxJLa5jpm52n
MD5:	B71C63AF25F44A21143174E24791FBFB
SHA1:	EA7F0627F790FF60A65EA35B59F2641BB8CE8476
SHA-256:	7942B4CE85D40498753EC1C9AC369B1F01B2BD4C9614061F6153BC8C15F8C7BA
SHA-512:	B6B75D19FB7DE0D473D2D65D5ED1BEFDC99F2B89B4568FA363DA793A042F27A9CA8E79DA62A263F76089E0ECF2B5A0A891E786868A60B77D9193A8C267BB22D2
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .................................,h.@,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h.@............,h.`,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h.`....,h.@,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h.@,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 468, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3008
Entropy (8bit):	7.8720725823782045
Encrypted:	false
SSDEEP:	48:1DqbHAILFywVeQAm5XHS7oB+LVXkRMBnFubixiXNp33zZb1N/v85hKEm2gN:1MgU84UBxXkqFzuB3dJNsudN
MD5:	03CEEB90C133E4306FD61A362C894B3E
SHA1:	DDBF6954C30B8A5B6D2457D1278A5058BCBA6539
SHA-256:	FDA06035D7B9696E330E52F9A1507F1F01FCE71C07E3DD07BD825A02CBD9BBDE
SHA-512:	510A2676A87BFDC9BC57DACD6BA05C2CA3468F02EB9D7B1A77BA4AA93C5BE2DA4E744733D8FDF739EA9D9C2A58DEC8BE879BE1D66F8085D91FB783623713E697
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/press/productFeatureSprite.png
Preview:	.PNG........IHDR...$.........R.5....IDATx..}......x9.h...w.j...=L!.E.$.....[[..=....h." .#.75.C.......m.$(.J...65m}....A.;....Ko...ngwgwf_~.{........3......P..+p.. (2+T...P.C.3B..J.....FB...).F1.+..jP.5.P.....w.O.[SOj....:..n.M{.)...z.FQN.V.p.&.-.P..~R9...&.k3.y...kTn ..um.5!..u..eA=h$..zS...rE.R.i...7{t.).G.c.%o...gF......#W....~`.8...>......NC.7..f....L..6.(.j.6v...C.X..Y(.T.B....<.5.sZKB.B....LL(....>.3!..>,.`R7..e=).B......U.$z#..D...r.z;c.2..GS.9.........O...i.!......7....!49.!.2K}dV%.CR..>..-b.T=./..!d.).q.....t.o....?~.#t5.%.c...........1.._.K.$.=......E.uP. $8.F......A.F..s..T.p..@E.!s..t.-l)_..[....x..../[.B."0..9BO..7X.B.....8..3......m.22.L...("x.t.$...Z......9$V[.h.3Z...+.<...o.7..2.4.3...8.:.>(7Z.P..8+....N...m.......b..\|....t.*...&p.L...={...~....F0?..y...v.8.E.J.f.=........5.P.W..7'.P.;I..#.4....?e....e....4...G.........(3!....2.K%!t.f...P...:.B.u)..N......V.....J.0.!...h...3H.>.C,.B,.E..mao..R...L.Op.......G.,....8..H.

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 451 x 289, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5692
Entropy (8bit):	7.924314540981831
Encrypted:	false
SSDEEP:	96:bLxs4kywX43sUEaV9IRF82DWkqy581p//lDd5m/pF20cYIFc+jtF5noN:bLnkTXGWRFIi81p//pzKp00cXuN
MD5:	649D474A717D45421D0E5BFE2E749A3B
SHA1:	F92DD35DD9DEF3B221DDBA31B1B78365F99AEFEA
SHA-256:	444DB899E2AF17C7F06959C416956011CF9C43515B016D0326CCCC1164401B99
SHA-512:	C20CE8616EC9B28F41A7B18A0E3FBB7A214B4BD806DBAEDB408CA4A84DED3352B0A035BB21C2EA9371D39569050AE83BEE4A5456A0EBB405B406C87BD0EC462C
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/press/android_v2.png
Preview:	.PNG........IHDR.......!.....4.;e....PLTE...-44........sss...y.......6...........OQQ......=BB...........5::$%%...........t.D......)1u.....T..p..&.....N.......LS.....\|....yH37..........V8)..1..<..._}7A....#4?.......@...P...6...u.....q(,,z....\|... ........+22....bO...6..ccc:.. ).&.5.....e............211...d..177..!...................-5............c.........g......;E1......0A.Q`>.CE.....6....................<i$....wIDATx...1..... ....n`............@pv. .m........d`..!w.F...K-.y.......5<.I#<.+\|.....6..9.%z.s&b.)..E..(..c\..\..p[.(..u.G[\|..RPK...i.....2.n...}&.........._d.....(..2.a.....8/.....=e....opK&....~.i..3.....'S}....M..%..@e.Y>[.....\.....v.._.C....:..v..XJQ..p`A;..hG...K..G.p\.(BJ.'..Q..W.....HBM\|......0....JV.5...'.Q.o...,..k.E....gh...zBk.-..A..P_J..Y..YCkh...5.....Z.....+7...@<.R..:Mww...!..[$..@...yQ.>.R..>....oM.&.q...bV.q.c...Cz.\..:w..o......m.R.\.0...QQ.,.N2wV.e.k.n(.p....9!@J`.n......D.ylK...P(.Px.8.. ...P....w.eSC)5..Dp.%.l.:.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62620)
Category:	downloaded
Size (bytes):	208386
Entropy (8bit):	4.9793920644812415
Encrypted:	false
SSDEEP:	1536:/MTMqMTMYMTMxMTMpMTM8MTMEMTMxspUnUVnpxtY0D2idfAHtVl/DwWedSS1Rcrn:LnUVnpxtxYNTbw/KF2b0fba0DVkSF
MD5:	C96CE144A64566E72B3A0AF365B8B16C
SHA1:	3F53EC20EC3BBFAF519523FA31408F3E4E73FD6E
SHA-256:	AE347421EB555DC4F84727252CC5F1BC26029EF846FD957B542B5300426CF721
SHA-512:	15876BEE9D5BE8664DA7F5303EA493E6AFB29F6116196855124882D7E202772C91293532503A00D74C376BDD20DCE77299F79FF6AF5B734340551418ADF31DE3
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/index-ae347421.css
Preview:	@charset "UTF-8";@import"https://fonts.googleapis.com/css2?family=Inter:wght@200;400;600;800&display=swap";/!. Font Awesome Pro 6.1.2 by @fontawesome - https://fontawesome.com.* License - https://fontawesome.com/license (Commercial License).* Copyright 2022 Fonticons, Inc..*/.fa{font-family:var(--fa-style-family, "Font Awesome 6 Pro");font-weight:var(--fa-style, 900)}.fa,.fas,.fa-solid,.far,.fa-regular,.fal,.fa-light,.fat,.fa-thin,.fad,.fa-duotone,.fab,.fa-brands{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display, inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-height:.08333em;vertical-align:.125em}.fa-sm{

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:YGKeMfQ24:YGKed24
MD5:	055DE8F64447F10ED2C4C7F78E27B7CD
SHA1:	BBFCC7FBB135D3893E9BD559E44E069F57DFAB31
SHA-256:	30C714BF4216E577686D238B98561D093672CB25BF90BAAB50DD956F75CDA4B3
SHA-512:	1A726490120152235BBCE20368630EF20FAC7964BA32F846FAC2C1F1A58EE9722356AD94FA6342685E8CEB5015CE2E944EDD739B901D3D9B0A22A5238118142B
Malicious:	false
Reputation:	low
URL:	https://api.btloader.com/country
Preview:	{"country":"US"}

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.9266796438054827
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2213)
Category:	downloaded
Size (bytes):	131580
Entropy (8bit):	5.556319234059009
Encrypted:	false
SSDEEP:	3072:11JJRMLWbcOhjrO0zOS1/DpC75J/qUNgsEodKx8:VyJuAsDpC75JzedoD
MD5:	4DFF17B463A9517B0932706A702307D8
SHA1:	B9F347C5FD1F4111826EC2B694C47C9C2462DF7B
SHA-256:	D8D598D04A44BC0235C6FAF9065C551233AA95043E293E80D6BCBC4A9C14840F
SHA-512:	B55FAD2DBAC86D92FBAE8B93242BD1DA0995A7BEC63DA0D7B101CBF442A753B0E92AE035ECD2E3247B4D31C8F8FB3BA628789D6834D03277B4410BC433CBE8F9
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/gtm/js?id=GTM-KVQ87DS&t=gtag_UA_829541_1&cid=1411026819.1703780523
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"72",. . "macros":[{"function":"__e"},{"function":"__dee"}],. "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenForMutations":false,"tag_id":9},{"function":"__asprv","tag_id":10}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":["macro",1]},{"function":"_eq","arg0":["macro",0],"arg1":"optimize.callback"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ .]..........};...var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=function(a){return a.raw=a},fa=function(a,b){a.raw=b;return a},ha=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:da(a)};throw Error(String(a)+" is not an iterable or ArrayLike");},ja=function(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c}

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (3386)
Category:	downloaded
Size (bytes):	9119
Entropy (8bit):	5.519807616212731
Encrypted:	false
SSDEEP:	192:jp7K3sZ7HkOvBOqfcWFV+M/hg9s9jHRD38920tplU+2K:jpG3sZ7HnvBbTGM/hgm9rt02splU+B
MD5:	5B68A33D82D6666C3188CC273EB8CDE7
SHA1:	513F7B69DD5C6253DC8038635E514E5B321C7A61
SHA-256:	1FC8DFDB8F646E934BF93BC6F793604BB12C6B304C04AC509AA86CDC1A2DBBEA
SHA-512:	BD9D285C4D81CD033B9FC28160A58C32B2AC97FC66F68E396E3F3026AEB8A42B3A3072700EC0E91494D2479A6DAA8D964BCF69D728F7325F27A965BC31606FC3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20231207/r20190131/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><html><head></head><body><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=this\|\|self;function q(a){return a};var r,u;a:{for(var aa=["CLOSURE_FLAGS"],w=k,x=0;x<aa.length;x++)if(w=w[aa[x]],null==w){u=null;break a}u=w}var ba=u&&u[610401301];r=null!=ba?ba:!1;function ca(){var a=k.navigator;return a&&(a=a.userAgent)?a:""}var y;const da=k.navigator;y=da?da.userAgentData\|\|null:null;function z(a){return r?y?y.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function A(a){return-1!=ca().indexOf(a)};function B(){return r?!!y&&0<y.brands.length:!1}function C(){return B()?z("Chromium"):(A("Chrome")\|\|A("CriOS"))&&!(B()?0:A("Edge"))\|\|A("Silk")};function ea(a,b){Array.prototype.forEach.call(a,b,void 0)};function D(a){D[" "](a);return a}D[" "]=function(){};var fa=-1!=ca().toLowerCase().indexOf("webkit")&&!A("Edge");!A("Android")\|\|C();C();A("Safari")&&(C()\|\|(B()?0:A("Coast"))\|\|(B()?0:A("Opera"))\|\|(B()?0:A("Edge

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=42E5D102-FCC7-4079-AEB2-CAED94F1F642
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	50798
Entropy (8bit):	5.904622666281676
Encrypted:	false
SSDEEP:	768:yWg9UreQN1e9nitNItyHNItyyn7UKNItysVrLS+Euvi+9r:ySt2q2PUK2XKei+N
MD5:	37477B5EDA7FCB6F4E040B38524C33B3
SHA1:	FF9477272F66DE84835CAB2845AB1C2576F83C5F
SHA-256:	1CE38BFB131BD719EE5F5B6EBC85CF1895D15E6940B370858130143773909FC2
SHA-512:	104657132ABD1555DEA0CC9329BD93C084D1E2468E3AA5F752B458F8FBE0216720281748D5EE0C4BEF497BC4479B26BCDD60AF54A709BBEA54A516F7FF4936CC
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3627263333111943&correlator=1979357155184622&eid=31080117%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&gdpr=0&us_privacy=1---&iu_parts=183096492%2CMediaFire-Zone1&enc_prev_ius=%2F0%2F1&prev_iu_szs=728x90&ifi=1&didk=2298854458&sfv=1-0-40&eri=5&sc=1&cookie_enabled=1&abxe=1&dt=1703780528936&adxs=384&adys=10&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&vis=1&psz=960x1500&msz=728x-1&fws=0&ohw=0&ga_vid=1411026819.1703780523&ga_sid=1703780529&ga_hid=227450385&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYpuXuicsxSABSAghkEhkKCnB1YmNpZC5vcmcYpeXuicsxSABSAghkEh0KDmVzcC5jcml0ZW8uY29tGKbl7onLMUgAUgIIZBIXCghydGJob3VzZRim5e6JyzFIAFICCGQSFAoFb3BlbngYpuXuicsxSABSAghkEhkKCnVpZGFwaS5jb20YpuXuicsxSABSAghkEhsKDGlkNS1zeW5jLmNvbRim5e6JyzFIAFICCGQ.&cbidsp=CrYBCAESIQoMc2hhcmV0aHJvdWdoEOgHIANSDHNoYXJldGhyb3VnaBIZCghwdWJtYXRpYxDoByADUghwdWJtYXRpYxIZCghtZWRpYW5ldBDoByADUghtZWRpYW5ldBIdCgp0cmlwbGVsaWZ0EOgHIANSCnRyaXBsZWxpZnQYAiIkZGIzMmQ3MDgtMzk0Ni00ODAyLTk3ZjYtOWI2YTYwZjk5Nzk5KgQIAyAAMgd2OC4xMC4wQOgHSgA.&nt=1&psd=WzE1LFsyLFtbIi8xODMwOTY0OTIvTWVkaWFGaXJlLVpvbmUxIixbXV1dXSxudWxsLDNd&dlt=1703780518919&idt=5996&prev_scp=dkey_present%3Dfalse%26buildnumber%3D121918%26dladtemplate%3D51%26button_delay%3Ddisabled&adks=630197753&frm=20
Preview:	{"/183096492/MediaFire-Zone1":["html",0,0,null,0,90,728,0,1,null,null,null,1,[["ID=daafd13c3f3adbe5:T=1703780530:RT=1703780530:S=ALNI_MZRqFy3ngWqV_SUK0nJPvOLCgDNeg",1737476530,"/","mediafire.com",1],["UID=00000daf1fc03cc0:T=1703780530:RT=1703780530:S=ALNI_MayN6VUhdaT-mqP8WRdHF8CHMmDLg",1737476530,"/","mediafire.com",2]],[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,0,[676982996],null,null,null,null,null,null,"CO7brIrFsoMDFXrb4wcdxaIC7w",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}htm

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	401
Entropy (8bit):	5.426332379505581
Encrypted:	false
SSDEEP:	12:TMHdjIMu5E4Bn/KY8XdU/gKwl8qaNrBrz:2djx0L8tU/d1ZTv
MD5:	E7D8500FB02A316F0780B7249BE354A8
SHA1:	EA566CA75737F10957EFA544DB2A92BAA0B81B37
SHA-256:	D98133CE0DC7033265505BFFC7AEBD92FAD444A0CD0271832A877418CCC889C6
SHA-512:	09C5C1C3F5687E7F63F7DDA53778735620F1A19549A60D3424C4D95CB7F564F2467FE6D06B8244B12F501EFD589F6AC17EB79963BEE5E22CA9DEA83D57E06DBF
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/icons/svg_light/facebook.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24" fill="#fff"><path d="M17,2V2H17V6H15C14.31,6 14,6.81 14,7.5V10H14L17,10V14H14V22H10V14H7V10H10V6A4,4 0 0,1 14,2H17Z" /></svg>

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	444
Entropy (8bit):	5.2965543496154615
Encrypted:	false
SSDEEP:	12:TMHdjIMu5E4Bn/KY8XdU/gKSnXaV8U4VTQV2BVTDRey6X1Fb:2djx0L8tU/daaV8BVUVUVH8yEFb
MD5:	6C560D3B737954CBF3BFC2B909448443
SHA1:	11AE355BF71A04E43D9ED009E4DB57D306490CF8
SHA-256:	03C8D2DC7D985C3004FF2CD6D8148DD03560F37ED15EFDF6C2D7F4D771D0E599
SHA-512:	CFB37400E944F79AC46B9522E84427D375D3A859ABBE12754C181B60FA7365B50D2CB1F2000AEFB3AF5AE15FDC6560C893E708074F2132747A24E55AFA8320F1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24" fill="#6c3"><path d="M12,2A10,10 0 0,1 22,12A10,10 0 0,1 12,22A10,10 0 0,1 2,12A10,10 0 0,1 12,2M11,16.5L18,9.5L16.59,8.09L11,13.67L7.91,10.59L6.5,12L11,16.5Z" /></svg>

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	949
Entropy (8bit):	4.796826733417717
Encrypted:	false
SSDEEP:	24:2djx0L8tU/dxauLsgo7bK/urVIMD4GKO7Rit+5/N:cjm8m/TauwxCJMDRKOVR/
MD5:	9442C8065F9382E1526919B34571D3AC
SHA1:	B38144CF1DB3E705AC25725C17549DCD24C9FD96
SHA-256:	F15316721389B1B084E6FB85747089EA51CCF9D81FCFB1B33ACE326898E2913F
SHA-512:	E3E1F4DEE5090AD216C8C5C4D5BB4E0B07BC95406616D061EE4FBC1797A0A50AFC1F1D4946D677B0E9C9EE88A95A4FBDE2BFA4133672F12CE04C1A48F0E54CF4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24" fill="#fff"><path d="M22.46,6C21.69,6.35 20.86,6.58 20,6.69C20.88,6.16 21.56,5.32 21.88,4.31C21.05,4.81 20.13,5.16 19.16,5.36C18.37,4.5 17.26,4 16,4C13.65,4 11.73,5.92 11.73,8.29C11.73,8.63 11.77,8.96 11.84,9.27C8.28,9.09 5.11,7.38 3,4.79C2.63,5.42 2.42,6.16 2.42,6.94C2.42,8.43 3.17,9.75 4.33,10.5C3.62,10.5 2.96,10.3 2.38,10C2.38,10 2.38,10 2.38,10.03C2.38,12.11 3.86,13.85 5.82,14.24C5.46,14.34 5.08,14.39 4.69,14.39C4.42,14.39 4.15,14.36 3.89,14.31C4.43,16 6,17.26 7.89,17.29C6.43,18.45 4.58,19.13 2.56,19.13C2.22,19.13 1.88,19.11 1.54,19.07C3.44,20.29 5.7,21 8.12,21C16,21 20.33,14.46 20.33,8.79C20.33,8.6 20.33,8.42 20.32,8.23C21.16,7.63 21.88,6.87 22.46,6Z" /></svg>

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://api.wavebrowser.co/offerpitch
Preview:	[]

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Fri Aug 13 22:37:33 2021, from Unix, original size modulo 2^32 69465
Category:	downloaded
Size (bytes):	22154
Entropy (8bit):	7.991444543849672
Encrypted:	true
SSDEEP:	384:B7XSc1KJzb5syBFBxTUQsHJfnUjNK2OjuwjswgDGY2FcfDN8LsXfw3qaN:B7Xneb5sMFHsHJfD2UuwWG3LsXfw3q2
MD5:	660C3B546F2A131DE50B69B91F26C636
SHA1:	70F80E7F10E1DD9180EFE191CE92D28296EC9035
SHA-256:	FD91362B7111A0DCC85EF6BD9BC776881C7428F8631D5A32725711DCE678BFF9
SHA-512:	6BE1E881FBB4A112440883AECB232C1AFC28D0F247276EF3285B17B925EA0A5D3BAC8EAC6DB906FC6AC64A4192DD740F5743BA62BA36D8204FF3E8669B123DB2
Malicious:	false
Reputation:	low
URL:	https://cdn.amplitude.com/libs/amplitude-8.5.0-min.gz.js
Preview:	....-..a...;.s.....v.]..H.....I.+m....]9..B...rr4.]I..#.N....fn..Z.V........o...".2z......._.8bF$B.".j.7....8.,A..nRVK...jq........,...k.T)ACc..{`....c...m<....~.<;........tB.&...-F..r.C.....R5....3.P..E...>..`T.....X.....z}T&>2v..b5~T".7....<...;./..M.w...p....X'.K.....;.lE\|{.q.".$.g.IV{.. /rb7 ........~.yc.l(F.>...[9.0Z.../...@D..X"....\|~DS.!.../...T3.k.....P..1.~..e).F(F.=..%L ...s.A....E.._.YY .;..m...E.<l...a$....{.((.a~..w..U.Co.....X&kAK....=..mW.E.\. ..u....)...(..;S.lI..%..l..\|...F..DU.nr...f...a=.Z.}......_.C..\L..4...i6.0Q.jxB..R....2d...xp".........3....fH8..Gb2.Z..ll...S....0\|..[W..i...__...N.K..h.......64..H...m.....?1..l.......p.@...Fx$..AK1.....F.;....p2g^X..MbE.S.^.........5..$....h.`.I....V.....w<b..............?...Ib...0......."....u=.n.....,.......o5.....lzF......9..K...O...{..s..^.....U....X^.\|..vT.T.../..i.T.$,.g.....@R......T..T4..w....;ID..z...9...L..2....S.\(<q0...*.}%p...k5..j..Uo.O.T;`I.`..

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	304458
Entropy (8bit):	5.234491381582444
Encrypted:	false
SSDEEP:	1536:J/X7/FATyWKFxazYODiKf9NGElLk2ylRxuEo1oAycaJxedbaT0v0h6AuhdpS8aV7:UA6vyyNPyaOpfO85K9UQhqq8vBT0o
MD5:	9D4D342A9B72FE37CEFC120BD820A66B
SHA1:	6437868EAD8E31978B3A4C37AE94627946E5683B
SHA-256:	7B9A93178C2130C3F4A80EAF2D6EE31A583D95081B8E3A8D5B277064D4F79D27
SHA-512:	2D93094CCAB901F9E435B0492032E5C1D6529ADA9B68680E36403D26366DE5A1EF66299DDF27A348AD057BD7F34C17E751B4F135AD7D3D72DDBB2FADE27598A2
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28
Preview:	/@charset "UTF-8";/ /** * This file is intended to define MediaFire's core theme. * Any site-wide styling for elements, including legacy and template system, should live * here so that they can be adjusted easily in the future (excluding React/app sections of site). * This could include colors, fonts and text styling, media queries and more. * * MediaFire style guide: https://projects.invisionapp.com/boards/7K11KG743Z8GA/ / / ========================================================================== Define root styles ========================================================================== / :root { --mf-blue1: #000A27; --mf-blue2: #002369; / Used as background for content sections (Ex.: homepage), text link hover / --mf-blue3: #0045AD; / Used as background for main header / --mf-blue4: #0070F0; / Base blue: headings and main UI elements like buttons and text links */ --mf-blue5: #479DF4; --mf-blue6: #8FC7F8; --mf-blue7: #D6ECFD; --mf-blue8: #F5FAFF; --mf-green1: #082118; -

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 731 x 458, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	69974
Entropy (8bit):	7.937009891832966
Encrypted:	false
SSDEEP:	1536:onSJZFaVxiI8D05giXc1CLyM45OTTEpF3o225wvjUYZw/NODq:OSJZFamIQCLCsED3o22kNZw/yq
MD5:	4DF347D62433116350C4CD2C9EEEAD53
SHA1:	4742E17F2CC9361F92D0BF075D833DEBA435701A
SHA-256:	5FB57ED9F6640C1D34A8CDD3E96F1C21975A482E3D1E121A2C95818D0917828C
SHA-512:	7C12084FDFCD9E00BDDFBE53997232A1B78DF7175040E2A1ED0F68A34D9D37CE47ECCD4E6587F3568CAB53CF4D614D873B30F475A859660A81F31781D50028B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............w9....PLTE......!!!...''',,+...111666.&C......^..w.....J..m..e..o..h..x..t..p..G...)FA..\|..k..Z..x..-..b..\|..O..a..R.....R..r..\|..Y..t.....N..m..j........H..V..r...........d.......5.........0.....\...).<...4..........G....R...t..h... ....<=>./..'..7Uf....B..g.8........s...+...],.......H..t3..X..j....08..]......5..!.w.i..B..JLMTUV..._....:....qh.......O......BDF.')......P.....hij^_a.c....2.........#'....5......................rst....... ....xz{...6=.....D................\..........P7.............x..a......+3m;#.......!-\...Nn.<Zi.F..F..Qr...q'.....nZa............85l...-..............T...2...w...~...4.XJJ............{.{2../...#.....p.....F ..l..M0,....P.......kI/.a$..V...........:m...j1..t..L..~%....._rL\|....x.~.8...I^.L....G.Y.[...F...Z..J.D......\|pOq.....IDATx.....A..y........(.(H..K..nG.R..2M.%x.$......q...p;.x.....;..>...z=.....b..YmL..=...?...Y..EZ3..d..hi.......{_...+.._......f.[.<W....z.....z..I..O.-?........Y..S...`.7..

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.836457772522061
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWt0gEi16bP5vsLqo40RWUnYN:VKEctKonR3evtTA8O01iGLrwUnG
MD5:	8AE0A8FEBED9287E58A63BE0B060044F
SHA1:	39484DFC34EA16EA56A102F224BAF870592E9BF1
SHA-256:	C0A8F2CD747B6B9CD15D4007388817291906A6B8B1C70B2BC39A64E603809B77
SHA-512:	981378F732B04EB47C993CEBA9657AC6610C249AE5AC5F6022B3A7320CFBB1A989A8CF795D650D354332390898C5F5E35499D5C049F4E75F20408B508C2F6C70
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-CDkofqMo6hSAPRh2TZj9HOLusb5hze4z6vkh6YWv

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2939
Entropy (8bit):	7.880461226873563
Encrypted:	false
SSDEEP:	48:8ZqH13A0Ej9hsCJPg6ALAsYX6TpHsEr5ta6u7xF0YZNJdgDf+WesRChO5la6:8ZqV3sj9hsCJPgosRpHsEVtgxFPxdgTh
MD5:	A077B1B53CDF3330FC533DDC2B955EA2
SHA1:	E1B4EB7A13844D939A3096581A17883B3FA91FDF
SHA-256:	E2DB9B90E47D63C67E10D9B0EB777F005CF6DB418A7BA31BDFF88C2000D87F48
SHA-512:	7DCC24F7DB33F94B62AEE51DF6E8ABD28DFB358625FB84E8F1AD66E4837EA4019CAE707D5F58BF687D357039BEAA057759F81253DAD1F4FBC580A46CE792B9FB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.....#[.....BIDATx..{p......0..$..G#...c.."DI.$..H....@y$4A.H..rw..i.)..C.ap.v ..tl.m...vJ_#....S.b.+.....~....pw.r..l..=3...g.....=.=....T.2.W..k.......n.....D..d..R...V.\|./r.....~.i.@.>.6..d..WkJ....a9.....l'.c^]..._."...E....5.2..h.;@.hf^.m..........6..........."..$.Y..61..c._.Bd=x.T...wc.8m.4..I.\|...N_Z...T6/.A.P..i...\|..0.`.........4.d.[.m`.C.q........9S4.d:....S ..E...8.W..@&1..........D..@.a.....-M.....JW'D........g..@Xp.q....j...l.....c....0...L.i..v..N=.a..N,SA.L....l..........@..Q.;@;.y.......y.......M.........M @H y..V.K........3}.....>.X........k...4' .f..a...&.p.....z.....(...l..c,....x.V..bN.....@..f.$.....O.......Aq..t..R.B..w..T..j.Z...%2..-.L...6.W..b'...;.6..~]<..3.B,..GE.A.).!.i.a<>..@....&.R.Q .P.#...>...,."..!...C@ .B.x.>M...\.P.....]..-.8...G4.d-H.8........99..,S..JH U....-A..w...e.......4....Yo[.[g.s1E<.1[&..UH w.......{.P...$...bY.)...f....L.....3.`..kTw.Xf.`...x.^.vh..J)..B0.\|..m.2] R+..w...M.^..l

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=11b7aa4f-67bc-77ec-fc00-6bde92c546e3&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	63513
Entropy (8bit):	4.652943320424527
Encrypted:	false
SSDEEP:	384:aiqTCkYxcuyFtFxGQkvguS1GiFRyBT0EsgtiwwF6i9i5zz47+OmClGR0CrDLfpXQ:XqWk3FbkeRyBT0EfrWs9KmClQ/1BDi
MD5:	B19C127D2161BD966A406F30F296A294
SHA1:	0EAB3603BB6E2A34B27C507E744876AB0215D97F
SHA-256:	B9D7E235F44A3C03D74C02AF0236C00901C29749FDA12D34CD0E069A4E2DF39C
SHA-512:	92A5EB37AC5F4643DEA5AFEC433CBCFED052822C472C5780145B579B9A0550BA4A8753C5E3A427752D40AC563755207DF6B28388E2AFD616C7D807440E70C469
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <meta name="description" content="Download PcAppStore" />. <link rel="icon" href="\lp\appstore\img\favicon.ico" />. <title>Download PcAppStore</title>. <link rel="preconnect" href="https://fonts.googleapis.com" />. <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />. <link. href="https://fonts.googleapis.com/css2?family=Bebas+Neue&family=Inter:wght@400;500;600;700&family=Roboto:wght@400;500;700&display=swap". rel="stylesheet". />. <meta name="viewport" content="width=device-width, initial-scale=1">. <style>. /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /. html {. line-height: 1.15;. -webkit-text-size-adjust: 100%;. }. body {. margin: 0;. }. main {. display: block;. }. h1 {. font-size: 2em;. margin: 0.67em

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1632)
Category:	downloaded
Size (bytes):	22388
Entropy (8bit):	5.3409204748768975
Encrypted:	false
SSDEEP:	192:N/dB0ue6uyfreqGIwaXMH1to/A85XH6uy2reqGIwaXRe1Qh/ZFgSC6uyrreqGIwY:ZqFq3X1TAq3XPWZq3XNnUq3X9
MD5:	0D2CA44739708C899C2A99D8F8D35E21
SHA1:	5A87FDBDF47DE4003DA15F8DC0B790174427E2E8
SHA-256:	155CE831417036FE01AA0BB9E9630C5E3305B6C73F739C70581EB02D0A1E3E07
SHA-512:	40D9C8E767D0D184B8E87DC95D4B508873442823701D3CC3B4F886C1D7637E19DFD81BB93735D322CCC981162C9F942EE45961F1F6AA09EC1CED149873977688
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:800,700,400,300"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:YGKeMfQ24:YGKed24
MD5:	055DE8F64447F10ED2C4C7F78E27B7CD
SHA1:	BBFCC7FBB135D3893E9BD559E44E069F57DFAB31
SHA-256:	30C714BF4216E577686D238B98561D093672CB25BF90BAAB50DD956F75CDA4B3
SHA-512:	1A726490120152235BBCE20368630EF20FAC7964BA32F846FAC2C1F1A58EE9722356AD94FA6342685E8CEB5015CE2E944EDD739B901D3D9B0A22A5238118142B
Malicious:	false
Reputation:	low
Preview:	{"country":"US"}

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1502
Entropy (8bit):	4.463332471977753
Encrypted:	false
SSDEEP:	24:t4po/yWs9LSmR+Q6g8EWUqlW0ITG6n9UVchiPJ43O4H413dOV:VALSms9g8EWJziG6nOVciZS
MD5:	4C8D17C44BDE654D1D73878E41A9A891
SHA1:	56BE025721C412A6B5CB75250F94DBE78C61621A
SHA-256:	5646513E055E79677627D21451A24A2993AB6E5629149BA0828B6116AC34F104
SHA-512:	33D55BAC7EA456BAF8DBCC73BE7B135A708C548594163C32FA9524D6907B235437B24D7BBA61A7B4427B91DF2789E244D9D2A6AFDF0160F44230443D49CBC416
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/pf_1tb.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab8"><path class="cls-1" d="M42.92,68.66v-11H38.65v-2.6a8.14,8.14,0,0,0,1.73-.13,4.52,4.52,0,0,0,1.5-.56A3.7,3.7,0,0,0,43,53.3a3.74,3.74,0,0,0,.61-1.63h2.74v17Z"/><path class="cls-1" d="M50.66,54.54v-3.2H64.85v3.2H59.66V68.66H55.85V54.54Z"/><path class="cls-1" d="M75,51.34a10.8,10.8,0,0,1,2.26.22,4.88,4.88,0,0,1,1.75.72,3.33,3.33,0,0,1,1.13,1.32,4.65,4.65,0,0,1,.4,2,3.79,3.79,0,0,1-.59,2.18,4.32,4.32,0,0,1-1.76,1.43,4.16,4.16,0,0,1,2.39,1.61,5.29,5.29,0,0,1,.28,5,4.42,4.42,0,0,1-1.37,1.56,6.08,6.08,0,0,1-2,.9,8.87,8.87,0,0,1-2.27.29h-8.4V51.34Zm-.49,7a2.74,2.74,0,0,0,1.67-.49,1.83,1.83,0,0,0,.65-1.58,2,2,0,0,0-.22-1,1.62,1.62,0,0,0-.58-.61,2.46,2.46,0,0,0-.84-.3,5.55,5.55,0,0,0-1-.08H70.65v4.05Zm.22,7.35a5.09,5.09,0,0,0,1.07-.11,2.62,2.62,0,0,0,.9-.36,1.84,1.84,0,0,0,.62-.69,2.39,2.39,0,0,0,.23-1.12,2.24,2.24,0,0,0-.75-

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2312), with no line terminators
Category:	downloaded
Size (bytes):	2312
Entropy (8bit):	5.731870735459416
Encrypted:	false
SSDEEP:	48:C2Bqgmgdvnd6gdKXgdB2BqLY2Bqhybj/5CSagd3Cgd5S57Fgd3ydNnqGndq:C2Bqgmg5nggQXgL2Bqs2Bqhybj5Pag5L
MD5:	709F0C1475B368CB1F000EA483770C39
SHA1:	3CDF6313E3C8C0E67987EC25B0BDA08AC680826B
SHA-256:	8280212196B6B4D193F9F4CEAE80EED1088557745E7D5742959D4CE702CF0A4D
SHA-512:	F4BA7B55C2F3AF753B2D5295E8A7BA750221A7612F7476C61D2351BC9A6B60221C68C92891292CCF1A78BC3818AEEB9BA9E2099A3A915F15812E9F628BE6F057
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=96230842&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=QuXRAvzHQHmussrtlPH2Qg%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx 42E5D102-FCC7-4079-AEB2-CAED94F1F642&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=NDJFNUQxMDItRkNDNy00MDc5LUFFQjItQ0FFRDk0RjFGNjQy&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pu

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6086
Entropy (8bit):	4.258226321313911
Encrypted:	false
SSDEEP:	96:kw7DYYMk0yLtuovEUSVziD8jG/4a/x3D8jGjgVJjw13K0MkYjLtuoPIExSVzWo3j:kwQ7k03SEU+iQGwJjwKkYw3Ex+jj
MD5:	8CC1EFBA1DB849049A6B9A6F4ECFDA2C
SHA1:	61AA0A05F210150F29C994060BF56219B2D28141
SHA-256:	8EF79111CB93B88AD71BF488B86DDFED18D8EFAFE82010885C47E9DCF3ADC61E
SHA-512:	C4222907026CC144B4A1A2F326068DDC7CF886E0B4D3055A9A6FEFAAA550009A0572B0AAF02081BE44E5EB6D18ED78BA5EF3FAF3E81F9043C48634AAFC28AB56
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#07f;}.cls-2{fill:#fff;}.cls-3{fill:#b2b7c4;}.cls-4{fill:#ffdb80;}.cls-5{fill:#b3ddff;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab3"><g id="color"><g id="outlines"><path class="cls-1" d="M155.5,117a4.5,4.5,0,1,0,4.5,4.5A4.5,4.5,0,0,0,155.5,117Zm0,7a2.5,2.5,0,1,1,2.5-2.5A2.5,2.5,0,0,1,155.5,124Z"/><path class="cls-1" d="M180.09,55A94,94,0,0,0,1,95a94.71,94.71,0,0,0,6,33A94,94,0,0,0,185,122c.69-2.3,1.3-4.63,1.81-7,.14-.66.28-1.33.4-2a94.16,94.16,0,0,0-7.17-58ZM8.83,127.3A92.71,92.71,0,0,1,3,95,92,92,0,0,1,172.87,46H114.59A3.59,3.59,0,0,0,111,49.59v60.86L75.71,133H67.24A4.49,4.49,0,0,0,66,126.76V125h6a1,1,0,0,0,0-2H67.91a2.6,2.6,0,0,0,.09-.63V100.66A2.63,2.63,0,0,0,65.37,98H63V90.11H55l-.68-5.23L34,87.52,34.73,93h-4.1A2.63,2.63,0,0,0,28,95.63v26.74a2.6,2.6,0,0,0,.09.63H22V107.69a10.43,10.43,0,0,0-3-7.32A2,2,0,1,0,17,102a2,2,0,0,0,.64-.12A8.42,8.4

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	953
Entropy (8bit):	4.727177358640599
Encrypted:	false
SSDEEP:	24:t4po/yWTVchiPJ43O4H413dO6qS7tprbR7FYP:VFVciZ5q8p5JG
MD5:	C2387384DCB9CA892F2124BB05EF0BA0
SHA1:	FCDAD37E45375884BEA88802F1381A15297C7160
SHA-256:	84D163BB68CE0DF35852C6F242353DCA8089CFFA2431BD6413D6F46C7B7FB368
SHA-512:	2C26D90D52F534B7A09E48029A1FD7DA4AEDF40653B014DF31ADB775FA56B067362EF62E060ED0AC0CE047EF99662FB31ABDC5B96C640EEA099AA2B87CE04A4C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab12"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,2.08V74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,2.4,0,0,1-2.4,0L34,76.39a2.41,2.41,0,0,1-1.2-2.08V45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3A2.4,2.4,0,0,1,60,29m0-5a7.4,7.4,0,0,0-3.7,1L31.51,39.28a7.4,7.4,0,0,0-3.7,6.41V74.31a7.4,7.4,0,0,0,3.7,6.41L56.3,95a7.4,7.4,0,0,0,7.4,0L88.49,80.72a7.4,7.4,0,0,0,3.7-6.41V45.69a7.4,7.4,0,0,0-3.7-6.41L63.7,25A7.4,7.4,0,0,0,60,24Z"/><path class="cls-1" d="M48.6,61.55l10.16,8.12h0l.05,0a2,2,0,0,0,.29.18l.11,0,.28.1.11,0a2,2,0,0,0,.39,0h0a2,2,0,0,0,.39,0l.11,0,.28-.1.11,0a2,2,0,0,0,.29-.18l.05,0h0L71.4,61.55a2,2,0,0,0-2.5-3.12L62,63.94V47H58V63.94l-6.91-5.52a2,2,0,0,0-2.5,3.12Z"/><rect class="cls-1" x="43.01" y="72.01" width="33.98" height="2"/></g></svg>

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Category:	downloaded
Size (bytes):	46704
Entropy (8bit):	7.994860687757006
Encrypted:	true
SSDEEP:	768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r
MD5:	30A274CD01B6EEB0B082C918B0697F1E
SHA1:	393311BDE26B99A4AD935FA55BAD1DCE7994388B
SHA-256:	88DF0B5A7BC397DBC13A26BB8B3742CC62CD1C9B0DDED57DA7832416D6F52F42
SHA-512:	C02C5894DFB5FBF47DB7E9EDA5E0843C02E667B32E6C6844262DD5DED92DD95CC72830A336450781167BD21FBFAD35D8E74943C2817BAAC1E4CA34EAAD317777
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
Preview:	wOF2.......p......................................O......^?HVAR.g.`?STAT.8..4/l.....<..6..f.0..\.6.$..H. ..\..>..[`....\|...........7o.)....C81=......g#l..PA.c.......%...$.K.....\|}}....8H.\Yd.....2c.J....0K.....I..k...F..f......,L.....P...JGwj..KM....n..,..o.....n.ck...1...%.<.....;5...9..2....=b.....("4..:.k...K_...`.5v..2@...,_.3..6..@PR.]...f!X.~..b.....-..9.....?.=:kt.'@_...N...8.i......Fo..S.C.=%.........W.@7d..%......,"h...b@.DE.]l.n..(;......E.ng].`....8..C;m....).u8.....4...%..c.A.hc]....s.{.+....J..Rq...f..I;.B..g.....j.@~.........H.........:]Dc.J.6r..].".c...8j...v. M.PXB.,.v...M..NtOO.......Z`-.i..X.....".y....c.....+..e[..(..q...u..kh.k5W..=OK{.;...7...V...I.FMTWv.Dv.[..^`......JY..:.,.. tgKhC..2-...I..S..'...IL..........p......&:..(...g..B.`......%U....-.m.D.b.m..p..26.0D.....$j.r...w..z.9.)`..n.I..B...s"es...;..vY...6.T...**..2o.....W.Lu:wx.?.7..x......C..E.^SE..F.5WcMi..a..n...X...t.........6.j.j..M.9..a.....f<J.....@.&f..'.\|.....p

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10481
Entropy (8bit):	4.807120537526485
Encrypted:	false
SSDEEP:	192:56yqRYpOel347F2SxTXs61h0HeMx6cRbYn1iLXw:8yiEMBlXNhQRbYgE
MD5:	A89BEA62667857FCF2D7018BDB0531DC
SHA1:	FB899A8DAC5693634BD66665BB60324A051F29A3
SHA-256:	3B01AE2DB36800BFD014D423698E95BE7D22C4160088FA93EB812C2AAADAC4E3
SHA-512:	48384B19BF2721DBFEC6A85E5C05C5039A76F1B44D1EFB6A4A1CC9113545CE3C217ADD498A33E1AFB79768D839DFE9131E03448FB4A7FAF4FE3401C954374B59
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="446" height="283" viewBox="0 0 446 283"><defs><style>.cls-1{fill:#f9d97e;}.cls-2{fill:#e8eaec;}.cls-3{fill:#fff;}.cls-4{fill:#eff0f1;}.cls-5{fill:#868a8d;}.cls-6{fill:#e3e4e5;}.cls-7{fill:#f0f1f1;}.cls-8{fill:#bebebf;}.cls-9{fill:#d1d2d2;}.cls-10{fill:#dbdcdc;}.cls-11{fill:#ffdac7;}.cls-12{fill:#3e4349;}.cls-13{fill:#5a9eec;}.cls-14{fill:#888d9c;}.cls-15{fill:#e8e9ec;}</style></defs><title>unicorn pro illustration - svg ready</title><g id="bg"><circle class="cls-1" cx="115" cy="42" r="23"/><path class="cls-2" d="M314,324v13.19h2V326h48v18.3h2V324Z" transform="translate(-2 -107)"/><path class="cls-3" d="M266.9,121a12.43,12.43,0,0,0-12.4-14h-27a12.44,12.44,0,0,0-12.4,14h-9.6a12.5,12.5,0,0,0,0,25h61a12.49,12.49,0,0,0,.4-25Z" transform="translate(-2 -107)"/><path class="cls-3" d="M342.9,211a12.43,12.43,0,0,0-12.4-14h-27a12.44,12.44,0,0,0-12.4,14h-9.6a12.5,12.5,0,0,0,0,25h61a12.49,12.49,0,0,0,.4-25Z" transform="translate(-2 -107)"/><path class=

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2328
Entropy (8bit):	4.182306010965778
Encrypted:	false
SSDEEP:	48:VsJtMfLKhqLzkSexzkwvPFllx2/hq3oDVCUerVV4rr8WV4ronFeQ:6fml/eXP9SDer4r4NrUFD
MD5:	5A8E546A9C24B13C99492E0DAF1400A7
SHA1:	C87F3EB17097681E424C6F4D2C5E80BC8E51F571
SHA-256:	3698212F73F5E3B3231EFEA40245732FAAA63064016BE0481021100F109A1878
SHA-512:	A83EDC6D4E009EC01575D08D1C8A7C5B91A57942F67589C8693EDF8B0CF595B26E7F55124D9B42C867C05414D63103E1190AAF05D4A49CCE7FB0FB6A8F655F13
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/tf_apps.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab7"><path class="cls-1" d="M64.41,37.29V82.71a5.76,5.76,0,0,1-5.68,5.68H36a5.76,5.76,0,0,1-5.68-5.68V37.29A5.76,5.76,0,0,1,36,31.61H58.73a5.76,5.76,0,0,1,5.68,5.68ZM60.15,75.62V44.38A1.44,1.44,0,0,0,58.73,43H36a1.44,1.44,0,0,0-1.42,1.42V75.62A1.44,1.44,0,0,0,36,77H58.73a1.44,1.44,0,0,0,1.42-1.42ZM51.64,38a.63.63,0,0,0-.71-.71h-7.1a.71.71,0,1,0,0,1.42h7.1A.63.63,0,0,0,51.64,38ZM49.88,85.22a3.54,3.54,0,1,0-2.51,1A3.42,3.42,0,0,0,49.88,85.22Z"/><path class="cls-1" d="M89.45,78.68a13.51,13.51,0,0,1-1.72,3.5q-1.81,2.74-3.6,2.74a6.48,6.48,0,0,1-2-.45A6.19,6.19,0,0,0,80.05,84a5.4,5.4,0,0,0-2,.46,5.06,5.06,0,0,1-1.85.48Q74.09,85,72,81.34a14.35,14.35,0,0,1-2.06-7,8.31,8.31,0,0,1,1.58-5.24,4.83,4.83,0,0,1,4-2,9.32,9.32,0,0,1,2.48.42,9,9,0,0,0,1.93.42,7,7,0,0,0,2-.48,7.92,7.92,0,0,1,2.42-.48,5.12,5.12,0,0,1,3,.91,7.23,7.23,0,0,1,1.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	136
Entropy (8bit):	4.471351405003666
Encrypted:	false
SSDEEP:	3:YX2vHO7JMVMXCO7JGLLvyfNHG/4HviaNmGKLqyR6Gaif6HW48HKg:YmvHYJMVMXCYJGXyFHrHaaNmdL62fszg
MD5:	CF1E27C1B6EF389BF5FED4E9F899191D
SHA1:	E5A727F50A326E67186A39D70A04CBF983918342
SHA-256:	2D4C689516444ACA2FD9F0841DEB799B65BD55E87B36F937D733EB6DABE73422
SHA-512:	DAF237AB6B6C4D991D554DD736BC7D6693CC8969597EA0155744815311A365FB2989A7067026B385182863E8C53133A239F137D838D5B2602A3B7EF1BC00DDED
Malicious:	false
Reputation:	low
Preview:	{"request":"212.102.41.2","ip":"212.102.41.2","country_code2":"US","country_name":"United States","continent_code":"NA","state":"Texas"}

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2795
Entropy (8bit):	4.328922815564655
Encrypted:	false
SSDEEP:	48:AVGS2XGsm/M+uzx//OgsW9cI/fK34mrYMkEAInjOYtuoPIExSV3DsnEczE3D8Si8:na/AR13K0MkYjLtuoPIExSVzWo3D8jGj
MD5:	E0911D2DEA1A6C2400BE2CF42DFB760C
SHA1:	88AB10D95B94592FBA202B895F40432F1C9FA83C
SHA-256:	822A7F21F2B6C513ED87FD34DD8CBF9F64D9CF1A53CB94A7FCCE5F619B70F2EB
SHA-512:	E195C1859378C27E221B6BDD2AEEB624054D15CC1813B690E93DDDEA99157AD929B578FAD0C5F02C6768E99157B2FFA4645B5420F0A30D4B769B6E986420B95D
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/store.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab3"><g id="outlines"><path id="bg" class="cls-1" d="M189,95a93.66,93.66,0,0,1-1.74,18c-.12.67-.26,1.34-.4,2-.51,2.37-1.12,4.7-1.81,7A94,94,0,0,1,7,128,94.71,94.71,0,0,1,1,95a94,94,0,1,1,188,0Z"/><path class="cls-2" d="M155.5,117a4.5,4.5,0,1,0,4.5,4.5A4.5,4.5,0,0,0,155.5,117Zm0,7a2.5,2.5,0,1,1,2.5-2.5A2.5,2.5,0,0,1,155.5,124Z"/><path class="cls-2" d="M180.09,55A94,94,0,0,0,1,95a94.71,94.71,0,0,0,6,33A94,94,0,0,0,185,122c.69-2.3,1.3-4.63,1.81-7,.14-.66.28-1.33.4-2a94.16,94.16,0,0,0-7.17-58ZM8.83,127.3A93.1,93.1,0,0,1,3,95,92,92,0,0,1,172.87,46H114.59A3.59,3.59,0,0,0,111,49.59v60.86L75.71,133H67.24A4.5,4.5,0,0,0,66,126.76V125h6a1,1,0,0,0,0-2H67.91a2.18,2.18,0,0,0,.09-.63V100.66A2.63,2.63,0,0,0,65.37,98H63V90.11H55l-.68-5.23L34,87.52,34.73,93h-4.1A2.63,2.63,0,0,0,28,95.63v26.74a2.18

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2393
Entropy (8bit):	4.690726248163968
Encrypted:	false
SSDEEP:	48:vuUeDrLBTzLx6Ycvrd90G1I6oDUyXc4UE8RSdpFC4zI4Lx9:GBWZ93owyLUwzd
MD5:	015E34D1DD9C715D3DF025F179CDBC68
SHA1:	ED65360D3F8E9DD460A3BA0A4D7EB2701B7BF4A0
SHA-256:	B9254E222506A048B2B493115DC79A2F3FDBA6FB2A9637F9F57BEC45EBFDF167
SHA-512:	C53A510A4F77C9A52F9134780E19E2EB17641E6C673328381E2F33FF921428CBEE8CCA63DE9806F94C5C85977B3DF6286585E082FCABCE8A9DC4AA7F80C3559C
Malicious:	false
Reputation:	low
Preview:	<svg id="_ogo" data-name=";ogo" xmlns="http://www.w3.org/2000/svg" width="596.39" height="148.49" viewBox="0 0 596.39 148.49"><title>lifehacker</title><path d="M26.29,148H3.42V2.64L26.29,4.11Z" transform="translate(-3.42 -1.16)"/><path d="M52.3,12.78a13.1,13.1,0,1,1-13.1,13.1A13.15,13.15,0,0,1,52.3,12.78ZM63.74,148H40.87V44.33l22.87,1.29Z" transform="translate(-3.42 -1.16)"/><path d="M118.34,65.17V88H101.18V147.9H78.31V34.18c0-17.34,14.39-33,31.36-33,5.72,0,10.33,1.66,11.44,2.4l-.92,22H109.67a8.62,8.62,0,0,0-8.49,8.67v31Z" transform="translate(-3.42 -1.16)"/><path d="M127.59,74.4a31.45,31.45,0,1,1,62.9,0V96.53A11.38,11.38,0,0,1,179.06,108H150.47v10a8.66,8.66,0,0,0,8.67,8.67h22l.74,19.37-20.66,3.14c-19.92,3.32-33.57-13.84-33.57-31.17Zm22.87,10.7h17.16V74.4a8.58,8.58,0,1,0-17.16,0Z" transform="translate(-3.42 -1.16)"/><path d="M210.05,148V3.56h14.76v43.9c4.06-1.29,10.51-1.84,14.94-1.84,15.68,0,27.85,14.2,27.85,30.25V148H253.22V75.87a14.25,14.25,0,0,0-14.39-14.2h-14V148Z" transform="trans

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3752
Entropy (8bit):	4.201035151772803
Encrypted:	false
SSDEEP:	48:8VGSY79uXL0pJB2ftLyOG0TeCX2XYaRrEkYlm16MbXjsUTEfFiIEYyRDVuJ7dMJ8:VsYpKfWCXQdW/5Mrk5EXDVuJcPUj
MD5:	2278B27F4EC7326AB53DD04D6E06BDE9
SHA1:	46B6322A0E18E99726B679A7BA148760A3069705
SHA-256:	5678FC26969D953C1FA2C0B974765F128C2BCB8ACEB3772C394D0DC28529BCBC
SHA-512:	F638A743D482397C8F5EA23BE6E201A74339B5C6286E021ACC87A4CD55C7D3EF4FDFCC353D22953B3F94EFAC7800A9C5ED3B4F2D675F51D9BBA2FE101E014D4B
Malicious:	false
Reputation:	low
Preview:	<svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="outlines"><path id="bg" class="cls-1" d="M95,187a91.92,91.92,0,1,1,90.94-78c-.11.67-.22,1.34-.34,2A92.14,92.14,0,0,1,95,187Z"/><path class="cls-2" d="M95,1a94,94,0,1,0,92.68,109.73c.08-.4.14-.79.2-1.19A94.07,94.07,0,0,0,95,1ZM3,95A92.43,92.43,0,0,1,4.58,78H15v39H5.67A91.72,91.72,0,0,1,3,95Zm92,92A92.16,92.16,0,0,1,6.18,119H17v-7.82c.69.18,1.59.48,2.59.8A76.67,76.67,0,0,0,42,116.15V133a1,1,0,0,0,1,1h61a1,1,0,0,0,1-1V82.38a11.51,11.51,0,0,0-3.39-8.19l-17.9-17.9A1,1,0,0,0,82.9,56H43a1,1,0,0,0-1,1V68.56a.9.9,0,0,0-.28,0l-7.58,2.21a7.49,7.49,0,0,0-2.34.89L21.17,78.16c-.25.14-.6.37-1,.63-.67.43-2.12,1.35-3.16,1.86V76H5a92,92,0,0,1,181,5H180V79a1,1,0,0,0-1-1H167a1,1,0,0,0-1,1v2h-2c-.7,0-3.22-1.61-4.16-2.21-.41-.26-.76-.49-1-.62l-10.66-6.48a21.35,21.35,0,0,0-3.75-1.46l-13.51-4.4

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3964)
Category:	downloaded
Size (bytes):	148050
Entropy (8bit):	5.589760313397151
Encrypted:	false
SSDEEP:	3072:6m3e+zUc4WeDV1orBSBecAroo+xmH5CC4zfUx+A7lviIVwl1CRMD/9:6Qe+zUc4WeDV1orBSBeBrB+xmH5CVAxg
MD5:	5E34B24D27DE4576F6BFA9D37DA984C8
SHA1:	C058736E29E9BF2ADC285B2B25244FBA903AB903
SHA-256:	B163E6267A2A83096A262430584416CC20CD34FF8BD3053637A643A7DD2F2117
SHA-512:	96278B34E18524A2EAF2640BA30FDE1B68C2A32F575BE281DE164A6E27BDFAB2FACBC40420B3F7B754FA5232347F030D824AEFD8E56AFC3D6DAA4C3903A67193
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?fcd=true
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var p=this\|\|self;function ba(a,b){var c=ca("CLOSURE_FLAGS");a=c&&c[a];return null!=a?a:b}function ca(a){a=a.split(".");for(var b=p,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"}function ea(a){var b=da(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length}function fa(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b} .function ha(a){return Object.prototype.hasOwnProperty.call(a,ia)&&a[ia]\|\|(a[ia]=++ja)}var ia="closure_uid_"+(1E9Math.random()>>>0),ja=0;function ka(a,b,c){return a.call.apply(a.bind,arguments)}function la(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	186
Entropy (8bit):	4.712496643099425
Encrypted:	false
SSDEEP:	3:YGKrFegLuVGSJAI5fDa9dHEeyX9MWVAL9lE7p/MRAhsH5gwMvtWHMEYKQM2HtFn:YGKrFtyss2HqX9XqrE7p/Qim+wN3Y3Ms
MD5:	B6BA82C37C780E791616F8F4D5CA5772
SHA1:	EFA54D817926FA08DEAA77DB53DBD93521D97B39
SHA-256:	7B23628656640102C1C313D5CC07B5C4747AEBE0C14B8AA0F2B0773E5B0FD197
SHA-512:	0F91EBBA603879CCFE270DB25ADD89134FE8D36205F05683DF6272EA82FE017FF582D3F26D46F50F5483C2AF46E2686B66FEFD7944B583D93E99C56577EE67AF
Malicious:	false
Reputation:	low
Preview:	{"config": {"enable_collect_everything": true}, "toolbarParams": {}, "isAuthenticated": false, "supportedCompression": ["gzip", "gzip-js"], "featureFlags": [], "sessionRecording": false}

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38622)
Category:	downloaded
Size (bytes):	39606
Entropy (8bit):	5.679119871052659
Encrypted:	false
SSDEEP:	768:jKvZzLcOBo9xlOrGstkk9XPAiSjsi3l2IlrBj7aMSWMCGDtYp3:jKloFOr9tkk9fU12ItBxMvYV
MD5:	509FC31DA1611D556288E9EFEAAC7FFA
SHA1:	F41923D59672895D3B295F5630665AADFD08F1C0
SHA-256:	0EDB7FF8B4775B1A73C15D06B1C7EDAB503F0F5A30B2DBF1A139D65A1C18E0EC
SHA-512:	1343D77ECA31AA1A975F669651F8D7DA9EAD4164D6C44127F0FE6AB090A1800C95273C608C67AE6C99A3D1670DA6CE2E922881C9F5577F71A5DFF30DAF3FAC83
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/Dtt_-LR3WxpzwV0Gscftq1A_D1owstvxoTnWWhwY4Ow.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function x(C){return C}var q=this\|\|self,W=function(C,k,m,Y,t){if(!(t=(Y=k,q.trustedTypes),t)\|\|!t.createPolicy)return Y;try{Y=t.createPolicy(C,{createHTML:T,createScript:T,createScriptURL:T})}catch(I){if(q.console)q.console[m](I.message)}return Y},T=function(C){return x.call(this,C)};(0,eval)(function(C,k){return(k=W("bg",null,"error"))&&1===C.eval(k.createScript("1"))?function(m){return k.createScript(m)}:function(m){return""+m}}(q)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){var

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	146658
Entropy (8bit):	3.778642392275519
Encrypted:	false
SSDEEP:	1536:N/iRfxBTNQYru8zv/86qSwNxZdYxvK7DPeZJT/2Bg1qkwhjd3/iI2FvBs03RLwos:qfTvzYUsN
MD5:	73F7AEE18F28CF8C6F03AA4AC4BEB665
SHA1:	36E6EC6604FAFF0AC12471AA9822BB11DC6AF9CF
SHA-256:	4342FEAC38021C4FE3069EBA0EDF1C2E1B4345E2B548B0AFB7AB21B7369B3BC8
SHA-512:	32A80C11338208A617ECEA099D76E9F0D14857C0A9595FC048BC39B8B408EF810C0EA714B718321B79B039C7165E54794612EFE1B665ABD26EC5338404856B12
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/download/additional_content/world.svg
Preview:	<svg id="all" xmlns="http://www.w3.org/2000/svg" width="402" height="210" viewBox="0 0 402 210">. <defs>. <style>. .cls-1 {. fill: #abdda4;. }. </style>. </defs>. <title>world</title>. <g id="africa">. <path id="path2330" class="cls-1" d="M199.868,65.452a2.048,2.048,0,0,1-1.849.084.247.247,0,0,0-.322.085c-.085.153-.238.153-.594-.017-.373-.169-.492-.169-.56,0a.384.384,0,0,1-.356.2.858.858,0,0,0-.492.2c-.169.17-.288.17-.543,0-.458-.271-.933-.254-3.223.119-1.916.322-3.053.713-3.053,1.069,0,.085-.119.135-.254.085a.269.269,0,0,0-.34.05.45.45,0,0,1-.356.17,1.419,1.419,0,0,0-.678.424,1.684,1.684,0,0,1-.628.441,2.475,2.475,0,0,1-1.187-.169,2.7,2.7,0,0,0-1.1,0c-1.069.152-1.7-.1-1.849-.713-.1-.339-.339-.407-.662-.186a3.975,3.975,0,0,0-.593,1.051,3.525,3.525,0,0,1-2.019,2.324c-1.018.492-2.035,1.391-2.035,1.815a1.9,1.9,0,0,1-.374.8,2.263,2.263,0,0,0-.39,1.595,2.667,2.667,0,0,1-.2,1.289.753.753,0,0,0-.221.407,2.01,2.01,0,0,1-.611.679c-.339.288-.763.644-.949.814a3.846,3

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	dropped
Size (bytes):	3412
Entropy (8bit):	7.886999613438673
Encrypted:	false
SSDEEP:	96:vRzXAYT4bV0MgcLFNICWpJnA5ybcJ2fGaGi7B:ZfouMnFN3WpJCybma7
MD5:	04B104F4DECAB4A78449BDDE1B5D7D5F
SHA1:	C2C9E65420F94299FA7D4EF3701167818F42F7AE
SHA-256:	B709D4330DB8D76C4A3149387E725498B340F0538A26D498AF542C09DC8242C9
SHA-512:	A7B85D74DC836F3BA057E1D9600BF9C1BE74E3399A59A65C725ED07B73AC771380BAF099D30B3F90DF422C719718EA8D89AFE8F7B283D318C3A5E3D7D7CCCB48
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+. 01(((..-11&0"'+&...........-"."'/0'(/(&2-&'(2&&''&-+'2'&&((&'-&&-&/&''&&'&-&&&'&'......d.d..........................................F........................!....1AQq..."#2a...BCRbr....Ss....$Ddt.....................................6.......................!1..AQa..q......."2B..#R.3b..............?...BT!...J.%B...P..BT!...J.(..3%...f. ......)W..........s3(k..%....[.S^X..~A-..]...(..P.7....8......\|.......J->.'.H..........:..>TEGI.?.(.S...u......S.O..J....H...R.....j..P...;......K..@.\|...I9_..lQ:Cf..K3b.q.@.w....9.P.s..p.wSH3i....51.....:...Z.Z.......+.o.{7.u..Sp..R...y.y....Oq5f..3t..z#Q.....#...H.gp..)b...........M.7<.\..3c..6..-......2..jq..}..%....9.ZoD'........_@...y&\|L{.9."..u.[.#w.....4>.c.]. .`.a......M.....v=q...o..X..6.#k.$w....\|.$*).6..:.c..4\|v..y.}+5..i.TaZK.9..M.= .{EA..T..i.6W..qS...D...b........2......[.2Y^..E...Y.q....y.Q3....x.f}AU..B..yW...@\|.[j.....h}lQov ..A....e.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2168), with no line terminators
Category:	downloaded
Size (bytes):	2168
Entropy (8bit):	5.644013018489093
Encrypted:	false
SSDEEP:	48:CcVgd8jxgd8ngd8PFgdhA/kCFgdhUusyj53kedCKAHV0fTdpGBYuCq:CUgCdgCngCPFgDsggfwJ3dCbyPBq
MD5:	94CBCE8726245A9D484FD13EC37A7397
SHA1:	8A1E113752B18097747162EE72A9F66C9465DDC9
SHA-256:	431141617335F16435CB5AE64529FB4C1367E0F04A80C9B3925B2A21354BD2E6
SHA-512:	B231709E1190B1E5033FA82088037D69CF8B24A477F41A47452485F67AF88ECA79B2B881C8183DA80997E0997C30E66C9632C44E31CB3F14C4D621CF34BF132D
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=33002690&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.377718757501969
Encrypted:	false
SSDEEP:	6:TMVBd/gEO58FiLUECc4sZXUg9BXSBU/9mc4slZKYnic4soSIXdhC/O4LZNHwY:TMHdjIMu5E4Bn/KY8XdU/P1z
MD5:	34BD6069C9F08BB444C86B8D099A000E
SHA1:	F78F72953D6F9F639D26F4E38C1D822B52E86763
SHA-256:	82B94716473AA225E715E117802145C5D2D725AA1BA9D476D61A5D3DA16A8C26
SHA-512:	5762D0CE880F5150A5ADB0395F3EB2A2F177091FA3F033E768CAB09D7E8D149F6BD98CF081F3A84EC63B92491BBE580977E4C784972157AEE94282824B29930A
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/icons/svg_dark/arrow_dropdown.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24"><path d="M7,10L12,15L17,10H7Z" /></svg>

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2921)
Category:	downloaded
Size (bytes):	21681
Entropy (8bit):	5.212070041971076
Encrypted:	false
SSDEEP:	384:pcxeoatToYQ4wKZd+j4o5J/1Ic1CMt3QRGtfL+fdQD0dZ/FF3fUjhOR:TToX4JwN5mfdRFR
MD5:	2B26D008D1FB83F7C5E1D1271A5A3517
SHA1:	B6EF4FD8F3D51450B7F50E8A27243A1908E5BF14
SHA-256:	2CB36489072C0EB085096A47BFCCED826B7A973E5F294D5A2B54BF16DF3449D9
SHA-512:	CF6FFD611B6130FD1BF83E4F614F6C467C7EF383647FA4955B58A073B35A3FD2C481EBEBE75CD9F9BE9BE426550945EE7F2A26841161D7DE558B8DB61A2C15EF
Malicious:	false
Reputation:	low
URL:	https://go.ezodn.com/parsonsmaize/chanute.js?a=a&cb=7&dcb=195-8&shcb=34
Preview:	try { function ez_attachEvent(element,evt,func){if(element.addEventListener){element.addEventListener(evt,func,false);}else{element.attachEvent("on"+evt,func);}}.function ez_attachEventWithCapture(element,evt,func,useCapture){if(element.addEventListener){element.addEventListener(evt,func,useCapture);}else{element.attachEvent("on"+evt,func);}}.function ez_detachEvent(element,evt,func){if(element.removeEventListener){element.removeEventListener(evt,func);}else{element.detachEvent("on"+evt,func);}}.function ez_getQueryString(field,url){var href=url?url:window.location.href;var reg=new RegExp('[?&]'+field+'=([^&#]*)','i');var string=reg.exec(href);return string?string[1]:null;}.(function(root,factory){if(typeof define==='function'&&define.amd){define('ezRiveted',[],factory);}else if(typeof module==='object'&&module.exports){module.exports=factory();}else{root.riveted=factory();}}(this,function(){var riveted=(function(){var started=false,stopped=false,turnedOff=false,clockTime=0,startTime=n

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	952
Entropy (8bit):	4.795311065148995
Encrypted:	false
SSDEEP:	24:2djx0L8tU/dQauLsgo7bK/urVIMD4GKO7Rit+5/N:cjm8m/aauwxCJMDRKOVR/
MD5:	863D25FCCF71C1DB2F003515238BB90D
SHA1:	B97C1FC520AFD257759F9B5D4BFFF2E3252B425B
SHA-256:	E99D5B17CDDAF7140675D3A4B52577486ADFB2EFCBCC119495AD2DF137B710A7
SHA-512:	2015825D6DAE1499D5A757E752341823AFD372BC7E466F0A83F5C0E427930C602EDA765E24BF9F046E3B22F4CE6F3A4DAD65ABBC57327F636BB4DF4BF7610B84
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24" fill="#1DA1F2"><path d="M22.46,6C21.69,6.35 20.86,6.58 20,6.69C20.88,6.16 21.56,5.32 21.88,4.31C21.05,4.81 20.13,5.16 19.16,5.36C18.37,4.5 17.26,4 16,4C13.65,4 11.73,5.92 11.73,8.29C11.73,8.63 11.77,8.96 11.84,9.27C8.28,9.09 5.11,7.38 3,4.79C2.63,5.42 2.42,6.16 2.42,6.94C2.42,8.43 3.17,9.75 4.33,10.5C3.62,10.5 2.96,10.3 2.38,10C2.38,10 2.38,10 2.38,10.03C2.38,12.11 3.86,13.85 5.82,14.24C5.46,14.34 5.08,14.39 4.69,14.39C4.42,14.39 4.15,14.36 3.89,14.31C4.43,16 6,17.26 7.89,17.29C6.43,18.45 4.58,19.13 2.56,19.13C2.22,19.13 1.88,19.11 1.54,19.07C3.44,20.29 5.7,21 8.12,21C16,21 20.33,14.46 20.33,8.79C20.33,8.6 20.33,8.42 20.32,8.23C21.16,7.63 21.88,6.87 22.46,6Z" /></svg>

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7334), with no line terminators
Category:	downloaded
Size (bytes):	7334
Entropy (8bit):	5.794319351103605
Encrypted:	false
SSDEEP:	96:hJxl5mKl4LI/L/kcbdecM7cf9Udcb/8IcM1cpvcouk5HsX0YyXCmscwmX5wjzRGy:hmNkDySILzgakvWUWQiAv1jqm7
MD5:	04F4B213561BF3C42D4342941FC385A8
SHA1:	35292FCFE0302AC63B484E0C0F23EA97F4B89A2B
SHA-256:	5DDBE44FBF6C02EC9C8C0A12421560CEF021A4946B8AD8E1D604D75243595DE4
SHA-512:	AA88B69165D093F7809F7146BFCEEF1B536489024E2DD97E1523198AA9BA36AFA4A37F17C3734E872694FD130999B7DB58543B2239362F5D3DF25D520740B101
Malicious:	false
Reputation:	low
URL:	https://www.mediafire.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/74bd6362/main.js
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(R,g,h,m,n,w){R=b,function(c,e,Q,f,y){for(Q=b,f=c();!![];)try{if(y=-parseInt(Q(299))/1(parseInt(Q(278))/2)+parseInt(Q(333))/3+-parseInt(Q(283))/4+parseInt(Q(274))/5(parseInt(Q(255))/6)+-parseInt(Q(314))/7*(-parseInt(Q(268))/8)+-parseInt(Q(332))/9+-parseInt(Q(270))/10,e===y)break;else f.push(f.shift())}catch(z){f.push(f.shift())}}(a,888498),g=this\|\|self,h=g[R(322)],m={},m[R(263)]='o',m[R(292)]='s',m[R(251)]='u',m[R(291)]='z',m[R(259)]='n',m[R(261)]='I',m[R(289)]='b',n=m,g[R(300)]=function(f,y,z,A,a0,C,D,E,F,G,H){if(a0=R,y===null\|\|y===void 0)return A;for(C=u(y),f[a0(285)][a0(265)]&&(C=C[a0(304)](f[a0(285)][a0(265)](y))),C=f[a0(258)][a0(241)]&&f[a0(339)]?f[a0(258)][a0(241)](new f[(a0(339))](C)):function(I,a1,J){for(a1=a0,I[a1(307)](),J=0;J<I[a1(325)];I[J+1]===I[J]?I[a1(276)](J+1,1):J+=1);return I}(C),D='nAsAaAb'.split('A'),D=D[a0(254)][a0(242)](D),E=0;E<C[a0(325)];F=C[E],G=s(f,y,F),D(G)?(H='s'===G&&!f[a0(326)](y[F]),a0(320)===z+F?B(z+F,G):H\|\|B(z+F

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.377718757501969
Encrypted:	false
SSDEEP:	6:TMVBd/gEO58FiLUECc4sZXUg9BXSBU/9mc4slZKYnic4soSIXdhC/O4LZNHwY:TMHdjIMu5E4Bn/KY8XdU/P1z
MD5:	34BD6069C9F08BB444C86B8D099A000E
SHA1:	F78F72953D6F9F639D26F4E38C1D822B52E86763
SHA-256:	82B94716473AA225E715E117802145C5D2D725AA1BA9D476D61A5D3DA16A8C26
SHA-512:	5762D0CE880F5150A5ADB0395F3EB2A2F177091FA3F033E768CAB09D7E8D149F6BD98CF081F3A84EC63B92491BBE580977E4C784972157AEE94282824B29930A
Malicious:	false
Reputation:	low
URL:	https://www.mediafire.com/images/icons/svg_dark/arrow_dropdown.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24"><path d="M7,10L12,15L17,10H7Z" /></svg>

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16290
Entropy (8bit):	6.017512851768781
Encrypted:	false
SSDEEP:	384:o4rHv/IOUQyz2MURntjd36plGKtAmE441/AGz:o4DLUQyS3nz3YlREFZ
MD5:	5F443ECB59895E0AA636F74790844F6A
SHA1:	07E37C49023CE9A8D63C224F5AE476F7AC6EF556
SHA-256:	DCE7E2AD5A2DAD35ACD1BEDACD8363AE1D64116A8A173EB7C086CA8AB694F888
SHA-512:	A1CDD51A603CF661B928F05AC9F7CB42F729DC12A5CF12EB95FEA6417A85EDDA5490BD5A2E5638FF66EBC0507E39FBF8B133A13184751A83E586B067FB2B1101
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"26CNZYW1MpSw28cP9-Sp8A4","injector_basename":"sodar2","bg_hash_basename":"Dtt_-LR3WxpzwV0Gscftq1A_D1owstvxoTnWWhwY4Ow","bg_binary":"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

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43448), with no line terminators
Category:	downloaded
Size (bytes):	43448
Entropy (8bit):	5.268041851579702
Encrypted:	false
SSDEEP:	768:waHCoz1pkGxeBrGBRHRCvWd2NyVrxEiyv2m87C9ChrkcQBO5:6vWd2NyVrxm2m870AkcQBO5
MD5:	29F39D0539C442B5D5A35D1324CBAE10
SHA1:	D0A4D35D6D1E1CF8D4D3BD4A4F74285335EB42CA
SHA-256:	30FE2B25061C04E45888D4ECCBE63E113AD09715A8EE40D87485F188A526AA2D
SHA-512:	E5E76BD98BBD37F4F219B56C4980653E3A5E59F610219A6F191A41AE783D1E6EDA7605559638212067F3B4DEBFE5E7FD8FE00E791DEC1498E602CCA7D6343D8B
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.ids.js
Preview:	!function(){"use strict";var i,e;(e=i=i\|\|{})[e.Error=0]="Error",e[e.Warning=1]="Warning",e[e.Debug=2]="Debug";var s=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),h=(a.Log=function(e,t){if(!(a.LOGLEVEL<e)){var o=i[e].toUpperCase(),n=window.navigator.userAgent,r=0<n.indexOf("MSIE ")\|\|0<n.indexOf("Trident/");window.console&&(r?console.log("[PubTag] "+o+": "+t):console.log("%cPubTag",s,o+": "+t))}},a.Debug=function(e){a.Log(i.Debug,e)},a.Warning=function(e){a.Log(i.Warning,e)},a.Error=function(e){a.Log(i.Error,e)},a.LOGLEVEL=i.Error,a);function a(){}var c=(t.getHighestAccessibleWindow=function(e){var t=e,o=!1;try{for(;t.parent.document!==t.document;){if(!t.parent.document){o=!0;break}t=t.parent}}catch(e){o=!0}return{topFrame:t,err:o}},t.getHighestAccessibleUrl=function(e){var t=e.topFrame;if(!e.err)return t.location.href;try{var o=t.top.location.href;if(o)return o}catch(e){}try{var n=t.location.ancestorOrigins;if(n)retu

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 42, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	363
Entropy (8bit):	7.222721269081384
Encrypted:	false
SSDEEP:	6:6v/lhPU82uA/8oqisIsWIN4IC2eH7ORaB2JiN3OvpUkyPow4CEjjX+9htIk0Bip:6v/78Buwqi7srN4IrebOE2gPkYXE+9zb
MD5:	853E3C671ADABBC17B0AD9929D507085
SHA1:	D778BEF4963B1359A96FC44BE0F5154B47B065B6
SHA-256:	873B28A0419545D56F83B0E1CC449CE219F35C579BB7CE2CDF2D8FD6D374A2F1
SHA-512:	92B01BB803705D01E9295309756441F325D92D87C10ACCA7EB90D6CBC2D2CC95F9A818A5A86C79B09F180CFB8440950309EF8FBEA2946867A22094A9B32900CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...........o......2IDATx...?K.q........`XACCDP........-.B..!.z.aKC`:..Im....RKN..D...tD.....M.......9...E...E.,..=2'{L.f.6... U.a.>A\.e.<&;.A..c...l..).\cr......aMaq.0%..>.l*,.1.$..8.%...pF.S.b. [.E...tI..'.RQ.L..;.EC......_YQ....~}..Wx.(...y....T.1..U.4......+.B...jL.7.....Y....Q9......c.P$..yh...<<..'y....$}.d_>....L....IEND.B`.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.090012084439345
Encrypted:	false
SSDEEP:	3:INhtq4btxbKBf+BiAIFRNVC3h0i7GeYHoIp//uxbKBf+BiAIFRNVC3AYZtXL1h8T:otqWtxbQLZVVi7GeqlcbQLZVZYZ7qT
MD5:	938464F4A51E80A29886967E2DD10247
SHA1:	6CA208768620D334DC104B093C6B816BEFD75CAD
SHA-256:	E5E1650378525B31C2E2805A4CF471C306C690A4F01466044490D53753E83BBF
SHA-512:	D432657412D9A0D75171CFC35F9F3A1DF6383406D76BF299A1EC230E859C2DDA71BF452129956E66538CB652732ED4F8E47BA363691F18C77D61A7442391C30C
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4356)
Category:	downloaded
Size (bytes):	4357
Entropy (8bit):	5.089214377078393
Encrypted:	false
SSDEEP:	96:cV5MGPyoBEoBtTBZRBguBu123B0buB9BQ4dEXMO8PcLvw:cV579H15u18qOjQ4GcO8PcLvw
MD5:	FBD98109E341BB418362E8458A4F6BFE
SHA1:	3B2AA2B4C963A6EAEFD03EBBF69EA181EE478504
SHA-256:	192AC3010D0B44A658521A2DE8DA3F4C6145E0CB98DD23678EB35104C163B311
SHA-512:	522FC2BD529D3F844A3763121634EC5FFF7DB38BE39FE65031A17B826FA2E3D10E3ABE73BA3A278F10F17077D1C8F837F3991C9D0EA36AD223E4DAD2CABA02EF
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/media-192ac301.css
Preview:	.--header-fade:before{display:block;content:"";position:sticky;left:0;top:81px;width:100%;height:32px;z-index:1299;transform:scaleX(1.05);background:linear-gradient(0deg,rgba(255,255,255,0) 0%,rgb(255,255,255) 100%);background:linear-gradient(0deg,rgba(255,255,255,0) 0%,rgba(255,255,255,.1) 24%,rgb(255,255,255) 100%)}@media (max-width: 740px){.--header-fade:before{top:64px;height:32px}}.rebrand__footer{background:#003d54}.footer__content-links,.footer__links-social-media a{color:#fff;text-decoration:none}.footer__links-social-media a{transition:.25s ease all}.footer__links-social-media a i{will-change:transform;transform-style:preserve-3d;transition:.5s ease all}.footer__links-social-media a:hover{color:#0aa8e8}.footer__links-social-media a:hover:after{transform:scale3d(0,0,0);transition:.25s ease-in}.footer__links-social-media a:hover i{transform:scale3d(1.5,1.5,1)}.footer__content-links-container{display:-webkit-box;display:-moz-box;display:-ms-flexbox;display:-webkit-flex;display:fl

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=6569&tp=STKA&tpid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1083
Entropy (8bit):	6.076477135307642
Encrypted:	false
SSDEEP:	24:zp1htZdWwh82lYSKwHI6eVIxT3HyJ3VrOxHvG85dzvxV:zqvnLJWeJ3tar5d1V
MD5:	4C42A3A9EF3453BDE7FBBB7B66FFB5AA
SHA1:	7C353F850F4ED3E309BD49B15C6F83F445A7FA3E
SHA-256:	B11DB7FBCABC28810909058A90E5921566B4A6220F62DD3C0AA8D3D716CBC2A5
SHA-512:	CD6C969EF7B34DE0246A4A51AE6E68F6AB075804192420C51FE0228DFE5F3597C921C6B66F0367B6ED218A8D0AE0B30E0DBEBF9857A9E5B11018A0F0045162ED
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/indicators/ext_link.png
Preview:	.PNG........IHDR...............?.....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C208ED45C221681188C6A582F4669035" xmpMM:DocumentID="xmp.did:C69A8287E89E11E18452987382A7E98E" xmpMM:InstanceID="xmp.iid:C69A8286E89E11E18452987382A7E98E" xmp:CreatorTool="Adobe Photoshop CS5.1 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2675BE1D0524681188C6A582F4669035" stRef:documentID="xmp.did:C208ED45C221681188C6A582F4669035"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>mM......PLTE..................h......tRNS........

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (1903)
Category:	downloaded
Size (bytes):	1904
Entropy (8bit):	5.352485350046202
Encrypted:	false
SSDEEP:	48:1+DT5kV72A8Fpe9pG4hvysBEuuk3N6jATLSUhUydR:ItS2tpmpG6qsLuk34cTLSW3R
MD5:	F986F1A5CA415AAA78D1F3EF6774FDE3
SHA1:	D5391520D484EAACEBED0D7EE977E99396452FE6
SHA-256:	40AFEDEEC2347B0C7E416E3ACAFEAD7430CA887CFACDCEC6C7A39E668279EB05
SHA-512:	91CFC14CDAE79D8DD1B84146FAA12B3169D61EE03AB0EE4D248241B9C01DDDF088DBBB69AA7DA849C33E9E9BB62926A8E1EB13CC6934D03E8B011F9BBE16350A
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/footer.vue_vue_type_style_index_0_lang-10a79430.js
Preview:	import{d as _,g as m,a as d,e as r,f,h as p,j as e,k as a,w as i,l as o,s as h,X as u,Y as y,Z as k,$ as P}from"./index-41235507.js";const b={class:"footer"},w={class:"footer-menu menu"},g={class:"menu__item"},v={class:"menu__item"},C={class:"menu__item"},V=e("li",{class:"menu__item"},[e("a",{id:"termly-consent-preferences",class:"menu__link link",href:"#",onclick:"window.displayPreferenceModal();return false;"}," Consent Preferences ")],-1),Y={class:"menu__item"},N=["href"],x=e("p",null,[e("small",{class:"trademark"}," All trademarks are the property of their respective owners. No affiliation or endorsement is intended or implied. ")],-1),T={class:"copyright"},D=_({__name:"footer",setup(S){const t=m(),s=d(window.location.href),l=()=>h(t,s)?"https://app.termly.io/notify/3a1ed28f-a057-4071-9997-e7d50e9951b4":u(t,s)?"https://app.termly.io/notify/7733ee4f-edcb-4cec-8493-47178339d6c1":y(t,s)?"https://app.termly.io/notify/0c0d5751-34c2-45aa-9465-c0a6eb9b7849":k(t,s)?"https://app.termly.io/n

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	4211
Entropy (8bit):	4.095379452359606
Encrypted:	false
SSDEEP:	48:AyCNPln7dknO/IuW+PoH1ozs8QZ1ThBKAxtTfh/dSyJ3h5SSLu:Sl+n1uRP0yzs80NhAAjfhFSyJR5SMu
MD5:	AE0555CA0CAD5E2E5491CAF92DE001EE
SHA1:	B81A2F3D9753DDD7DC89BF5941340E3C785F925E
SHA-256:	1F6996F3A63E7AEC81E9442AEB93FEE46292C56C39AF857DAFF135A975D9E425
SHA-512:	5E37DEE433F5363408976C77431D05BE3D64E6B84E925F8D2234DAB263B5571DF0C77E9F8E216EAE712B1CC11E0A92D374D46700EEE7A3D56F68B8FCEADFA99D
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/favicon.ico
Preview:	<!DOCTYPE html>.<html>.<head>. <title>PC APP STORE.</title>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <link href='https://fonts.googleapis.com/css?family=Roboto:400,400italic,500,500italic,700,700italic,900,900italic,300italic,300'. rel='stylesheet' type='text/css'>. <link rel="preconnect" href="https://fonts.gstatic.com">. <link href="https://fonts.googleapis.com/css2?family=Bebas+Neue&display=swap" rel="stylesheet">.. <style>. * {. margin: 0;. padding: 0;. box-sizing: border-box;. }.. p {. font-size: 16px;. line-height: 27px;. }.. .container {. width: 100%;. max-width: 1100px;. display: block;. margin: 0 auto;. font-family: "Roboto", arial, sans-serif;. }... .row {. display: flex;. }.. .justify-around {. ju

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	570
Entropy (8bit):	5.120867923578939
Encrypted:	false
SSDEEP:	12:tT34/KYf3SQoT38IJqfSX/oxEJsDAzbNM4QLSxXU:tsLfBoTsduEAmBL+U
MD5:	C6694E0DD34DFF3948576D7082EF99A7
SHA1:	2201EDF4BD25F8BD836539FDF66CC35156AAFFC6
SHA-256:	358D933448D630883ABD7F83DF13A535DE82B948EF2821D1E01028A10E03C933
SHA-512:	0177368D71394A0E3032AD70201ED9897528179FFA3280EE9393712B7CF57C80DBF78D099B77F690CEAFAC132764E1ED767F907D3D8548CD8453AD83DBDDBEEA
Malicious:	false
Reputation:	low
Preview:	<svg version="1.1" id="loader-1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". width="40px" height="40px" viewBox="0 0 50 50" style="enable-background:new 0 0 50 50;" xml:space="preserve">. <path fill="#07f" d="M25.251,6.461c-10.318,0-18.683,8.365-18.683,18.683h4.068c0-8.071,6.543-14.615,14.615-14.615V6.461z">. <animateTransform attributeType="xml". attributeName="transform". type="rotate". from="0 25 25". to="360 25 25". dur="1s". repeatCount="indefinite"/>. </path>. </svg>

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5940
Entropy (8bit):	4.519657243050259
Encrypted:	false
SSDEEP:	96:FSPP0yTGuBVW8/38nQ/hNXI8Cdos1dblgiCAPP8WAyV7:oH3Wo8Q/48qD5qTWl
MD5:	E30A8D8BFBF0B1C0DB84DE7D542F8DF7
SHA1:	726797F57B2B055DD1C3DA961ACA40C75C8A3A3D
SHA-256:	C849FD639E438C9B707A6E5B5EF5B7B84A5F9BDDC091652A4CABDC03B7A0EECC
SHA-512:	05431F5FC11E81EFF98C7B60C0E788DC49A4A57F93286720C766E2F5DED997DC59DB73212850A185F2FA98ABFBD33248259BA799CB96C1BF01913FF0B59C0F6E
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/access_color.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#ffdb80;}.cls-3{fill:#ffdac7;}.cls-4{fill:#e2a688;}.cls-5{fill:#b3ddff;}.cls-6{fill:#cce7ff;}.cls-7{fill:#b2b7c4;}.cls-8{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab4"><g id="color"><circle id="bg" class="cls-1" cx="95" cy="95" r="94"/><g id="body"><path class="cls-2" d="M134.3,113H124.11a14.53,14.53,0,0,0-3-13.14l-.43-.5a5,5,0,0,1,7.58-6.52l.43.49A24.55,24.55,0,0,1,134.3,113Z"/></g><circle id="head" class="cls-3" cx="118.62" cy="85.84" r="9" transform="translate(2.62 175.2) rotate(-73.5)"/><path id="hat" class="cls-4" d="M103.38,84.46l4.11-.14a49.57,49.57,0,0,0,22-6l3.39-1.84-8.91-1.6-2.85-3.41a4.15,4.15,0,0,0-4.42-1.31l-5.44,1.68a3.64,3.64,0,0,0-2.54,3l-.46,3.7Z"/><line id="iphone_8" data-name="iphone 8" class="cls-1" x1="95.56" y1="95.33" x2="91.65" y2="80.01"/><path id="arm" class="cls-2" d="M127.12,102.53A24.72

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	298
Entropy (8bit):	5.355497688298125
Encrypted:	false
SSDEEP:	6:TMVBd/NIxmc4sl3WWIDzagu/0BNqWbSvs8mXLzlndxUfi2J+:TMHdV01WfDz207Gfi2J+
MD5:	DFA142012C40D1144E6396C45F8B5D86
SHA1:	2145BCA51A577986791B9FCA04A4ECB480D9653F
SHA-256:	9E5340944CA71D232BDF0FFE92D91C806699413C3E2E844C7DF276BEC55674CB
SHA-512:	2461459B3D2BEC94187D42CB712C14D21B9F5196FBCA53DDA23551644D4CA7A420227B8DFDE91224E4FCF530D6ACDA207C58AEEB49634FE12509919D9CF39D52
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/bgb/old-school-images/bright-green-arrow.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="_...._1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 360 216"><defs><style>.cls-1{fill:#05f106;}</style></defs><path class="cls-1" d="m360,72L216,0l27,45c-9.79,0,2.77,0-18,0C81,45,0,216,0,216c0,0,72-117,231.05-117h11.95l-27,45,144-72Z"/></svg>

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 44560, version 1.0
Category:	downloaded
Size (bytes):	44560
Entropy (8bit):	7.987446877944298
Encrypted:	false
SSDEEP:	768:wO/w4Z//sknYgpW5P/5DV156sxnlq40h2L76Fp3BBJmKSXBLbTRsbJni3:wO3Z/3nYgMJDV15Nnc408H8JBK5xLb1r
MD5:	5638526FB224AD0A4F724285780DE90A
SHA1:	08DD197445F17F985697554CB2A60047488E6F01
SHA-256:	7EF26B78B23F2FC011D6C174F0B72A35448BA8BF99AC24A1FEF89A9B358A2E34
SHA-512:	19097AEEBD31FFDB9C797CA88005316CFD9FB9B0A6279ED8EAD782E8631761B5F5E7EB582182D9715309D8CF2F3869C942E3841FE8EE7FD383A8E0FC7CC6372D
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/ce96c9/00000000000000007735ee08/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
Preview:	wOF2OTTO..........'................................,?DYNA.....?GDYN.-...V..\|.`..v.6.$..6....q. [.&.........Z?.QT.zXDb>.....jJB.c...PU..~._..7...............E`...:.I..N.......E.Z.z..$.jH.j....1....u...1.DF!..).,Q(..Gv..........O.y..O....F.eP.Q..?.....X)" 6PQ..,.t$.F..T.J.\b.bI.XzJ.hO.$ov.E....?.+ID.OU....RL...SZ....?O......S..8...v)U.v....E..,`..Z.).v...T.l-..VM...c#.k...\|{..kC.....&dY.....E.....h.+v.....g.iO..f..r......;1.I.....}Q...X.......d'KL...<.....k..V....,..R.T.6...:....Y...c...%..2..#.@ .A#y.!ca.!...3B.".X6...K....{g...iM.j.....ge.Q.....l..I.&.....i...=...;..fCb...v..\.y=...U1.R......g..-F.2..\|..'....O.......6........V.....[.XiW%-.;....%.Z.r.~.{......}...%..T.......3......C...o.)...B.Z...`J....;.....g....]`...j.Q.EQG%Mc)........_...:CK......r./.fy.h....jP.pe..#.d..\|[....i.u.......fa.Vc.`.J..Q..X......:.*zv.@[.&(0J......Z.p"...#.........RW.....Q...[....]....='..u%7.e%7).....ZY..\|.y..J.(a...5..:!........i..-.. ....M.v..f.n..

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47672)
Category:	downloaded
Size (bytes):	67309
Entropy (8bit):	5.324742633486624
Encrypted:	false
SSDEEP:	768:PP5ynEb9XSFf/5+RHY0hBvoGje8x75+AcE:5Hb9JRNBomnx75+0
MD5:	D3D64AE5A9140ADD5E82DB840395A3B4
SHA1:	61F2AC762CC2009D79E2C32C4EFD4B61938D1E1F
SHA-256:	5D2E4EA28C9B40F6C6557C772A727C96B9A627615B8249868514A89A1C528DFB
SHA-512:	8DD763517E39856E79D1A7C320EB1B91AC821B6E3C5C82DB2564A5F88417CF6BC2C78056174382684240A751EF830AFA73DB76858196582152F667AD7E03D3B3
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/Page-42a60927.js
Preview:	import{d as D,g as ce,a as de,u as ae,c as h,r as S,i as F,b as ne,o as G,e as x,f as n,h as v,j as t,n as E,k as l,W as _e,w as u,l as b,m as J,p as T,q as $,s as pe,D as K,t as te,v as me,x as ve,y as M,z as q,F as V,A as j,B as he,C as ye,E as ge,G as ie,H as Q,I as U,T as fe,J as we,K as be,_ as oe,L as e}from"./index-41235507.js";import{_ as Ee,a as Ae}from"./media.vue_vue_type_style_index_0_lang-e9b8883b.js";import{_ as Pe}from"./clickwrap-agreement.vue_vue_type_style_index_0_lang-c05b7e4b.js";const ke={class:"rebrand"},Te={class:"rebrand__header"},Le={class:"rebrand__header__content section-container"},Ie=t("span",{class:"bar"},null,-1),We=t("span",{class:"bar"},null,-1),Oe=t("span",{class:"bar"},null,-1),Se=[Ie,We,Oe],De={class:"menu-item",role:"presentation"},Be={class:"menu-item menu-item__dropdown",role:"presentation"},$e=t("i",{class:"fa fa-chevron-up"},null,-1),Ve={class:"nav-drop"},Re=t("li",null,"Privacy",-1),Ce=t("li",null,"Security",-1),qe=t("li",null,"Speed",-1),xe=t(

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1790
Entropy (8bit):	4.943870974645288
Encrypted:	false
SSDEEP:	24:tjWKOXSz+SRkNbB2bjDbeDbY3+B+FdepCyKsdbkZcceAF6KveWCtAD8j:ExuqBoDiDEuBqde1zuZc/iL4AQ
MD5:	79A04000DC5BCF2EC481DAC7DE05C966
SHA1:	20E6C1E9FA7BCDAD5C93A87EA7BA20F89A35A267
SHA-256:	4A6E3F47B36C1D913D3668A267BB7FF140355C155006369E43F1B0EF194804CD
SHA-512:	C946954813E2CA5FAA143BB74B77BA8B5B6F4961CC144CC0E0072A95B9CC3DB7DBC853BAA552FD909F561B744E15EAF9058E6B6D96FBACD1B089A80CB7C6BEB7
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/cnet.svg
Preview:	<svg id="svg6096" xmlns="http://www.w3.org/2000/svg" width="999" height="999.06" viewBox="0 0 999 999.06"><defs><style>.cls-1{fill:#fff;}</style></defs><title>cnet</title><g id="layer1"><path id="path4887" d="M500,999.56c275.89,0,499.51-223.6,499.51-499.49S775.88.5,500,.5.5,224.14.5,500.07,224.08,999.56,500,999.56" transform="translate(-0.5 -0.5)"/><path id="path4889" class="cls-1" d="M311.52,798.36h34.79V231.18H311.52Z" transform="translate(-0.5 -0.5)"/><path id="path4891" class="cls-1" d="M311.52,798.36h34.79V231.18H311.52Z" transform="translate(-0.5 -0.5)"/><path id="path4893" class="cls-1" d="M168.75,437.79c.61-36.15,62.57-37.18,62.57-1.74l.57,30.74h47.36V438.4c3.06-95-159.7-94.84-158.44-2.35V599.51c-1.26,92.49,161.54,94.82,158.64,0v-34.3H231.32v36.64c0,35.52-61.86,36.07-62.48,0V436l-.08,1.74" transform="translate(-0.5 -0.5)"/><path id="path4895" class="cls-1" d="M439.33,400.83s8.27-12.27,29.94-24.27c27.47-15.23,54.35-.06,50.46-1.74,21.65,9.55,29.84,32.8,31.38,58.73V627.07h30.47v35

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55542
Entropy (8bit):	5.955127753679909
Encrypted:	false
SSDEEP:	768:WW99UreQNQJorSVvkxVrVVVpVT9+90VZVw74G9U5Tp1:WQg1sr4GuTf
MD5:	BD8089C2266FB608935685EA437A185C
SHA1:	E6DAD3BDF5784E5659F33C0F9E4EDBC6E1893A7C
SHA-256:	B605A4F225E5CB0CFAA7A8BBAF31AFDB840399D0ED952F37ED40F151F7B2BDBF
SHA-512:	D137F44BBC979943A83AAEAB66C66B82B1159053CE42D7C67C56D132EECD38B728755965916362C17F5DAE3FF74F18CC15179AA185913237969CEDDF44D57A1D
Malicious:	false
Reputation:	low
Preview:	{"/183096492/MediaFire-Zone2":["html",0,0,null,0,280,336,0,1,null,null,null,1,null,[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CInhqZ7FsoMDFSnd4wcdMFkGMg",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-singl

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2348)
Category:	downloaded
Size (bytes):	6105
Entropy (8bit):	5.437874807472625
Encrypted:	false
SSDEEP:	96:5NcjRhp0zrAPKI1xtOXVy6s9R4Y1CfPDqZaw2PMTBxj6kDxx1vnysfRjUlEYdO6s:5NcjR30zK3ws6s9R4YAfPDhNETflDBy2
MD5:	8E62FBC0AD68AF20BD820DED5B8DE62A
SHA1:	7EB712F30E1355CF59F28033C3F513EE0B5C8981
SHA-256:	367E9BA17BEE1E676E15D01DAA52D8FEC079988777F11440D25CF1710ECDA7EB
SHA-512:	9F3F76B22EC6C27AF29821A8DF0AE0009E63803E95EFF99D9A4E1047FD89A426899B147ACA03C1DBB18CDC529F3E74A31C1AE0B9E77F76E17CFFCD2064EB4827
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var f=this\|\|self,h=function(a,c){function b(){}b.prototype=c.prototype;a.D=c.prototype;a.prototype=new b;a.prototype.constructor=a;a.C=function(d,e,g){for(var y=Array(arguments.length-2),l=2;l<arguments.length;l++)y[l-2]=arguments[l];return c.prototype[e].apply(d,y)}},k=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .function m(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function n(a){return-1===a.toString().indexOf("`")}const p=n(a=>a``)\|\|n(a=>a`\0`)\|\|n(a=>a`\n`)\|\|n(a=>a`\u0000`),q=m``&&m`\0`&&m`\n`&&m`\u0000`;function r(a,c){if(Error.captureStackTrace)Error.captureStackTrace(this,r);else{const b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a));void 0!==c&&(this.cause=c)}h(r,Error);r.prototype.name="CustomError";function t(a,c){a=a.split("%s");let b="";const d=a.length-1;for(let e=0;e<d;e++)b+=a[e]+(e<c.length?c[e]:"%s");r.call(this,b+a[d])}h(t,r);t.protot

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	237353
Entropy (8bit):	5.555099173319564
Encrypted:	false
SSDEEP:	3072:LOdZAlCIWYyUyO1jP0ypDDMv0MWXdXzhoO7DfFWkpta4X:6fIHyUy4o3WtDhoO7DfYOtx
MD5:	6B5685C7B5AF20D65B06831117377DC5
SHA1:	41AC4EF08786B271613FECE5A17846D0414CD283
SHA-256:	FB64F38379E6145A3C5E66F0CBA62C9D85D4B5F3B3F2CE362D159BD38914426D
SHA-512:	71B3D1357D3EF98701F8A85F0AE1337E68A74513CF19699C6A0D6B75B3F5082FF4722B73E4CD04DC41B405214D310BE104023DC4CB16BA989F7E700929B7DEB6
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-858128210
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-858128210","tag_id":10},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (5290)
Category:	downloaded
Size (bytes):	5291
Entropy (8bit):	5.330815870971829
Encrypted:	false
SSDEEP:	96:kKjdL7POYa1JbCZLnpEt3Ssquk3kG+TR6UPXugy58mugTW44tM41KWvq8fo:kqdLG1JbC5mt3vqixgZ8iutM41KWvq0o
MD5:	81D39067B3703D0BA19387A633D81A82
SHA1:	A4585DCD242EC128746E61CB9C97E3D97F80CE08
SHA-256:	E932CFEFCA3C551103D67B1DA5CCD983661854C081679BC4E31FA4EA73749505
SHA-512:	42726D91719C03596ED5AEF4C1DDA770F9157A8CB8A48A8563AE34E2D018D40A79CA235EEEF04AB99DE9898FC6EC1642AEEAB8F9E394DA47EA3C6C31C817B316
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/media.vue_vue_type_style_index_0_lang-e9b8883b.js
Preview:	import{d as b,g as B,a as V,u as $,c as _,b as x,i as N,e as u,f as m,h as y,j as e,k as t,w as s,l as o,m as p,p as A,z as F,s as T,X as Y,Y as D,Z as E,$ as H,q as k,n as h}from"./index-41235507.js";const M="/wave-logo-light-blue.png",j={class:"rebrand__footer"},q={class:"footer__content-links-container"},z={class:"footer__content-links"},G=e("div",null,[e("div",{class:"footer__logo-with-text"},[e("img",{src:M,alt:"The Wave logo outlined in light blue"}),e("div",null,[e("p",null,"It's a web browser."),e("p",null,"But simplified.")])])],-1),I={class:"footer__links"},L={class:"footer__links-misc"},R={class:"footer__links-misc-column"},Q=e("h6",null,"Features",-1),U={class:"footer__links-misc-column"},X=e("h6",null,"Product",-1),Z={class:"footer__links-misc-column"},J=e("h6",null,"Help",-1),K=e("a",{id:"termly-consent-preferences",class:"link--simple",href:"#",onclick:"window.displayPreferenceModal();return false;"}," Consent Preferences ",-1),O=["href"],ee={class:"footer__links-misc-co

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	174
Entropy (8bit):	4.4435858534741
Encrypted:	false
SSDEEP:	3:YRc8fxgsKvMnUhBlH2l7reLR3vFXQreQWUPRQKHGLC+Oo2LrNAtfwzRfH4xHmJY:YxgsDUXgl7o/mreDUPRm2lzRfYxGW
MD5:	0133A1F266F4740A5D50DE1410FC1CA5
SHA1:	64955AA4F31415A69929B984665530F3C8C65E1D
SHA-256:	94C5140FFBCABF14891B919CB87810EF0B7307CFE424DFFE47D25FB5FD6A551C
SHA-512:	D6534F3C3305B72BDAEEE3C11CF0C193832E07DE6BBC2D41F577B7C25927BEB2F69DA987E57953BAACE421A805A91A26CDB2125ACAE99C3B7E84272B219E91EE
Malicious:	false
Reputation:	low
Preview:	{"type": "validation_error", "code": "no_data", "detail": "No data found. Make sure to use a POST request when sending the payload in the body of the request.", "attr": null}

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64001), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	579388
Entropy (8bit):	5.51858001296872
Encrypted:	false
SSDEEP:	12288:5Gazh9uxoRIW8XkQsVtiTlzryKaUJXgqoOINRMFbugJZfsydXzDwQRCK3jfg+n3n:5Gazh9uxoRIPX4iTlzBfJXgqoOINRMFF
MD5:	4AA55F27696F0B0CCED8849207E4FC72
SHA1:	045A0EDC9D5AD997DFECDCF3521A75A5F39D7202
SHA-256:	72B412A70719B2CA2BEF9A933E41D65C3F82CEA6FA64045DE2F075F241422D53
SHA-512:	70C7D178DB3BA94B1DA6EA5721081CBF8FA0406E44E68A165FD35108C4092819F6EF267C97E61DACC76A74018F7C7117B08B867C9A6E88B2FEBBDAAA13E481EC
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/js/master_121918.js
Preview:	BUILD_VERSION='121918';. .var sCDNLiveUrl=' static.mediafire.com ';..var pq='';function ai(pn){if(pn=='MC'\|\|pn=='Visa'\|\|pn=='Disc'){DoShow('cardcode_general');DoHide('cardcode_amex');}else if(pn=='AmEx'){DoHide('cardcode_general');DoShow('cardcode_amex');}else{DoHide('cardcode_general');DoHide('cardcode_amex');}return false;};function Qe(){var baF=..document.getElementById('expected_file_size');var aAz=document.getElementById('expected_downloads');var hO=document.getElementById('suggested_plan_text');if(baF&&aAz&&hO){if(baF.value==0\|\|aAz.value==0)return false;DoShow('suggested_plan');var af=baF.valueaAz.value;if(af<490102410241024){..hO.innerHTML="500 GB / $9 per month";}else if(af<1210102410241024){hO.innerHTML="1250 GB / $19 per month";}else if(af<4900102410241024){hO.innerHTML="5000 GB / $69 per month";}else{hO.innerHTML="5000 GB / $69 per month + Additional Bandwidth";}}return false;};function pA(telNo){if(..telNo.value=="")return;var phone=new String(telNo.value);phone=p

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x500, components 3
Category:	downloaded
Size (bytes):	15040
Entropy (8bit):	7.560010885808356
Encrypted:	false
SSDEEP:	384:smKcccccccccccccccccccccccccccccccccd53UrgMn0kn2D3KCJQNzOY26aPLh:smKccccccccccccccccccccccccccccg
MD5:	4BD7EB195489D0CCAF5751060D8E8340
SHA1:	BA3B3AE434FB411FF2824CD837A4B4042FD16753
SHA-256:	B92C15AC3DDD3463FC449766DA3ACC277BCC160E6885F1BFCAFE7A95CDA37BE9
SHA-512:	69907AEE18C43F4F17B59A5BDE3F858A17B146476161380F581DEF4CAC25EC7F0B1E45542BE9D84543329717A23122E1268C8C4150DE36E8B5E3F8504F3DAF12
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/4792454677614948144/2076313506083323656
Preview:	......JFIF.............C..............................................!........."$".$.......C.........................................................................X..".........................................[.............................!1.5AQUfqt....."Ra.....27rs....#34Bu....Sb....CDV....$%6ETcd................................6..........................Sq...!1A...34Q...25."#a...............?..`......................................................................................................................#.....f..n..LN.....`.....kw.K..b..arf.&a....}...~..h@V{C..=).6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}....

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	174
Entropy (8bit):	4.4435858534741
Encrypted:	false
SSDEEP:	3:YRc8fxgsKvMnUhBlH2l7reLR3vFXQreQWUPRQKHGLC+Oo2LrNAtfwzRfH4xHmJY:YxgsDUXgl7o/mreDUPRm2lzRfYxGW
MD5:	0133A1F266F4740A5D50DE1410FC1CA5
SHA1:	64955AA4F31415A69929B984665530F3C8C65E1D
SHA-256:	94C5140FFBCABF14891B919CB87810EF0B7307CFE424DFFE47D25FB5FD6A551C
SHA-512:	D6534F3C3305B72BDAEEE3C11CF0C193832E07DE6BBC2D41F577B7C25927BEB2F69DA987E57953BAACE421A805A91A26CDB2125ACAE99C3B7E84272B219E91EE
Malicious:	false
Reputation:	low
Preview:	{"type": "validation_error", "code": "no_data", "detail": "No data found. Make sure to use a POST request when sending the payload in the body of the request.", "attr": null}

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2365), with no line terminators
Category:	downloaded
Size (bytes):	2365
Entropy (8bit):	5.670015335651356
Encrypted:	false
SSDEEP:	48:C2gd8O4gd8aiwgduQgdhusGJdTjN2mAeSsTgNNm77+C8t5nMJOBOq:C2gC3gCaiwgUQgKsyZN2xQ7R8tslq
MD5:	F6221FBE8B53D07E6BD1A4B868E2B837
SHA1:	C3DB6F2FDB80EC78CFE3C3C63FF4F4CF07E26318
SHA-256:	29D6CD21C07A825CCB4F42405ACAEF2422F55FD605429098A9331F9064A8D7CC
SHA-512:	C24058981BCB6B0B953347D4545A8BD612B5DA09B3876055E052F8D15A90B4CEA1DB0D3F8E955D3C101C763B177F482E71A5A2177A662AF7BC50D548184C0ED5
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=69452871&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY');PubMatic.loadAsyncImagePixel('https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE YOUR PIGGYBACK COOKIES HERE]&gdpr

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1671
Entropy (8bit):	4.373953575559949
Encrypted:	false
SSDEEP:	48:r9sZgcn6H7zC7+ClTU7NQ74VbLf23iarpuhlTy4ML:SJuyMNf2VurTyb
MD5:	892A5AC02A6ABD105EB9BA14B81E07A8
SHA1:	5A11FD0E2BF2FD3103EBC926CCF255EE7145138B
SHA-256:	7D3B708FBCBC101D8F5B68141E4C4B9121B41DF5F1E302E416CC0572F284CBF2
SHA-512:	559BA18A6A1141B32989D9657838510D53A22EE9AA2D5455E43AEAC8F42CC614D8CD745783F1422D5CB0545A75FC3D68E84C3EA9F2DFEC54C58CA06D7FFCF635
Malicious:	false
Reputation:	low
Preview:	<svg id="svg2" xmlns="http://www.w3.org/2000/svg" width="1534.39" height="333.13" viewBox="0 0 1534.39 333.13"><title>engadget</title><g id="g10"><g id="g12"><path id="path14" d="M0,243.49c0,16.15,13.13,29.28,30.29,29.28H151.42V242.48H30.29V212.2H149.4c16.15,0,32.3-13.13,32.3-29.28V124.37c0-16.15-15.14-32.3-32.3-32.3H30.29C14.13,92.07,0,108.22,0,124.37Zm151.42-61.58H30.29V121.35H151.42ZM556.21,91.06H436.09c-16.15,0-32.3,16.15-32.3,32.3V242.48c0,16.15,16.15,30.29,32.3,30.29H555.2V303H434.07v30.29H556.21c16.15,0,29.28-14.14,29.28-30.29V123.37C585.49,107.22,572.36,91.06,556.21,91.06Zm-1,151.42H434.07V121.35H555.2ZM323,91.06H233.19c-16.15,0-31.3,16.15-31.3,32.3v149.4h30.29V121.35H323c16.15,0,30.29,15.14,30.29,32.3V272.77h30.28V153.65C383.59,120.34,356.34,91.06,323,91.06ZM757.1,242.48H636V152.64c0-16.15,16.15-32.3,33.31-32.3H757.1V271.76h30.28V123.37c0-16.15-12.11-32.3-28.27-32.3H669.28c-33.31,0-63.6,29.27-63.6,62.58v89.84c0,16.15,17.16,29.28,33.31,29.28h52.49c27.26,0,55.52-11.1,65.61-30.29

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:YKOHfY:YKOHw
MD5:	82380D1E263B6093F3C7535690FCDD75
SHA1:	022D91F218046AB2E61CAC1EB13D6A718F75DF2B
SHA-256:	4062EDAF750FB8074E7E83E0C9028C94E32468A8B6F1614774328EF045150F93
SHA-512:	180EA3CF6E7A00CB12ECFF7CE095B8CEF1921621DE681A64E5E53E3EFC0CF6053E557205F2BDB9B9D5AF4DE3D54C79D1C9B1C474B83897590C647B1E92D9C93A
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/home/pixel/fired?uid=af779c44-13ad-47a2-ad3d-9786811ff14d&target=AW-11219589166%2F4fTdCNvrh6sYEK6w9eUp&event=setup&tranid=af779c44-13ad-47a2-ad3d-9786811ff14d
Preview:	{"ok":true}

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1066
Entropy (8bit):	7.462382123618429
Encrypted:	false
SSDEEP:	24:zDAOyz2OixgEs/AkHXIQfl1nP0hcJBP0MoTV:zDAOO20j/t4C7nLfsT
MD5:	600ABF80E6DEC3EB916ABE1DF7730B57
SHA1:	F0C7648CABB24CB9E86ADAB17BD97E96B55F81E2
SHA-256:	097B1EA806AFEDDCE94390AA022AA51955A3E1236BEC96609C3B06A22BFB4A05
SHA-512:	188EFDA68B18503E28653C7F594390F9EC038DA2DD6E04E82F0AE63B0FF61A271A9ED3BEB4ED5095F67129F858A802200536424AEE6FDADFD25C5F2403562263
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/newHome/sections/texas.png
Preview:	.PNG........IHDR...x...x.............PLTE.....................................................................................is.is.is.............is....ku....is.ku....ox.ox....qz.q{.......is.is.......hr.......5tRNS...........................e....] ..Z.e.....'..%f..ia..f.....IDATx^....6......[..{...Z.c...ra......7R.k....+[.}.vK2..P...u..43..uP.Qr......&J"..(I...@.J.........FhJ(.i.(......Z.....M..S.ASMQ.M.....e=45...dxP..(.....T..1..iJ.`.:\.....!.(w.W..l...I...X~`...g.h..!...c...fN...2....)..50..;...xZ........3..~J......b.....?.....24.?<.g.0..~2.6.K..2..}.YQ...!..\....7..0)w..[..0N...r............KV..k4U..".IY..<D.l<.....`....d....b..euP0.kG.S.2=(...A..3.."x.g...}r....A}....o...%.DN}.............../.."n32...../~xi............?...;.W...........%..\|.x.?..E...iq.\|X.<...d.\|..q.5.}j...#.....j..!o.Y...{zzU.S..y...)p...........3..+p......>8..-.....3]..D...<."...C...o....M.T..C%.6.(.J..&...e....[.n...+%gP%..f...F....c...r....`.z.......b.....I.....~

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	588024
Entropy (8bit):	5.417202351843641
Encrypted:	false
SSDEEP:	6144:gLD3/aORWJMHrBC7kx+e+Bkf/FNxkPcF+j6qQkyE0THbY+MikZ:gXy8WJyrBCFe+MFNxkPc06wyEskF3
MD5:	DE4F654225FA536C1FE26B15CA3675F9
SHA1:	9037A028E1A9847926904004220933B2077D123D
SHA-256:	6FFCFBFFAC4DC6728DE836C5D03B34352E14A57074FC7D1EF7331365F105B2A1
SHA-512:	CFC7DA15FCA509CE0AF9C7D0A945EB8EE48ABA91AF6A030065F6803B1F5DD913C2E3A27687D1B0B7BD12BDCBCA34D18482D6786992BD806A0353022E63DEA0BD
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/index-41235507.js
Preview:	(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const i of document.querySelectorAll('link[rel="modulepreload"]'))n(i);new MutationObserver(i=>{for(const o of i)if(o.type==="childList")for(const s of o.addedNodes)s.tagName==="LINK"&&s.rel==="modulepreload"&&n(s)}).observe(document,{childList:!0,subtree:!0});function r(i){const o={};return i.integrity&&(o.integrity=i.integrity),i.referrerPolicy&&(o.referrerPolicy=i.referrerPolicy),i.crossOrigin==="use-credentials"?o.credentials="include":i.crossOrigin==="anonymous"?o.credentials="omit":o.credentials="same-origin",o}function n(i){if(i.ep)return;i.ep=!0;const o=r(i);fetch(i.href,o)}})();function Xl(e,t){const r=Object.create(null),n=e.split(",");for(let i=0;i<n.length;i++)r[n[i]]=!0;return t?i=>!!r[i.toLowerCase()]:i=>!!r[i]}const Je={},hi=[],or=()=>{},Kb=()=>!1,Jb=/^on[^a-z]/,$a=e=>Jb.test(e),Zl=e=>e.startsWith("onUpdate:"),ht=Object.assign,ef=(e,t)=>{const r=e.indexOf(t

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5751
Entropy (8bit):	4.562968939359178
Encrypted:	false
SSDEEP:	96:nSLb+qc6/bqUV7/+8eXqYpKfWCXQdW/5Mrk5EXDVuJcPUj:sRbvL+8expKFLaJV8j
MD5:	FBD98108E9D514C1DFF05869DECCB841
SHA1:	4AF19CD31AF25E06321213C902B4C836AB188F9A
SHA-256:	839A1FC390DB5FD65D98A4328EF1068498D930557D7428AA512CCFB9C5AC87B5
SHA-512:	AF6B35D494D283F74525B30ADCC2E3A007D8D7EA4E25C292ADBD385E0194EAEB6B7A1706C53A55A87F4F0B1648E330F68CDCE6E4C61E5D0F49F4FFE9AD601721
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/share_color.svg
Preview:	<svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#99cfff;}.cls-3{fill:#cce7ff;}.cls-4{fill:#ffdac7;}.cls-5{fill:#b2b7c4;}.cls-6{fill:#e2a688;}.cls-7{fill:#ffdb80;}.cls-8{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="color"><circle id="bg" class="cls-1" cx="95" cy="95" r="94"/><path id="doc_corner" data-name="doc corner" class="cls-2" d="M83,57V78H96c8.11,0,8,7,8,7V82.38a10.59,10.59,0,0,0-3.1-7.49Z"/><rect id="text" class="cls-3" x="80" y="105" width="14" height="2"/><rect id="text-2" data-name="text" class="cls-3" x="55" y="113" width="39" height="2"/><rect id="text-3" data-name="text" class="cls-3" x="53" y="121" width="41" height="2"/><path id="w" class="cls-3" d="M74.16,82.3v4.25h2.4l-3,8.51a19.81,19.81,0,0,0-.87,3.05,11.19,11.19,0,0,0-.59-2.23L67.35,82.3H65.78a1.86,1.86,0,0,1,.11.62V86.1A2.9,2.9,0,0,1,63,89h2.16A2.84,2.84,0,0,1,68,91.84v3.28a2.86,2.86,0,0

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	181
Entropy (8bit):	6.107611925782035
Encrypted:	false
SSDEEP:	3:yionv//thPl9vhSFlfSQ7Urzp/vhffNJK3/lzxtb9YNTeL8qoWtrTk+r+Nx1p:6v/lhPIFkQ7yzp/pffNEdz9YNEpNNV6j
MD5:	78226526732869ADD09512E9B4BE3090
SHA1:	F1CE9C760E17E69509CABE114392A108A6C839BC
SHA-256:	720671166AC43ABA99E3952B0B9341AB4E0FEE1FD891DB54E2A07F05DB653142
SHA-512:	94659C05B956F29792C1730088BE4A65C11C8636ED77632172DB71BE356FF72848628258FB8DEEA45FBBC901E8531C0B7A09225B977E5EF18C4084D986BD9C95
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/download/social/fb_16x16.png
Preview:	.PNG........IHDR................R...0PLTE<Z....m..Uo..........m........To.ay..........o5g....@IDAT.[c`....Ah6AQ..K...`.....=`.. T...W..`6666.36``RRRR.WR@0`......4.5.....IEND.B`.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4336
Entropy (8bit):	4.569678130120933
Encrypted:	false
SSDEEP:	96:P3iQ9ke21b1b4X26xPAv8psVtTk1KmsJ+6:/iQ9ke04G7v0sfw6
MD5:	07DAFB3B3B19203786484D9074C7E230
SHA1:	A76349E24A4E3A03F9BB020743D1F49DA0131714
SHA-256:	8597CB7AE41240BE9D8D9EF96F1F0E511F9DCD5A5D7F6CC96F243976A27BFDCB
SHA-512:	1E8CF6389BB4A42B2C9908B23AA75F60129E97A522B136F365615E47763B65E5CD3BDD8C426006C4DE7DA135178D85344918E0512EDD9D5EF5752038505BC8E7
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/collaborate.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab2"><g id="outlines"><circle id="bg" class="cls-1" cx="95" cy="95" r="94"/><circle class="cls-2" cx="34.36" cy="77.93" r="1.86"/><circle class="cls-2" cx="23.22" cy="77.93" r="1.86"/><path class="cls-2" d="M32.06,81.68l-.5.25a6.21,6.21,0,0,1-5.53,0l-.5-.25a1,1,0,0,0-.89,1.79l.5.25a8.22,8.22,0,0,0,7.32,0l.5-.25a1,1,0,1,0-.89-1.79Z"/><circle class="cls-2" cx="93.23" cy="40.99" r="1.86"/><circle class="cls-2" cx="82.08" cy="40.99" r="1.86"/><path class="cls-2" d="M90.92,44.74l-.5.25a6.22,6.22,0,0,1-5.54,0l-.5-.25a1,1,0,1,0-.89,1.79l.5.25a8.23,8.23,0,0,0,7.32,0l.5-.25a1,1,0,0,0-.89-1.79Z"/><polygon class="cls-2" points="94 61 92 61 92 86 86.9 86 93.01 90.79 99 86 94 86 94 61"/><path class="cls-2" d="M79,82A14,14,0,0,0,65,68H58v2h7A12,12,0,0,1,77,82v4H71.9L78,90.79,84,86H79Z"/><path

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14441)
Category:	downloaded
Size (bytes):	309816
Entropy (8bit):	5.561053180951857
Encrypted:	false
SSDEEP:	3072:Ez4a+mEdZAlCIWYMuUyO1jESypDDMlM66OhoO7DfFWkxt48rIyvEWRq94w:84BfIHMuUy43A66OhoO7DfY6tVrIyvs
MD5:	736B3F63017C7A7AC8554E18731BCC60
SHA1:	B96EA63E7ECE048448612F7F869C2C4912253A5C
SHA-256:	B9060E7B23BD9E98EBDF330809B401B940C19757F6F180BEB6BF460CE20E3B3D
SHA-512:	44AB9771922D58358558724211015928916D2C28E1793C0FF18E6CD98B3C66FAD4D60FDD482597779E7BEE3918DC9C8AC531FC2FDED353A4DB213686B560551C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-VFQWFX3X1C&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":38,"vtp_rules":["list","pcapp\\.store","pcappstore\\.download"],"tag_id":17},{"function":"__ogt_ga_send","priority":28,"vtp_value":true,"tag_id":19},{"function":"__ogt_referral_exclusion","priority":28,"vtp_includeConditions":["list","veryfast\\.io"],"tag_id":20},{"function":"__ogt_session_timeout","priority":28,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":21},{"function":"__ogt_1p_data_v2","priority":28,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR"

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	911
Entropy (8bit):	4.7650384722740355
Encrypted:	false
SSDEEP:	12:t4po/yXtFXhZVPUOXRgefut4PJ43O4H413dBYDx7wcZFz0NF0NmrvuM/:t4po/yzVchiPJ43O4H413dODx74GM/
MD5:	D1865B5D4E84A35E373E17229C4D0A67
SHA1:	CE67D81580C7A96A86282A04AB729EE26E6F741D
SHA-256:	39D367424D8A38A58613D6D50D284377F37EFCC65E8FB57B742EA433571FF65C
SHA-512:	2A9827BC03AEE8D15F90767E9EBBBBF68E741705C5EC1A8C40BBC93EFD868BACCD8A651A8C25D213B965C76BAB9B83AD5EA049F35244D2BA4BB019385B642CCE
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/pf_bulk_download.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>features-svg ready</title><g id="ab13"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,2.08V74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,2.4,0,0,1-2.4,0L34,76.39a2.41,2.41,0,0,1-1.2-2.08V45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3A2.4,2.4,0,0,1,60,29m0-5a7.4,7.4,0,0,0-3.7,1L31.51,39.28a7.4,7.4,0,0,0-3.7,6.41V74.31a7.4,7.4,0,0,0,3.7,6.41L56.3,95a7.4,7.4,0,0,0,7.4,0L88.49,80.72a7.4,7.4,0,0,0,3.7-6.41V45.69a7.4,7.4,0,0,0-3.7-6.41L63.7,25A7.4,7.4,0,0,0,60,24Z"/><path class="cls-1" d="M72.35,53.35l-7.69-7.7A2.23,2.23,0,0,0,63.08,45H49.23A2.23,2.23,0,0,0,47,47.23V72.77A2.23,2.23,0,0,0,49.23,75H61V73H58V69h3V67H58V63h3V61H58V60h4v4H59v2h3v4H59v2h3v3h8.77A2.23,2.23,0,0,0,73,72.77V54.92A2.23,2.23,0,0,0,72.35,53.35ZM63,55V47l8,8Z"/></g></svg>

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1790
Entropy (8bit):	4.943870974645288
Encrypted:	false
SSDEEP:	24:tjWKOXSz+SRkNbB2bjDbeDbY3+B+FdepCyKsdbkZcceAF6KveWCtAD8j:ExuqBoDiDEuBqde1zuZc/iL4AQ
MD5:	79A04000DC5BCF2EC481DAC7DE05C966
SHA1:	20E6C1E9FA7BCDAD5C93A87EA7BA20F89A35A267
SHA-256:	4A6E3F47B36C1D913D3668A267BB7FF140355C155006369E43F1B0EF194804CD
SHA-512:	C946954813E2CA5FAA143BB74B77BA8B5B6F4961CC144CC0E0072A95B9CC3DB7DBC853BAA552FD909F561B744E15EAF9058E6B6D96FBACD1B089A80CB7C6BEB7
Malicious:	false
Reputation:	low
Preview:	<svg id="svg6096" xmlns="http://www.w3.org/2000/svg" width="999" height="999.06" viewBox="0 0 999 999.06"><defs><style>.cls-1{fill:#fff;}</style></defs><title>cnet</title><g id="layer1"><path id="path4887" d="M500,999.56c275.89,0,499.51-223.6,499.51-499.49S775.88.5,500,.5.5,224.14.5,500.07,224.08,999.56,500,999.56" transform="translate(-0.5 -0.5)"/><path id="path4889" class="cls-1" d="M311.52,798.36h34.79V231.18H311.52Z" transform="translate(-0.5 -0.5)"/><path id="path4891" class="cls-1" d="M311.52,798.36h34.79V231.18H311.52Z" transform="translate(-0.5 -0.5)"/><path id="path4893" class="cls-1" d="M168.75,437.79c.61-36.15,62.57-37.18,62.57-1.74l.57,30.74h47.36V438.4c3.06-95-159.7-94.84-158.44-2.35V599.51c-1.26,92.49,161.54,94.82,158.64,0v-34.3H231.32v36.64c0,35.52-61.86,36.07-62.48,0V436l-.08,1.74" transform="translate(-0.5 -0.5)"/><path id="path4895" class="cls-1" d="M439.33,400.83s8.27-12.27,29.94-24.27c27.47-15.23,54.35-.06,50.46-1.74,21.65,9.55,29.84,32.8,31.38,58.73V627.07h30.47v35

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2939
Entropy (8bit):	7.880461226873563
Encrypted:	false
SSDEEP:	48:8ZqH13A0Ej9hsCJPg6ALAsYX6TpHsEr5ta6u7xF0YZNJdgDf+WesRChO5la6:8ZqV3sj9hsCJPgosRpHsEVtgxFPxdgTh
MD5:	A077B1B53CDF3330FC533DDC2B955EA2
SHA1:	E1B4EB7A13844D939A3096581A17883B3FA91FDF
SHA-256:	E2DB9B90E47D63C67E10D9B0EB777F005CF6DB418A7BA31BDFF88C2000D87F48
SHA-512:	7DCC24F7DB33F94B62AEE51DF6E8ABD28DFB358625FB84E8F1AD66E4837EA4019CAE707D5F58BF687D357039BEAA057759F81253DAD1F4FBC580A46CE792B9FB
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/press/quicklinksSprite.png
Preview:	.PNG........IHDR.......<.....#[.....BIDATx..{p......0..$..G#...c.."DI.$..H....@y$4A.H..rw..i.)..C.ap.v ..tl.m...vJ_#....S.b.+.....~....pw.r..l..=3...g.....=.=....T.2.W..k.......n.....D..d..R...V.\|./r.....~.i.@.>.6..d..WkJ....a9.....l'.c^]..._."...E....5.2..h.;@.hf^.m..........6..........."..$.Y..61..c._.Bd=x.T...wc.8m.4..I.\|...N_Z...T6/.A.P..i...\|..0.`.........4.d.[.m`.C.q........9S4.d:....S ..E...8.W..@&1..........D..@.a.....-M.....JW'D........g..@Xp.q....j...l.....c....0...L.i..v..N=.a..N,SA.L....l..........@..Q.;@;.y.......y.......M.........M @H y..V.K........3}.....>.X........k...4' .f..a...&.p.....z.....(...l..c,....x.V..bN.....@..f.$.....O.......Aq..t..R.B..w..T..j.Z...%2..-.L...6.W..b'...;.6..~]<..3.B,..GE.A.).!.i.a<>..@....&.R.Q .P.#...>...,."..!...C@ .B.x.>M...\.P.....]..-.8...G4.d-H.8........99..,S..JH U....-A..w...e.......4....Yo[.[g.s1E<.1[&..UH w.......{.P...$...bY.)...f....L.....3.`..kTw.Xf.`...x.^.vh..J)..B0.\|..m.2] R+..w...M.^..l

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	245316
Entropy (8bit):	5.587333485901659
Encrypted:	false
SSDEEP:	3072:kHs+dZAlCIWYMuUyO1jSZypDDMlMT6LhA9DfFWk4N8rIy55qd4w:OXfIHMuUy4MAT6LhA9DfY32rIy58
MD5:	5F81973F7379A0BB5E643FE04FA512CD
SHA1:	F61F7C2CDE975BCF284ACC1625DB2118EDCF6E37
SHA-256:	D8192B621932A5BA29F99BA4576AE7C16467F2484DB66F6DC8F95C80A8253D53
SHA-512:	0D9D95F0DD3490314024EB50BB4FA9BD748AAB3C366AC7EDCD8C9392891375C2190239BD69BF020AEE06B28253B4AE60E889C760F1FC6121A79D4E0AFBD450C0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-51LXLHFPYT&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","mediafire\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":20},{"function"

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	270
Entropy (8bit):	5.079680826848709
Encrypted:	false
SSDEEP:	6:C8BB6gJog2NV0D/YnRkiEUPVO7wJvK/MrEPq/h:P6gJ/2NV00hmF/Mroq/h
MD5:	CC3B98771F6904EB1AE0709691863185
SHA1:	877EDD28C809C9C1BE01A30A977EA08D484FFCF4
SHA-256:	EB1B3AC2E48DC594AD51276E54625EA43932E79E689A4F3293412C34B275580A
SHA-512:	4CA9164123333037C77C5B64E6578BBE98BDBB6ED9117B8BC3D26D6AC62929F301E8506FE7F90148EE1E51FF56AE8FF9F1315D4760464E5E184AADEB8E5222F9
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/clickwrap-agreement-eb1b3ac2.css
Preview:	.underbtn-agreement{font-family:Inter,sans-serif;padding:12px;font-weight:400;font-size:14px;line-height:1.5}.underbtn-agreement>a{font-weight:600;opacity:.65}.blueLink{color:#424242}.blueLink a{color:#0aa8e8}.darkBlueLink{color:#ffffffde}.darkBlueLink a{color:#003d54}.

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2502
Entropy (8bit):	7.885521295962446
Encrypted:	false
SSDEEP:	48:kfcMDcv54meKZVcvTOodUWfYKESWX7OI40t+34oXROODmtnt31tN+kniLDX9:kRwRPVsqCUctWX6IHg3jEODmtntl+Fh
MD5:	FF862C0E7A4755ADF3682DA543BCE1E4
SHA1:	9DB9B9C9BB176AEE7F639F5F4A4CD702105358B6
SHA-256:	36133CA07927C88A7CC578FDDBAED3C668AB75087834D0CA13DCA5DE4EC856C1
SHA-512:	F7BD41F50C64D5DFC88989D0DDEE4C2CE816A08DC7410E5176C9386052791C04991022D406ED15BD0B6CA8C1E1ED83CD2E3B37C0F601DE26646F0FC49FCA0E6F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................W....IDATh..go.I....&s..g....I.8...6Yd0".(..#.."..d.t&.x.q6.8.7...'...u......wX.!.C........O.>.e....I....2.,.,....A.....,tV....m...6..SR....'.JKKi..l..<0=.={x........::}.4M.0....C.;w.......)==]y..Ky..?6..\.z..r..w...r'C5.:....a..z.....k.}....6y.d...1..x...5.........H...EDD....p.i..}...\|....Y.....<..{.;.V.9..t...\.hm..Z.y..]........C.u..#F......,x..-[.5x.....5..I.N.....&Xx...6....;......z..?.....n..N.u}...>}..7..\|:~.8..q...U[[K.z..v..@.^.t...k.*++..X..........\...L;..t.........%%%Qyy9{..]...n7......u.X....,x#.....m...F}...[.n).....G..U.x\\|.(l..r..IZ.f..'._UU._?h..g.RZZ..5<..3.z.jZ.v-.C.D...799..........TQQ...r.....u.VZ.b..:t..4...!.A......5..k.5;X....:p.......y..E.=...,v.Vj....=z4..;...1c.p..;.}....Pc.......i...Ba..;v.....}.v.4...yn.c`....C.xO.......4./l.....5..f.a.]n.]....=...8(.....X..Bs...a..z+P...........>.\..".mX(3.(/...W.......S.......<..jYY...U+.1;;...._..F...D.~....y.fo.QSS.}.......

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	592
Entropy (8bit):	4.754171518329006
Encrypted:	false
SSDEEP:	12:trZoHIuCkXlrLhBhXUfUyrPnIgH7EFxkAHFShllR:ttoHIu/rU3HakaShllR
MD5:	F90265042F4A7C54D64A029B5546D89A
SHA1:	E134B0CCE9B03E350241570432EFA28A6CA2DE5F
SHA-256:	E7FE2A19CEBA78D9632432E3FFEA94DC13BED034EA3E2054C8A9841F5995E122
SHA-512:	FBD68FAD52BB605AE98106FC7C0DE703AC3AA8C6530CB623A048C8AA888B201154043E9BF5A322A586F25DDA3A44E057CE85FFFDA748A5565D73FBDB025ECAD6
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/lp/global/img/icon_download_cloud_white.svg
Preview:	<svg width="44" height="30" viewBox="0 0 44 30" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M22 9.28562V20.7141M22 20.7141L27.4545 16.9046M22 20.7141L16.5455 16.9046M42 20.7141C42 16.5063 38.7438 13.0951 34.7273 13.0951C34.6844 13.0951 34.6422 13.0955 34.5995 13.0963C33.7176 6.63425 28.4122 1.66663 22 1.66663C16.9152 1.66663 12.5276 4.79049 10.489 9.30623C5.7492 9.63122 2 13.7614 2 18.8092C2 24.0689 6.07015 28.3333 11.0909 28.3333L34.7273 28.3331C38.7438 28.3331 42 24.9219 42 20.7141Z" stroke="white" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvpEOUV6ke1qsdeaVIeVr5Nnk2ftX7OA-q-BIoi5PzR05Puz43GvZxqtH5rhOmamt3HhYKPAUlEUMVvZuQ5ol0F5HQ1lU6aZ_LxcoQI189O54X5c41XyfAqcNjcTatE149RheyxOD4dqcfMy1uTMim2ofOg&sai=AMfl-YQX_IogLPv4OhWZSHRJs_dtOeddRegaiSpRJCRpxIxFGJ5Yg2ifhwFdAqe6E0mHtMUgGuFNZgd7yL3Ls59KlHFYUFggxXLD65ZMH_TsbTymzUDOjzhQRNTMu8P_DBogZjoh41hqczERw3QCESL21Q&sig=Cg0ArKJSzIDKRLuUTeV7EAE&cid=CAQSTwAvHhf_liYGBbYmzVYfesDdavmOAD5ssoiNWP9cavfjZ8KHN1r7prYgpFI0Bwn7wKv3h-oIbzULoD3Z3Zx52e6FQCmDO6xf690Hb2tWT8cYAQ&id=ampim&o=384,10&d=728,90&ss=1280,1024&bs=1280,907&mcvt=1000&mtos=0,0,1000,1000,1000&tos=0,0,1000,0,0&tfs=1526&tls=2526&g=100&h=100&tt=2526&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1833
Entropy (8bit):	4.334581241263797
Encrypted:	false
SSDEEP:	24:tkpo/yLF8aawfbccCgzOKf3AwaCQlAKadyrnLeJalJfb8QdXWjxe6mAe/KL:JjqnEeZQLAobRXWjxe6s/KL
MD5:	DD0470A3CA0F622188E091F1D2A9F3AC
SHA1:	CA4D80A071FC0ECE5FE39813DF7833696ABAD894
SHA-256:	3C8F97D9E63715B1FB2FFC629EFAA1BE51038C256C9E0D364649DEC804463F9F
SHA-512:	FEFB0B17B4E85821A41CB0DE5409D9A34F06451742B64AF0AB38ABCB1B64541D78A506635EAEC40B36935730B698143E4D4C910593CDD1FAD823372A55F7CD52
Malicious:	false
Reputation:	low
Preview:	<svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><path class="cls-1" d="M52.92,64.39a1.42,1.42,0,0,0-1.37,1,10,10,0,0,0-.41,3.4,10,10,0,0,0,.41,3.39,1.42,1.42,0,0,0,1.38,1,1.43,1.43,0,0,0,1.37-1,9.72,9.72,0,0,0,.42-3.37,9.69,9.69,0,0,0-.43-3.4A1.43,1.43,0,0,0,52.92,64.39Z"/><path class="cls-1" d="M77.12,69.65H75.44V73h1.78a2.63,2.63,0,0,0,1.66-.43,1.59,1.59,0,0,0,.54-1.32Q79.41,69.65,77.12,69.65Z"/><path class="cls-1" d="M90.8,62.83a13.2,13.2,0,0,0-7.49-4.73,9,9,0,0,0-7.56-13.85,8.51,8.51,0,0,0-5.84,2.18,18,18,0,0,0-6.59-8.09,18,18,0,0,0-22.8,2.18,17.34,17.34,0,0,0-5.27,12.73q0,.53.07,1.51a15.5,15.5,0,0,0-6.57,5.75,15.7,15.7,0,0,0,2.13,19.62A15.17,15.17,0,0,0,42,84.75H80.25A13.49,13.49,0,0,0,90.8,62.83ZM44.95,75.25H42.23V67.81l0-1.22,0-1.34q-.68.68-.94.89l-1.48,1.19-1.31-1.63,4.14-3.3h2.23Zm11.37-1.44a3.83,3.83,0,0,1-3.4,1.62,3.78,3.78,0,0,1-3.35-1.67,8.83,8.83,0,0,1-

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	209
Entropy (8bit):	5.117136451414438
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhgtwQR4Eo9kMt4iBokHsjfq9m:t4BdStwlEomMGAIf/
MD5:	5EA6F0338C2012A1EA0E0D18B9D661D5
SHA1:	2BB5E016D567E122CD9CF7DF31CF430E3AF6F06B
SHA-256:	066A1D5E23190D9C34E21C70C88A954FE3D151A4411E36FBA000D24D639E85F4
SHA-512:	1A67E861CA1E24487945ED6EFC068B17E8A293631605205655DD161460BCF907563ABA38E0E62BE975AEBE1D924A8D839F7AA632AE506FB0EC511823145FBCE3
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/icons/svg_light/upload.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24"><g fill="#fff"><path d="M5 16h13v3H5z"/><path fill-rule="evenodd" d="M10 14.968h2.979v-3.989h5.029l-6.507-6.988-6.508 6.988H10v3.989z"/></g></svg>

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Category:	downloaded
Size (bytes):	46704
Entropy (8bit):	7.994860687757006
Encrypted:	true
SSDEEP:	768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r
MD5:	30A274CD01B6EEB0B082C918B0697F1E
SHA1:	393311BDE26B99A4AD935FA55BAD1DCE7994388B
SHA-256:	88DF0B5A7BC397DBC13A26BB8B3742CC62CD1C9B0DDED57DA7832416D6F52F42
SHA-512:	C02C5894DFB5FBF47DB7E9EDA5E0843C02E667B32E6C6844262DD5DED92DD95CC72830A336450781167BD21FBFAD35D8E74943C2817BAAC1E4CA34EAAD317777
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
Preview:	wOF2.......p......................................O......^?HVAR.g.`?STAT.8..4/l.....<..6..f.0..\.6.$..H. ..\..>..[`....\|...........7o.)....C81=......g#l..PA.c.......%...$.K.....\|}}....8H.\Yd.....2c.J....0K.....I..k...F..f......,L.....P...JGwj..KM....n..,..o.....n.ck...1...%.<.....;5...9..2....=b.....("4..:.k...K_...`.5v..2@...,_.3..6..@PR.]...f!X.~..b.....-..9.....?.=:kt.'@_...N...8.i......Fo..S.C.=%.........W.@7d..%......,"h...b@.DE.]l.n..(;......E.ng].`....8..C;m....).u8.....4...%..c.A.hc]....s.{.+....J..Rq...f..I;.B..g.....j.@~.........H.........:]Dc.J.6r..].".c...8j...v. M.PXB.,.v...M..NtOO.......Z`-.i..X.....".y....c.....+..e[..(..q...u..kh.k5W..=OK{.;...7...V...I.FMTWv.Dv.[..^`......JY..:.,.. tgKhC..2-...I..S..'...IL..........p......&:..(...g..B.`......%U....-.m.D.b.m..p..26.0D.....$j.r...w..z.9.)`..n.I..B...s"es...;..vY...6.T...**..2o.....W.Lu:wx.?.7..x......C..E.^SE..F.5WcMi..a..n...X...t.........6.j.j..M.9..a.....f<J.....@.&f..'.\|.....p

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (647)
Category:	downloaded
Size (bytes):	514678
Entropy (8bit):	5.669850658889447
Encrypted:	false
SSDEEP:	6144:58+cCxHn6/Wk+Zx1raepBj8oQHOlkjc7n/NrfQjFw/hrPutvvQmkUtV6:5/bZk/ShQumirfqFw/MKmkUK
MD5:	37C6AF40DD48A63FCC1BE84EAAF44F05
SHA1:	1D708ACE806D9E78A21F2A5F89424372E249F718
SHA-256:	DAF20B4DBC2EE9CC700E99C7BE570105ECAF649D9C044ADB62A2098CF4662D24
SHA-512:	A159BF35FC7F6EFDBE911B2F24019DCA5907DB8CF9BA516BF18E3A228009055BCD9B26A3486823D56EACC391A3E0CC4AE917607BD95A3AD2F02676430DE03E07
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that control, are controlled by, or are under common. control with that entity. For the purposes of this definition,. "control" means (i) the power, direct or indirect, to cause the. direction or management of such entity, whether by contract or. o

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65534)
Category:	downloaded
Size (bytes):	96790
Entropy (8bit):	5.2889512121509625
Encrypted:	false
SSDEEP:	768:cXnJL1fv/k1Ut0QVSPFVfxuOCJywJqOKEjn8CTx0j7LLGGbQNbxlZ0imzKuFJtxW:cP31uKm5ddWEA/vE1uOQGwmuBO6
MD5:	5376C157C62EFE566646CC52A4093E0F
SHA1:	45B798AA45448326B353599353C7120A30B759F6
SHA-256:	3907CC5ED9D4A0CDB316D069614220B55FCCD5624AC173592A7A4C2C3AAE0636
SHA-512:	6038670A08E451AAC27858B527E330B1BD50054299614CA3E161F7334524B009806508E6B8E95456781751EE7C9618A406C2E9AD5B0255E1F876B232CEC8EC4F
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012310301456000/v0/amp-analytics-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-analytics",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function s(){return i\|\|(i=Promise.resolve(void 0))}var e=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}},{isArray:n}=Array;function r(t,i){for(let s=0;s<t.length;s++)if(i(t[s],s,t))return s;return-1}function o(t,i){const s=t.length-i.length;return s>=0&&t.indexOf(i,s)==s}function h(t,i,s){const e=s\|\|1;for(let s=0;s<e;s++){let s=0;if(t=t.replace(/\${([^{}]*)}/g,((t,e)=>(s++,i(e)))),!s)break}return t}var{hasOwnProperty:u,toString:c}=Object.prototype;function a(t){return"[object Object]"===c.call(t)}function l(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function f(t,i){return u.call(t,i)}function d(t,i,s=10){const e=[],n=[];for(n.push({t:t,s:i,d:0});n.length>0;){const{d:t,s:i,t:r}=n.shift();if(e.includes(i))throw new Error("Source object has a circular reference.");if(e.push(i),r!==i)if(t>s)Object.assign(r,i);else for(c

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	952
Entropy (8bit):	4.795311065148995
Encrypted:	false
SSDEEP:	24:2djx0L8tU/dQauLsgo7bK/urVIMD4GKO7Rit+5/N:cjm8m/aauwxCJMDRKOVR/
MD5:	863D25FCCF71C1DB2F003515238BB90D
SHA1:	B97C1FC520AFD257759F9B5D4BFFF2E3252B425B
SHA-256:	E99D5B17CDDAF7140675D3A4B52577486ADFB2EFCBCC119495AD2DF137B710A7
SHA-512:	2015825D6DAE1499D5A757E752341823AFD372BC7E466F0A83F5C0E427930C602EDA765E24BF9F046E3B22F4CE6F3A4DAD65ABBC57327F636BB4DF4BF7610B84
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/icons/svg_dark/twitter.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24" fill="#1DA1F2"><path d="M22.46,6C21.69,6.35 20.86,6.58 20,6.69C20.88,6.16 21.56,5.32 21.88,4.31C21.05,4.81 20.13,5.16 19.16,5.36C18.37,4.5 17.26,4 16,4C13.65,4 11.73,5.92 11.73,8.29C11.73,8.63 11.77,8.96 11.84,9.27C8.28,9.09 5.11,7.38 3,4.79C2.63,5.42 2.42,6.16 2.42,6.94C2.42,8.43 3.17,9.75 4.33,10.5C3.62,10.5 2.96,10.3 2.38,10C2.38,10 2.38,10 2.38,10.03C2.38,12.11 3.86,13.85 5.82,14.24C5.46,14.34 5.08,14.39 4.69,14.39C4.42,14.39 4.15,14.36 3.89,14.31C4.43,16 6,17.26 7.89,17.29C6.43,18.45 4.58,19.13 2.56,19.13C2.22,19.13 1.88,19.11 1.54,19.07C3.44,20.29 5.7,21 8.12,21C16,21 20.33,14.46 20.33,8.79C20.33,8.6 20.33,8.42 20.32,8.23C21.16,7.63 21.88,6.87 22.46,6Z" /></svg>

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10158/tp=TPAD/tpid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=M2RkODc5ODUtYWVjYi0yOTQ4LWU5ZTAtMzE2NzU4Mjc4ODgz
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 24x24, 8 bits/pixel
Category:	downloaded
Size (bytes):	10822
Entropy (8bit):	3.878568995984578
Encrypted:	false
SSDEEP:	48:sKOwPsP29feqf0FKadK26lvh+esr3YURXyASdz/J70hvQ0UR2Sq:sK2sf0FKadK2lZrfoJUQ0U
MD5:	A301C91C118C9E041739AD0C85DFE8C5
SHA1:	039962373B35960EF2BB5FBBE3856C0859306BF7
SHA-256:	CDC78CC8B2994712A041A2A4CB02F488AFBAB00981771BDD3A8036C2DDDF540F
SHA-512:	3A5A2801E0556C96574D8AB5782FC5EAB0BE2AF7003162DA819AC99E0737C8876C0DB7B42BB7C149C4F4D9CFE61D2878FF1945017708F5F7254071F342A6880A
Malicious:	false
Reputation:	low
URL:	https://www.mediafire.com/favicon.ico
Preview:	............ .h...F................... ..........v...@@......(.......(....... ..... ..................................................................................................................................................................................,-.,..,..,..,..,..,L.,......................,..,S.,..,..,..,..,..,..,..,..,..,..........,..,S.,..,..,..,..,..,..,..,..,..,..,..,..........,..,L.,..,..,..,..,..,..,..:..,..,..,..,..,C.,......,..,L.,..,..,..,..r..............[..,..,..,..,..,..,..,..,..,..F........................,..,..,..,C.,..,..,..0..[.............................,..,..,......,..,..,..,..,..,..:................[..,..,..,..............,..,8.,..,..,..,..,..:..,..,..,..,..,L.........,).,..,..,..,..,..,..,..,..,..,..,..,......................,C.,..,..,..,..,..,..,..,..,..,..............................,L.,..,..,..,..,..,S.,...

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41069)
Category:	downloaded
Size (bytes):	41185
Entropy (8bit):	5.258655407348006
Encrypted:	false
SSDEEP:	768:lnMWFZFzBNz1xN2fVhYvsCmgrwwfMD2In1SKJuS+vRt8IpTWdJS4F5IyKnkl5pr8:ln13gflhCvRtxpu/IyKmxq+R2buP1j9M
MD5:	7D0828A8368C2B35939F21FD0B0695D1
SHA1:	22B0AB6E3C50F31301AA816F4FC6C987AFB79731
SHA-256:	18EBC36644E10F87E20812C15E329C1B25848C62CD6CDFE74427CDF8995BC3A9
SHA-512:	B4D60ADE5C3C0E17725A8970D8BA610AE95B2ED2E281665FF5D8B3C1F73C5236FB436A022ACA8C198A99D6AAB0C16E101736EE20DE79E49BD637547918A454E8
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012310301456000/v0/amp-form-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-form",ev:"0.1",l:!0,f:function(t,i){(()=>{var i;function e(){return i\|\|(i=Promise.resolve(void 0))}var s=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.reject=i}))}};function n(t){return new Promise((i=>{i(t())}))}function r(t){return t?Array.prototype.slice.call(t):[]}var{isArray:o}=Array,{hasOwnProperty:c,toString:u}=Object.prototype;function a(t){return"[object Object]"===u.call(t)}function h(t){const i=Object.create(null);return t&&Object.assign(i,t),i}function l(t,i){return c.call(t,i)}function f(t,i,e,s,n,r,o,c,u,a,h){return t}var d="amp:dom-update",m="amp:form-value-change",p="name";function _(t){return(t.ownerDocument\|\|t).defaultView}function b(t){return CSS.escape(t)}function A(t){f(/^[\w-]+$/.test(t))}function P(t,i){return A(i),i=i.toUpperCase(),function(t,e){const s=[];for(let e=t.parentElement;e;e=e.parentElement)e.tagName==i&&s.push(e);return s}(t)}function v(t){var i;null===(i=t.paren

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	325
Entropy (8bit):	6.544362369327944
Encrypted:	false
SSDEEP:	6:6v/lhPfcHsavlXnmLYaYpLfCW+JS1io8DSN2dUdu2Snbz1S1u2FgdLOp:6v/7SzFSYaFk1io8mj/c/16FEg
MD5:	DFA91A5FE2CDD73904C2D05F97A99110
SHA1:	728D3A1A0E5B3D9A4C739CD14E7EF60611AF9B50
SHA-256:	2B0A06678BDABFBBB38BE9A7E1A8823806A71323A48B64E702147851C8908E78
SHA-512:	3017A0D6048FAFE60DB458237059779DBD5AAFC3D3C6B45AE82C37A1F8A6845386FB4E3B0A6AD19CB8DC752F2105CCDE30523EFB8E119CAFBAFA39A3425C16F5
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/fa/img/gray_header_logo.png
Preview:	.PNG........IHDR..............7uQ...TPLTE..........................................................................................tRNS. ....._...?..u=....IDAT(...I..0.DQ!21u.vF..=1q..2.....W.I.j.(.t.R...F.....Y.6".C..M...J.Ye&.,.D...,....\|.....~..i...H..l ...).`.....~......r?...BDEO7\|U..%v....% (F>n.....IEND.B`.

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60370
Entropy (8bit):	5.95115462393583
Encrypted:	false
SSDEEP:	768:MWR9UreQNiJbn+rSW0b1hRpRHR1RIBnpmpL7UXfZqEuZqKqPD:MilWAbRpRHR1RIBnpmpnUXBJJjPD
MD5:	7FC6EF3659924DEA247C18225BB45586
SHA1:	61B63BE99D27A3B95CC13D4F9677BB32C3BF2523
SHA-256:	4E324E35A6412BC5FD973AC24E5FD37DE9BD04BE1CF6DDDDE7A6BE45584FAAAB
SHA-512:	4E1BCA9C4A576DED4EEC9B8185F1A9ED65FB175E42A497F0D24571B78FBA94D54B8B71574B62BB16571395648B64BED72A416D7E09558177F8860DC56754E7DD
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3627263333111943&correlator=4328711359444173&eid=31080117%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&gdpr=0&us_privacy=1---&iu_parts=183096492%2CMediaFire-Zone2&enc_prev_ius=%2F0%2F1&prev_iu_szs=336x280%7C300x250&ifi=2&didk=2784911678&sfv=1-0-40&eri=5&sc=1&cookie_enabled=1&abxe=1&dt=1703780528957&adxs=152&adys=120&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=2&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&vis=1&psz=960x1500&msz=336x-1&fws=0&ohw=0&ga_vid=1411026819.1703780523&ga_sid=1703780529&ga_hid=227450385&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYpuXuicsxSABSAghkEhkKCnB1YmNpZC5vcmcYpeXuicsxSABSAghkEh0KDmVzcC5jcml0ZW8uY29tGKbl7onLMUgAUgIIZBIXCghydGJob3VzZRim5e6JyzFIAFICCGQSFAoFb3BlbngYpuXuicsxSABSAghkEhkKCnVpZGFwaS5jb20YpuXuicsxSABSAghkEhsKDGlkNS1zeW5jLmNvbRim5e6JyzFIAFICCGQ.&cbidsp=CrYBCAESIQoMc2hhcmV0aHJvdWdoEOgHIANSDHNoYXJldGhyb3VnaBIZCghwdWJtYXRpYxDoByADUghwdWJtYXRpYxIZCghtZWRpYW5ldBDoByADUghtZWRpYW5ldBIdCgp0cmlwbGVsaWZ0EOgHIANSCnRyaXBsZWxpZnQYAiIkMDY0ZjRhMWEtMjAwYy00NGFmLTk0ZDctODBiN2I2ODQzZjBlKgQIAyAAMgd2OC4xMC4wQOgHSgA.&nt=1&psd=WzE1LFsyLFtbIi8xODMwOTY0OTIvTWVkaWFGaXJlLVpvbmUyIixbXV1dXSxudWxsLDNd&dlt=1703780518919&idt=5996&prev_scp=dkey_present%3Dfalse%26buildnumber%3D121918%26dladtemplate%3D51%26button_delay%3Ddisabled&adks=3841872593&frm=20
Preview:	{"/183096492/MediaFire-Zone2":["html",0,0,null,0,280,336,0,1,null,null,null,1,[["ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ",1737476530,"/","mediafire.com",1],["UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g",1737476530,"/","mediafire.com",2]],[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CIz9rYrFsoMDFWjN4wcdYE8DvQ",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}h

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2346
Entropy (8bit):	4.765973250102129
Encrypted:	false
SSDEEP:	48:M/IL17z/GS6hD6EJvxi1JU8+mDE8J/QcGbum1q+mgJKxkQDW+mVTY5Y:MwRvGt/6U8FTm1qblyx
MD5:	44FBC166C94A965E001E1688B2870E72
SHA1:	5D8DA348FCD30E403246F836FE3607478FB57504
SHA-256:	096FD12197CD5F5ACFFEA61D3EC1991FB2AF8F0EE8990A8B59E53603B7DEB90B
SHA-512:	F9360B4A06AC4F169AE3EC6B09CA813AD813CC2A2036A6F9925E82FDC52A7492BC868D593EA5222F7D603F52E66CC2FDD43C4D92F66E87A2CDC3D4642B32FC4E
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/techcrunch.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="171.19" height="24" viewBox="0 0 171.19 24"><title>techcrunch</title><path d="M65.78,9.4V20H61.9V9.4H58V6H69.7V9.4Z" transform="translate(-0.81 -1.02)"/><path d="M78.76,15.8H72.6a1.66,1.66,0,0,0,1.78,1.68,5.48,5.48,0,0,0,2.72-.74L78.48,19a8.15,8.15,0,0,1-4.28,1.2c-3.16,0-4.9-2.24-4.9-5.46,0-3.62,2-5.48,4.8-5.48s4.68,1.9,4.68,5.8A6.73,6.73,0,0,1,78.76,15.8ZM74,12c-.82,0-1.28.56-1.4,1.6h3C75.42,12.5,75.06,12,74,12Z" transform="translate(-0.81 -1.02)"/><path d="M85.46,20.24c-3.08,0-4.92-2-4.92-5.5,0-3.22,1.64-5.44,5-5.44a4.4,4.4,0,0,1,4,2.4L87.1,13.58c-.5-.92-.84-1.36-1.62-1.36s-1.38.92-1.38,2.58.5,2.52,1.48,2.52c.68,0,1.16-.38,1.82-1.36l2.28,1.78C88.46,19.54,87.32,20.24,85.46,20.24Z" transform="translate(-0.81 -1.02)"/><path d="M97.74,20v-6c0-1.36-.46-1.72-1.2-1.72s-1.22.36-1.22,1.68v6h-3.6V6.88l3.6-1.44v4.78A4,4,0,0,1,98,9.3c2.3,0,3.4,1.54,3.4,4.3V20Z" transform="translate(-0.81 -1.02)"/><path d="M110,20.24c

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 16-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	295
Entropy (8bit):	6.975307958372994
Encrypted:	false
SSDEEP:	6:6v/lhPLOzLMMDaUMir+kRaAotDyhKmqcw4tGS3Q4wu4Dy+lbp:6v/7DTka4r+kRadA4cw3S3Q4n4Dr
MD5:	D848A2953307AA510BDAD31F5BF84671
SHA1:	E9D6D8DAA9255F99E4E778FF4C4B47806BDB18C1
SHA-256:	7FD59024B6CA83F11F7A3448EC148309A13B705725716DF134F699E60A96EB1B
SHA-512:	338B5E0E93084FE0BE5A46E437AD6E7E3CD600444B26A62CD2908C01409D739FFDCD8C3DF5C4C948BE59C93866B5DEF5C4759636F149377385BC59F7C7684B3D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............kFI.....IDAT8.c8.....f.t.W(.tv....-;.....?'..Y_:X..n.s..a....X.....e.I...4...S.E......,.>...3oh`1.<L.&g..9 -..a.9`.X.,=.G..a..,D.W..Tv......-..rq;.d.aA..bt}. ....Y.r\......1.Q...)..f ....q%:.-.....Z..u...o.>...,1...qZ.K..8...^..Z ..J...2..^.......IEND.B`.

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17030), with no line terminators
Category:	downloaded
Size (bytes):	17030
Entropy (8bit):	5.563208504937851
Encrypted:	false
SSDEEP:	384:X9Jm7iuD3pnPy665jct3CwUxRSNOHs/fZJxtH8/gVtER:tJe3D1PKPxtMJJDc4Vt6
MD5:	AD5CE37F5CBDCC7C085C8D22452AF1DA
SHA1:	16DAE831208B6D9EBC9FCF42BB60348FA855F5FB
SHA-256:	487524122A6142E66A5F22F30CD0352DC3A3218E4FF77A126C8D0E28C2A5B586
SHA-512:	97BF9E28F3C76B300B18D50E12D3CEF504195A2EE6C3A554B4AACABC93FA61DEB107B1801DA897C687ACC092087E92B42896A2D81C71CEC89DDE2C679BDF167E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/SHUkEiphQuZqXyLzDNA1LcOjIY5P93oSbI0OKMKltYY.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var M=this\|\|self,C=function(U){return U},c=function(U,y){if(y=(U=M.trustedTypes,null),!U\|\|!U.createPolicy)return y;try{y=U.createPolicy("bg",{createHTML:C,createScript:C,createScriptURL:C})}catch(u){M.console&&M.console.error(u.message)}return y};(0,eval)(function(U,y){return(y=c())&&1===U.eval(y.createScript("1"))?function(u){return y.createScript(u)}:function(u){return""+u}}(M)(Array(7824Math.random()\|0).join("\n")+'(function(){var UV=function(y,U,M,C){try{C=y[((U\|0)+2)%3],y[U]=(y[U]\|0)-(y[((U\|0)+1)%3]\|0)-(C\|0)^(1==U?C<<M:C>>>M)}catch(B){throw B;}},ub=function(y,U,M,C,B,k){if(!y.C){y.Z++;try{for(k=(M=(B=void 0,y.S),0);--U;)try{if((C=void 0,y).o)B=yJ(y.o,y);else{if((k=T(100,y),k)>=M)break;B=(C=(n(y,395,k),l(y)),T(C,y))}I(y,false,(B&&B[q]&2048?B(y,U):G(0,[D,21,C],y),false),U)}catch(u){T(419,y)?G(22,u,y):n(y,419,u)}if(!U){if(y.QO){(y.Z--,ub)(y,406807620597);return}G(0,[D,33],y)}}catch(

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1266
Entropy (8bit):	7.712506358726459
Encrypted:	false
SSDEEP:	24:cAOaho1Cw80NmE9xBw+DXboOUSM6yQK05r9zQ5Op0ghAotav8R6D:cAvC0f0wE9xBw+voO/9yQKs10ghAhaE
MD5:	2130332BDDD4C6626CCE106314AC6984
SHA1:	FE79DBC46D35C5E786FE2487AADD002C3192F47C
SHA-256:	6EB6FC498653776659B11D9F43364E84F96791FF7DC2DADA75ED6EB6702F97B2
SHA-512:	D694C1783564F4703972FC54086A6DD5AED898794978E12202A144532957E39C165A8269A3350788D7CC00CDD85A28C0FB127352DF843BE137DC908BFBE2101E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/17213881491327483599?w=100&h=100&tw=1&q=75
Preview:	.PNG........IHDR...d...d.....p.T....IDATx...[.UU.....$B.X.(.#.D.?.U.0zI.........8FQ.0.I{..:$...J(#H.#i...2L.../=i.y.{..0.{..{.}....y..Z{...5..: """""""""""""""""""""""""..UTCfv.0....Q`.......0.\.x#.>w?.....W.w.g.1E...ZPc.K..;m........=.e?.<.a,.m.G.>.....:..ck.......M.G.lI.^...g....v.Y-.sg..?..";.h...f...x...f...x.z.C..kf..u)l3..J.w.K.C...J.....ZrL..E...@..o\......[.+.._kfo..?)b.....Z&....\.f`....@;.......1';..3>3...9.T.....;.O.jU.!.......@.0......./..~I..e...Z.5m..~.x:P....w?../...$....".N....w.1P........n.M.S.2......}..>.x..=RV.=.!./......Q......X'I...>.'.2/"........pcL...M-4..D.f....XWV......j.3..@..).H?..!....i....ks..PV..7..Q...0..;..p.9..M......x...!.C.4./$..%M1i........F.D.5N.. ..FH^...e.5..@.c..F..t.<.Z.u....\i........"......%.3..c.\.M......}OR.NNtH..ZB...~j.Z...X.n...j{...+..`...........Y.r.3......E..@...p....g..s.{.$W..../.J...u....'...B..3......p..3..NTj..b....5[I;.K..m.....YV..MYwd\|f..B.J..`fK.O........R...5.sY7.).\3..1.#

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuBW_jNMLfyGI6S3lpAY39ZI-fbiQD9sjzTNp6_qJWh4Ej8edx8OeyOeBNzz1oUBMh1rPnESKU8DqqVPp8_p0b65Zvq6JIW8HMSgffdn2HYc3AQ7Ez-zfpX2GRX96yT-y9kECNG1hcDC8_8ZhplqRq8uh50&sai=AMfl-YTiL00W3MqILN79PGSTt6FMGRoGQaSu_ZzUyHBq8oEBBzz9eid7vVmxfMXWOig3G_wCjaB-pcRmVlIsZQLamvWoE7DZ-86JvjH2iKQRMpfIyJutsdkLLGrr2xOk&sig=Cg0ArKJSzH7_-yTs-mErEAE&cid=CAQSPAAvHhf_qyhKj7hgXutXvvwYYcBbdE2rY9SrJXV4LzQ2seq1zM5d-1ZwTbAXfVeX3y4kvDUutd7CRXSi2RgB&id=ampim&o=152,420&d=336,280&ss=1280,1024&bs=1280,907&mcvt=1004&mtos=0,0,1004,1004,1004&tos=0,0,1004,0,0&tfs=278&tls=1282&g=100&h=100&tt=1282&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=7rkJAhPCWXbw9Lq5dZxc6TvN&source_user_id=ua-c3022ff3-a52d-3262-99be-6a51a23046c2
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	911
Entropy (8bit):	4.7650384722740355
Encrypted:	false
SSDEEP:	12:t4po/yXtFXhZVPUOXRgefut4PJ43O4H413dBYDx7wcZFz0NF0NmrvuM/:t4po/yzVchiPJ43O4H413dODx74GM/
MD5:	D1865B5D4E84A35E373E17229C4D0A67
SHA1:	CE67D81580C7A96A86282A04AB729EE26E6F741D
SHA-256:	39D367424D8A38A58613D6D50D284377F37EFCC65E8FB57B742EA433571FF65C
SHA-512:	2A9827BC03AEE8D15F90767E9EBBBBF68E741705C5EC1A8C40BBC93EFD868BACCD8A651A8C25D213B965C76BAB9B83AD5EA049F35244D2BA4BB019385B642CCE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>features-svg ready</title><g id="ab13"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,2.08V74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,2.4,0,0,1-2.4,0L34,76.39a2.41,2.41,0,0,1-1.2-2.08V45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3A2.4,2.4,0,0,1,60,29m0-5a7.4,7.4,0,0,0-3.7,1L31.51,39.28a7.4,7.4,0,0,0-3.7,6.41V74.31a7.4,7.4,0,0,0,3.7,6.41L56.3,95a7.4,7.4,0,0,0,7.4,0L88.49,80.72a7.4,7.4,0,0,0,3.7-6.41V45.69a7.4,7.4,0,0,0-3.7-6.41L63.7,25A7.4,7.4,0,0,0,60,24Z"/><path class="cls-1" d="M72.35,53.35l-7.69-7.7A2.23,2.23,0,0,0,63.08,45H49.23A2.23,2.23,0,0,0,47,47.23V72.77A2.23,2.23,0,0,0,49.23,75H61V73H58V69h3V67H58V63h3V61H58V60h4v4H59v2h3v4H59v2h3v3h8.77A2.23,2.23,0,0,0,73,72.77V54.92A2.23,2.23,0,0,0,72.35,53.35ZM63,55V47l8,8Z"/></g></svg>

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65010)
Category:	downloaded
Size (bytes):	200642
Entropy (8bit):	5.250259947825165
Encrypted:	false
SSDEEP:	3072:i1BDOwHS4hA/4V2K73J1dban6MXC5c4uGWdx:aBDOwHS4hA/4V1JnG6QC5bcx
MD5:	CD37A35902975F02C1A4E5624C30EEF9
SHA1:	97160ED87A5217305060FA31FED20A6E64F61302
SHA-256:	C6077711CE3174050CCEBE6559EB5F0E251942C2CAD21900D1C3EF316065565B
SHA-512:	E664D373D3959367590EB1A1FADA76899B9E34B14ABB9A3714AE8A4E0B26B42A9F51A31B9B23631B03A810C4C673C355374552952E523E7624EACF020D4E9A44
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012310301456000/amp4ads-v0.mjs
Preview:	self.AMP_CONFIG={"v":"012310301456000","type":"production","allow-doc-opt-in":["amp-next-page"],"allow-url-opt-in":[],"canary":0,"a4aProfilingRate":0.01,"doubleclickSraExp":0.01,"doubleclickSraReportExcludedBlock":0.1,"flexAdSlots":0.05,"flexible-bitrate":0.1,"ios-fixed-no-transfer":0,"story-ad-placements":0.01,"story-disable-animations-first-page":1,"story-load-inactive-outside-viewport":1,"amp-sticky-ad-to-amp-ad-v4":0,"story-video-cache-apply-audio":0,"amp-story-subscriptions":1,"esm":1};/AMP_CONFIG/;.(()=>{var t,i=class{constructor(){this.G=new e}abort(){if(!this.G.K&&(this.G.K=!0,this.G.Y)){const t={"type":"abort","bubbles":!1,"cancelable":!1,"target":this.G,"currentTarget":this.G};this.G.Y(t)}}get signal(){return this.G}},e=class{constructor(){this.K=!1,this.Y=null}get aborted(){return this.K}get onabort(){return this.Y}set onabort(t){this.Y=t}};function s(){return t\|\|(t=Promise.resolve(void 0))}var n=class{constructor(){this.promise=new Promise(((t,i)=>{this.resolve=t,this.rej

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4864
Entropy (8bit):	4.7995371960169155
Encrypted:	false
SSDEEP:	96:WH6k2MDRF81EHMGWw7AKh10LYiJgoc3bWGxH47CbadRi:+J2qRFxMlw1mLxO3bWl7CbadRi
MD5:	A68EB80F9FF04457F27E69FD6FAA2190
SHA1:	3D12633276DF14633A6B97CC2FA752EF448C5CC6
SHA-256:	23D0709D0D95C56DA4CC928592F25399E50529D77195CCF90F1D9A52F39B774E
SHA-512:	EA5E8DA60F5F7F0213C61892BC44B3D152136E55487C9E8FC787D8B31D9A8EB58EA1071B5B69532E2BED14E07FBCF12B44F660F4617BA9666B66FFD3AA870738
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/icons/svg_light/social_icons_sprite.svg
Preview:	<svg.xmlns="http://www.w3.org/2000/svg".xmlns:xlink="http://www.w3.org/1999/xlink".width="200".height="24">.. Define SVGs -->. <defs>. facebook -->. <symbol id="facebook" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M17,2V2H17V6H15C14.31,6 14,6.81 14,7.5V10H14L17,10V14H14V22H10V14H7V10H10V6A4,4 0 0,1 14,2H17Z" />. </symbol>.. twitter -->. <symbol id="twitter" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M22.46,6C21.69,6.35 20.86,6.58 20,6.69C20.88,6.16 21.56,5.32 21.88,4.31C21.05,4.81 20.13,5.16 19.16,5.36C18.37,4.5 17.26,4 16,4C13.65,4 11.73,5.92 11.73,8.29C11.73,8.63 11.77,8.96 11.84,9.27C8.28,9.09 5.11,7.38 3,4.79C2.63,5.42 2.42,6.16 2.42,6.94C2.42,8.43 3.17,9.75 4.33,10.5C3.62,10.5 2.96,10.3 2.38,10C2.38,10 2.38,10 2.38,10.03C2.38,12.11 3.86,13.85 5.82,14.24C5.46,14.34 5.08,14.39 4.69,14.39C4.42,14.39 4.15,14.36 3.89,14.31C4.43,16 6,17.26 7.89,17.29C6.43,18.45 4

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 17, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	267
Entropy (8bit):	5.629769605350647
Encrypted:	false
SSDEEP:	6:6v/lhP9ijOSf/KzeJshw2XwxD232lGnslFiaZaPWUysup:6v/70ixNwyoD2avieaPWl
MD5:	40D76E2F4035820A4725A3673D38B573
SHA1:	3293E90AD3C12689A1E9632FA42E4342F0541836
SHA-256:	CA867E759772EEEAA693CF49D0D9436BC971835735B769C811364061C0FEF440
SHA-512:	5D46D8089E1A15F1F3C0C7C7E84AB87E860301D5F965E6F34C117AF4BB1CC7ABEA09E897B9988D09D429121117F429C820CC628ACBE0394928655D2FAC036CB7
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/fa/img/gear-list-item.png
Preview:	.PNG........IHDR..............Fg....3PLTE.....................................................F.....tRNS._..O.. .?...0t.i...wIDAT..m.[.. .Ey.i.._m..dM.C....S'>..$.....\..{0...`.......B..6.F....A...4.6.b.,{....v_......?.n..`..c......T....'....7.F....IEND.B`.

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 728 x 90, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5776
Entropy (8bit):	7.923247326921248
Encrypted:	false
SSDEEP:	96:GE5xPgTfKN7zuJI6OnYFXG7ZDw5UV96F7DO+xuoM5MenvALYwT+Ojcdn0kLZtDZQ:GE5RFNHJWdAEq+ooMVvqDcdn0kLS
MD5:	51E10C7963D5446FAADE4B507392DDBC
SHA1:	924B6A5EE61028FE4309078B8174240F52028A38
SHA-256:	0A22333FF99E27FDE38DE534DDFB72136D47C4CB8C930A705B99D24A9BBE1A99
SHA-512:	F1F5B286C546B0E535DD020D61A8B7F34F0C1EABCD305AB976707E68BD6BCBAF6BA8626ED5F77B4D2A59B74E39B5E634464BF9280CC52AAA8BE386FEA27FF758
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/15108499617781358727?sqp=4sqPyQQrQikqJwhfEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBfcAJ4AcUBLbKdPg&rs=AOga4qlOl3VwkxYnCnNj-UeMeU12EVwWDA
Preview:	.PNG........IHDR.......Z............,PLTE...333...www................f$..........DDD......D.P./...."""UUUfff...................D..P......$........4.A...c.m$.2.....s.\|....p3..........___...S.^???G.Q....zA....m....\|...///.^.....V........$.....d.ooo.........s....OOO......."..w.$.0....M........S..5..c......'.9..C.v.}....a..............IDATx..w{...Ip...9$u.D....r.{...M.$[.g..~...;\....T.\b.?l..A...w.....3f.1c..}z....1f.<.d...~...o....'.1X.{{......S.../}k...........A.^.o.3...w.....N...~..".].M.Z.Wk.l...q=.K.\|.`.W.Oj..6.;#..v.[....B.C..m...kH...../sS.Fg.......7.......>...0><xQ.0....L.c`..M.{....=..`v6.n.;........o.a..d...A..BI-.m.._.......9.c[.5...A.....Fk8...nt.....@.m...j..d.....{.B.n..w....v........`G.\.8.[..y.Go.K\.M?.l...............$?.;.p.j.)`..Z......aC[.5..p..-..qJ.o./.....5qm....@..O.....'qo%.]......fn..........2....cp... K......=#....Vcp.....T.../.....{..&.../jCG..4-.l.N..Iv-`{....;......n.>.....y...E.l.sm....`.Z/..{.qc.

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:on:on
MD5:	F1B68D66337A81CFA0D2076171CBA2A8
SHA1:	28F6EDBB2A32E83291265B6A8B9BD3F31CF965C2
SHA-256:	DE6B9D5B9A7C9E99A9421D284164B52C8A53000380D39E9E52117F4C3DA4CAF9
SHA-512:	67106FF48257D08F7657FB04C6158DC271393D0E449411717A0B2EA9EC6C61ED9E2C74AE9F5ECC608F3EF4F52BBAF8CB8604754B93F3D209A4803EADFCC47242
Malicious:	false
Reputation:	low
Preview:	BAD

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:on:on
MD5:	F1B68D66337A81CFA0D2076171CBA2A8
SHA1:	28F6EDBB2A32E83291265B6A8B9BD3F31CF965C2
SHA-256:	DE6B9D5B9A7C9E99A9421D284164B52C8A53000380D39E9E52117F4C3DA4CAF9
SHA-512:	67106FF48257D08F7657FB04C6158DC271393D0E449411717A0B2EA9EC6C61ED9E2C74AE9F5ECC608F3EF4F52BBAF8CB8604754B93F3D209A4803EADFCC47242
Malicious:	false
Reputation:	low
Preview:	BAD

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/ct/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=&_test=ZY2guwAKVuyKYABH
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=540245193&val=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=NWUyMjFiMWJhMmU0YmYxMTZjNTZhZWNkYWY4NzE2ZWU&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 731 x 458, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	83450
Entropy (8bit):	7.9483572334694985
Encrypted:	false
SSDEEP:	1536:IHnvfM++fB6W7MTkvHvd2FfTCKw8iUX6lPeDLS09QKWbR41YGT1W4daEn4C1EfLU:cXtQYTDBGaJ68DL8KORnG0KT42EUGsB
MD5:	5CD8CF4130AC425E5B9AC939EA935F52
SHA1:	CD016832828F1C7CC01FA4CFBE65FC8ABA016C8C
SHA-256:	21BA01A82A1687C4AEC593F4E44A8413C845FFEC206F88C0F293D4A0AFB40516
SHA-512:	6D2279FD876D6EC75FDC917C5BAE496534F3C0896A3EFB36A68D275CC6A062512300EE6C18422FB7422970A179392B2FA14B23A028B4836B301CC536E5C000A0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............w9....PLTE......................................Lb...............v.......................).......... /H........................................}...........\|.......%7L............)s..../..w.............."f.8........3..f.............&.....A..2....>.....=V...;..=..N.6N.........E.}.X(Ea.....-F.H.5R.I...>j.`..M....KZcfi....%=....Y...6a.'..s$>Y.....Z....Xe...v.0.g..Q..p..y.....I.......F..Y.k.I.`.......T....pqq.x..Hr..y{\|DED.H.TVV.E.....l..G..\|..........P....$.....!"!&g.542....b.u7..`..^n.r..=..e.....6}.q........T..F\....W..h..`.'S..Xu.b....?..@\|..."E..Le.y..ID....K.....C.?)Y....g\|=..p*og..i..X.]-KgC...r.M.......\.jt..D.a+..{uy........M...p....+.......h.....w..v........b ....4".uO........unR<.<..t:...Fr..R.T".......Q..f.p..........o..n.S...B.IDATx..K..0.E.<.q.S......C.7...X...X.3.L......H....-K-.(x.w.v..\|}XS.j......4.....EJ..(.{/.......d.}.Y......&_...G#..IK4..........YJ..Y&...R.ze#.a}.I...i#u[W..o.....lZ.,.Nr.$..R

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=kzFyzzqXEqukMDumpVLB6Eq3&source_user_id=212398610672017
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://api.mywavehome.net/cookie/set?tid=va6g28ar
Preview:	OK

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=281/tp=ANXS/tpid=3643551440069563451/gdpr=0/rand=531851505
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	51223
Entropy (8bit):	3.7811623450943674
Encrypted:	false
SSDEEP:	1536:v3/iI2FvBs03RLwo+O3Y1NKMuVtlTyYKkuUU:ZN
MD5:	8A6BB43720E9C07A6E5B74DCC7D78158
SHA1:	1AE8CD3E377442ED336B7DF216370E91DC5D1360
SHA-256:	05CFE92D9794A54258A19BFEC7AE0FAA73F61B66416983136594B4F95BB114DD
SHA-512:	6C56ADDB788C19CFE36D7F745721E61782082E93844964C9992C30E7F3F52D85C59EED5FECF9FD5856166D0219FB96B134CDD4A776057842C7D8BA25630593E1
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/download/additional_content/continent-na.svg
Preview:	<svg id="highlight_continents" data-name="highlight continents" xmlns="http://www.w3.org/2000/svg" width="402" height="210" viewBox="0 0 402 210">. <defs>. <style>. .cls-1 {. fill: #fc8d59;. }. </style>. </defs>. <title>continent-na</title>. <g id="north_america" data-name="north america">. <path id="path2407" class="cls-1" d="M164.789,5.606c-1.256.068-3.325.17-4.58.221a26.178,26.178,0,0,0-2.8.22,4.476,4.476,0,0,1-.933.068l-.424-.051.424.356c.339.272.373.34.135.357a.546.546,0,0,1-.407-.187.386.386,0,0,0-.424-.1.6.6,0,0,1-.56-.153c-.288-.271-.508-.322-.356-.067.068.1-.152.169-.509.169-.509,0-.61.051-.526.272s.034.254-.271.152c-.95-.271-1.561-.271-1.781.017-.2.289-.221.289-.221-.017,0-.288-.135-.3-1.916-.2-1.052.068-2.409.152-3,.2-.611.051-1,.051-.882-.017.407-.2.187-.407-.441-.407a1.48,1.48,0,0,1-.848-.2c-.136-.136-1.866-.2-6.005-.221-5.92-.034-7.837.068-9.041.475a2.408,2.408,0,0,1-1.391.085,3.79,3.79,0,0,0-1.629.034,18.54,18.54,0,0,1-2.256.254c-1.951.1-3.1

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10481
Entropy (8bit):	4.807120537526485
Encrypted:	false
SSDEEP:	192:56yqRYpOel347F2SxTXs61h0HeMx6cRbYn1iLXw:8yiEMBlXNhQRbYgE
MD5:	A89BEA62667857FCF2D7018BDB0531DC
SHA1:	FB899A8DAC5693634BD66665BB60324A051F29A3
SHA-256:	3B01AE2DB36800BFD014D423698E95BE7D22C4160088FA93EB812C2AAADAC4E3
SHA-512:	48384B19BF2721DBFEC6A85E5C05C5039A76F1B44D1EFB6A4A1CC9113545CE3C217ADD498A33E1AFB79768D839DFE9131E03448FB4A7FAF4FE3401C954374B59
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/pro_driver.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="446" height="283" viewBox="0 0 446 283"><defs><style>.cls-1{fill:#f9d97e;}.cls-2{fill:#e8eaec;}.cls-3{fill:#fff;}.cls-4{fill:#eff0f1;}.cls-5{fill:#868a8d;}.cls-6{fill:#e3e4e5;}.cls-7{fill:#f0f1f1;}.cls-8{fill:#bebebf;}.cls-9{fill:#d1d2d2;}.cls-10{fill:#dbdcdc;}.cls-11{fill:#ffdac7;}.cls-12{fill:#3e4349;}.cls-13{fill:#5a9eec;}.cls-14{fill:#888d9c;}.cls-15{fill:#e8e9ec;}</style></defs><title>unicorn pro illustration - svg ready</title><g id="bg"><circle class="cls-1" cx="115" cy="42" r="23"/><path class="cls-2" d="M314,324v13.19h2V326h48v18.3h2V324Z" transform="translate(-2 -107)"/><path class="cls-3" d="M266.9,121a12.43,12.43,0,0,0-12.4-14h-27a12.44,12.44,0,0,0-12.4,14h-9.6a12.5,12.5,0,0,0,0,25h61a12.49,12.49,0,0,0,.4-25Z" transform="translate(-2 -107)"/><path class="cls-3" d="M342.9,211a12.43,12.43,0,0,0-12.4-14h-27a12.44,12.44,0,0,0-12.4,14h-9.6a12.5,12.5,0,0,0,0,25h61a12.49,12.49,0,0,0,.4-25Z" transform="translate(-2 -107)"/><path class=

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5940
Entropy (8bit):	4.519657243050259
Encrypted:	false
SSDEEP:	96:FSPP0yTGuBVW8/38nQ/hNXI8Cdos1dblgiCAPP8WAyV7:oH3Wo8Q/48qD5qTWl
MD5:	E30A8D8BFBF0B1C0DB84DE7D542F8DF7
SHA1:	726797F57B2B055DD1C3DA961ACA40C75C8A3A3D
SHA-256:	C849FD639E438C9B707A6E5B5EF5B7B84A5F9BDDC091652A4CABDC03B7A0EECC
SHA-512:	05431F5FC11E81EFF98C7B60C0E788DC49A4A57F93286720C766E2F5DED997DC59DB73212850A185F2FA98ABFBD33248259BA799CB96C1BF01913FF0B59C0F6E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#ffdb80;}.cls-3{fill:#ffdac7;}.cls-4{fill:#e2a688;}.cls-5{fill:#b3ddff;}.cls-6{fill:#cce7ff;}.cls-7{fill:#b2b7c4;}.cls-8{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab4"><g id="color"><circle id="bg" class="cls-1" cx="95" cy="95" r="94"/><g id="body"><path class="cls-2" d="M134.3,113H124.11a14.53,14.53,0,0,0-3-13.14l-.43-.5a5,5,0,0,1,7.58-6.52l.43.49A24.55,24.55,0,0,1,134.3,113Z"/></g><circle id="head" class="cls-3" cx="118.62" cy="85.84" r="9" transform="translate(2.62 175.2) rotate(-73.5)"/><path id="hat" class="cls-4" d="M103.38,84.46l4.11-.14a49.57,49.57,0,0,0,22-6l3.39-1.84-8.91-1.6-2.85-3.41a4.15,4.15,0,0,0-4.42-1.31l-5.44,1.68a3.64,3.64,0,0,0-2.54,3l-.46,3.7Z"/><line id="iphone_8" data-name="iphone 8" class="cls-1" x1="95.56" y1="95.33" x2="91.65" y2="80.01"/><path id="arm" class="cls-2" d="M127.12,102.53A24.72

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4230
Entropy (8bit):	4.197667486476688
Encrypted:	false
SSDEEP:	48:AVG39o+zjQ/m0tKBmaTrq1hJa8wfVFdosFZkWdbHHle1h5yCC1PaUQDI+H24MwS1:W+nQ/fNXI8Cdos1dblgiCAPP8WAyVn
MD5:	B58FFE96F6851CEA6B0D0868CADC5D36
SHA1:	E05B4D488F699D835CB1F58FAB43BADEA523930B
SHA-256:	EFEA616F7C43710A2352033E402A704D93FD70428E2E2C7EA5CA3AF6FCEA6508
SHA-512:	27E765FD7B31B72FC89EA30DAF7DF7C9B1FBB2EA1BE33D661F2E21242686E1F733FCFBFDE609D3B0BFD4FD62E2A65B846B7EA9652CEE8DE86CABFFB39CBB6F3B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#cce7ff;}.cls-3{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab4"><g id="outlines"><circle id="bg" class="cls-1" cx="95" cy="95" r="94"/><rect class="cls-2" x="27" y="82" width="2" height="54"/><path class="cls-3" d="M82,17a26,26,0,0,0-.15,52l8.56,6.58,4.22-9.85A26,26,0,0,0,82,17ZM93.38,64.14l-.31.17-3.48,8.12L82.53,67H82a24,24,0,1,1,11.38-2.86Z"/><path class="cls-3" d="M89,28H70V52h5v5H94V33H89ZM72,50V30H87V50H72ZM92,35V55H77V52H89V35Z"/><path class="cls-3" d="M95,1a94,94,0,1,0,94,94A94,94,0,0,0,95,1Zm0,186a92.13,92.13,0,0,1-83.77-54,16,16,0,0,1,7,1.87,18,18,0,0,0,8.88,2.1A18,18,0,0,0,36,134.9a16.12,16.12,0,0,1,8-1.9,16.12,16.12,0,0,1,8,1.9,18,18,0,0,0,8.88,2.1,18,18,0,0,0,8.88-2.1,20.4,20.4,0,0,1,3.28-1.32h0c.27-.08.57-.15.87-.21l.2,0,.84-.14.22,0a20.39,20.39,0,0,1,2.59-.15,16.12,16.12,0,0,1,8,1.9,19.87,19.87,0,0,0,1

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1507), with no line terminators
Category:	downloaded
Size (bytes):	1507
Entropy (8bit):	5.602209370127989
Encrypted:	false
SSDEEP:	24:CpJHvaVgdQ1jOSCeVgdvYPmAOVgdQ1CrVgd0MdgX0BlsQeHDkoMTaMSMqB0CN1hL:CzEgd8jOSCAgdvPAwgd88gdFa0BlsQeB
MD5:	38BBD3F0EE6F0D91E9696AF2A351421B
SHA1:	C5C04F29C1FC71ED15B4133438ECAF64F7ACADC1
SHA-256:	B547F15F207F9E81669CE03DD30B134412F3DC6E8B56949C441B3C2B13E0FB4F
SHA-512:	5329F7D9C840D06CBEDCF9DA4522FADD36D1C40F0E0142ED1B69F0F4A8E83F125E2869CB4639C968333E4D013F347F274D80239F64D44EC7C90A03FCF0E40D08
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10086349&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:42E5D102-FCC7-4079-AEB2-CAED94F1F642.');PubMatic.loadAsyncIframePixel('https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}');PubMatic.loadAsyncIframePixel('https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync.1rx.io/usersync2/pubm

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	315
Entropy (8bit):	5.377718757501969
Encrypted:	false
SSDEEP:	6:TMVBd/gEO58FiLUECc4sZXUg9BXSBU/9mc4slZKYnic4soSIXdhC/O4LZNHwY:TMHdjIMu5E4Bn/KY8XdU/P1z
MD5:	34BD6069C9F08BB444C86B8D099A000E
SHA1:	F78F72953D6F9F639D26F4E38C1D822B52E86763
SHA-256:	82B94716473AA225E715E117802145C5D2D725AA1BA9D476D61A5D3DA16A8C26
SHA-512:	5762D0CE880F5150A5ADB0395F3EB2A2F177091FA3F033E768CAB09D7E8D149F6BD98CF081F3A84EC63B92491BBE580977E4C784972157AEE94282824B29930A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24"><path d="M7,10L12,15L17,10H7Z" /></svg>

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.css?s=1&k=rgb4vnm&ht=tk&f=1499.1506.47864.47865.47868.47869&a=135778284&app=typekit&e=css
Preview:	/**/.

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://api.wavebrowserbase.com/cookie/set?tid=va6g28ar
Preview:	OK

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnJmCw5JV5fzxIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 850 x 515, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	87344
Entropy (8bit):	7.956290280698388
Encrypted:	false
SSDEEP:	1536:JggWDsRtCwXlEgcwmxriZ+Uf012f4z+A4EfD4BWcYBgIsychmsEihFx11N:JgeCw6gixriwUsIf4DfD+YFsRhmsEihV
MD5:	6494EBF907631E25CDF6C53ACA2B2617
SHA1:	21D76A3273C7C7C62DEFF54E0ADA85653B1A24AC
SHA-256:	3483E5B84A7A1B5B1F71275D1C405466D339F3B914329C52971AC805A741259C
SHA-512:	7BFC2DDA55C703254852B5283DF5F2FFF384C9F5CCA313DA9A4FCAFC394D9DC0084315B207CAC201267EBEC99ABFCAF6847CEFE7B6A720C68284305C60CA8603
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R.........9]......PLTE..................................................XWZ}\|............................. ............Nc..................................................t........~.......& 2L.'.}........XX_]]e....s....ccj...%&,......QRYJKQ...-.4.....................35<...............;<B.......BDJ..........{....ijp.7....m...$C^.1\|.>.wx~..............u.qrv.C........P.................<S.D.."^.L.......1..K..\..W..JY....U.Jw.-C.2H....c..~..>..@i....#x.K.1...}..n..(;.n....:{.u....2u.....a.......Wdj./...m.M.U...^.P..]t>...^..F.T.")...A.r:.+W..h....&c..Ka.c.........9U.%H.................c'b.Wq..(.j...8.j....F.B....T......E.....ly..e....EXf:...ys.RHq..Nkx..p...S...4......a-.._2.lH.^...Z$.......G........f...zs.C..}...p!...G....c..Xq.}.....{R.y.......c&....tRNS..).YS@#q.}......^....Q.IDATx..Mo.@..AB....H.\|....N .......B.8p....".w.3......@.g?fvv.ww.6I.?...qs>Z..j.)..Z..m...uu.n..g=.v.u\|.XG.4;.c,!(g..l3+.s. j.V.s...o.../#.

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 731 x 458, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	97578
Entropy (8bit):	7.964941817393392
Encrypted:	false
SSDEEP:	1536:2xcbDOGcrDi+r5UP0iddcsXm7yCzHm/8wexWJKif0nHRoXEgQ5fTBKMxTOZYOWrs:2xcuNP7VUszwCj88viExtgQFs6AYJ1m
MD5:	3328F78EF3C4B0D395C172FF7714FDBE
SHA1:	38229049EAFDE9F07E466DEF3B71DC81D6BCAF75
SHA-256:	63D946F7492A0CB783794291D8A605BF4AC4197606061EBF3EFA4A10C2F83BE1
SHA-512:	1AEA9979E2301CC342CC1204BFB78B0B10CF63E88AA3F5CFCB7438468E5B93CD6886026485B558E9EB5E3870A7476ECE0B5AADC8CCE08394088B93AFE9DB510C
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/lp/global/img/start_menu_w10_dark_theme.png
Preview:	.PNG........IHDR...............w9....PLTE...&-8."-.%/!4.'1)1:. . +%+4,4=17@..,..(......4<D.X...2.`...8Qf..... H.j.%4N.s...$.,".O..."../..><BJ..C.G......U9>G +:&0.>..{...N...."Q.. ."B../..%..(.5...f.....q.\|...= .$2)4A..I$0>.(8..{.......]..TAFL./...K.(Y..^&4G...R....7.$.....,..E.....0H-Lg)=R..<..........$.. ..8..P.....1......../Q....,..-.+Fa.'...U..\|.<...............J...*AZ.C..^.....A..'..!.....4.H......0..k..O.{}....CKTNPT....,9404.......&..........ikmPW`...Nc..h..&.....;......1`dj.5b......Wm.....A......>.%.....tst.r..\^a....@.'...[.mt\|....9...........N.J].,!...7E[....8tJ,-..B.........\\UCVv6..Xi....3M...{...- ..!n\|..c..SI.^..\|....X.@.....y.........sK...5=tp......ueE9.......qwwT...Y.W.@G.^2..2J...U.......UB(`.....J....rf.KK.s...t.=.rO....l..\|.\|1..y...h.v.........Y..>.y.U...9..".(.%...y.IDATx....A...j@H..2.vs.M..7..{.\|...7..DA...>...t.nO......I...CM..z.d.p.^?D.B}.b...FZ.....K.[.'g...V.....%...^.3=e...S.k..,H...W.x..?.6..\..j[...~.^....5l.h...${..G.GW.G....!Y

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10832/tp=TRUP/tpid=f8f1b6bf15ba02282f17d3498a0e1f55
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=1&e=0.32011031994343964
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	downloaded
Size (bytes):	3093
Entropy (8bit):	5.587537818765795
Encrypted:	false
SSDEEP:	48:jh+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklw0DuExjGx:l+5AQHAray48f5JMYHIq0Du9
MD5:	BBAFD6A0CD25916B37AB2FACC0302103
SHA1:	2B04EE1F64668A2DE9E395B4AA1C21CA04BA3939
SHA-256:	26EB4F50F8C762DE031B39B824EDABE15F74727D9AC1779ECCC8B8F94B24E38D
SHA-512:	29136CEA9472E85EDD35A11E7BDBB1BBC78BAA719FB9B430AEDDF0C4F05E8269D25EFE5A5D7029E791694DFBF7F325F6DB6411AE63473376E285AD454EB234F4
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js
Preview:	/1703779555,,JIT Construction: v1010603338,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	64817
Entropy (8bit):	5.916147178014113
Encrypted:	false
SSDEEP:	768:BWY9UreQNzFgOECDMKgazKmM1P32EklWkSlkvhzkabdw1woQNn74NwavrLw:B7TNPLKzRqyoQt4a8w
MD5:	29FBEDA637B59394C7DD101494FFC580
SHA1:	578A2F6D460D7D051C408560FBDADA70BCC3DE8D
SHA-256:	970F9D12830C5DAB1CBB4A9D955159BC89237ACAD373997B9675B6977C8CC4C8
SHA-512:	98A78B03EB6C14834090B0DC517134F8D1D2F37293730C62E1AB03603F6724249E35065328C914459D52CCA199C1D3978CF089DF60C8A08F86AF75C16A452159
Malicious:	false
Reputation:	low
Preview:	{"/183096492/MediaFire-Zone1":["html",0,0,null,0,90,728,0,1,null,null,null,1,null,[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,0,null,null,null,null,null,null,null,"CMevop7FsoMDFe8XswAdsacCsw",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-single

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22367), with no line terminators
Category:	downloaded
Size (bytes):	22367
Entropy (8bit):	5.542626302580642
Encrypted:	false
SSDEEP:	384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG
MD5:	B0B46B807EEE39AF0AAD8F5FEFC9B3A2
SHA1:	0FB04F15599BC0844063A6AB776C86E73CB9FBFC
SHA-256:	71CA2652E2B3FFD3C0EC966958604714CE6C7AF01D961B44ADC438518EB58CB3
SHA-512:	4EEC49904A5480940124A1C1B9C9DAE764EBB115829CBCE4356E66A1D7F077DFD204A4634B0622FFB14CC6EBFF7062D7F30502BF0BC7D998A1A55FC8C876DA8E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.qhDXWpKopYk.L.W.O/am=wA/d=0/rs=AN8SPfq5gedF4FIOWZgYyMCNZA5tU966ig/m=el_main_css
Preview:	.VIpgJd-ZVi9od-ORHb-OEVmcd{left:0;top:0;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6B90DA;margin:0;box-shadow:0 0 8px 1px #999}.VIpgJd-ZVi9od-xl07Ob-OEVmcd{z-index:10000002;border:none;position:fixed;box-shadow:0 3px 8px 2px #999}.VIpgJd-ZVi9od-SmfZ-OEVmcd{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#FFF;border-left:1px solid #D5D5D5;border-top:1px solid #9B9B9B;border-bottom:1px solid #E8E8E8;border-right:1px solid #D5D5D5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer}.goog-te-gadget-icon{margin-left:2px;margin-right:2px;width:19px;height:19px;border:none;vertical-align:middle}.goog-te-combo{margin-left:4px;margin-right:4px;vertical-align:baseline}.goog-te-gadget .goog-te-combo{margin:4px 0}.VIpgJd-ZVi9od-l4eHX-hSRGPd,.VIpgJd-ZVi9od-

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9157
Entropy (8bit):	4.758532234615348
Encrypted:	false
SSDEEP:	192:bqHzPrdwKH+vtzbv78dHJS1Dlo1M5oBWVGkvxlv01du:crdClbvCJS1DS8ocVVX8du
MD5:	B3F3114E2E91F2984BF79BAC56F2DF8F
SHA1:	2B0BB05CDFDB1DACBA1A8F9A6DAB1F119B604DC9
SHA-256:	F6A38407001F4214C44B9C44B70A6E05A5E92C507898E8A6E10EFB6F765926A6
SHA-512:	072D525ADB0ED07D2B915668F5CA3A32C9C7937431DA4133B64DF9AB3B73F1ADB852F6749D0AAC833999852155E14DDE8FF1A6B18EA915F5EC25A54733270675
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg. id="Layer_1". viewBox="0 0 128 128". version="1.1". sodipodi:docname="wavebrowser-128.svg". inkscape:version="1.2.2 (b0a8486541, 2022-12-01)". width="128". height="128". inkscape:export-filename="wavebrowser-128.png". inkscape:export-xdpi="96". inkscape:export-ydpi="96". xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape". xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd". xmlns="http://www.w3.org/2000/svg". xmlns:svg="http://www.w3.org/2000/svg">. <sodipodi:namedview. id="namedview72". pagecolor="#ffffff". bordercolor="#000000". borderopacity="0.25". inkscape:showpageshadow="2". inkscape:pageopacity="0.0". inkscape:pagecheckerboard="0". inkscape:deskcolor="#d1d1d1". showgrid="false". inkscape:zoom="0.921875". inkscape:cx="140.47458". inkscape:cy="135.59322". inkscape:window-width="1269". inkscape:window-height="917

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	62650
Entropy (8bit):	5.978856877633116
Encrypted:	false
SSDEEP:	768:/W+9UreQNoylvJbn+iIfH4jvjyjBjYj2IDIYvq7UfIJ5qEuQf:/3ylvELUKJL
MD5:	6FCAA5C24CA61825596F9EF8279F7467
SHA1:	BFDC24941DDA7001E75FFE39ED9517E09D82A8DB
SHA-256:	B8E3BDA76A3F33B41A9F9E5A3F1C02FBA939E0F8482EFB3EF6382698B54B8AD7
SHA-512:	22B79BCF174DC5751E128DC2F2233FB180946B685E0E1B0B106E3D0D83318D311C0333C3C560068A87D4435CCA5163940B2687780BEA5B137615C22CE6389C5F
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=3627263333111943&correlator=3337998240731052&eid=31080117%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&gdpr=0&us_privacy=1---&iu_parts=183096492%2CMediaFire-Zone3&enc_prev_ius=%2F0%2F1&prev_iu_szs=336x280%7C300x250&ifi=3&didk=3528871077&sfv=1-0-40&eri=5&sc=1&cookie_enabled=1&abxe=1&dt=1703780528969&adxs=152&adys=420&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&vis=1&psz=960x1500&msz=336x-1&fws=0&ohw=0&ga_vid=1411026819.1703780523&ga_sid=1703780529&ga_hid=227450385&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=EhwKDWNyd2RjbnRybC5uZXQYpuXuicsxSABSAghkEhkKCnB1YmNpZC5vcmcYpeXuicsxSABSAghkEh0KDmVzcC5jcml0ZW8uY29tGKbl7onLMUgAUgIIZBIXCghydGJob3VzZRim5e6JyzFIAFICCGQSFAoFb3BlbngYpuXuicsxSABSAghkEhkKCnVpZGFwaS5jb20YpuXuicsxSABSAghkEhsKDGlkNS1zeW5jLmNvbRim5e6JyzFIAFICCGQ.&cbidsp=CrYBCAESIQoMc2hhcmV0aHJvdWdoEOgHIANSDHNoYXJldGhyb3VnaBIZCghwdWJtYXRpYxDoByADUghwdWJtYXRpYxIZCghtZWRpYW5ldBDoByADUghtZWRpYW5ldBIdCgp0cmlwbGVsaWZ0EOgHIANSCnRyaXBsZWxpZnQYAiIkYjlmNWVkZjctZTg2ZC00OTkwLWFlYmQtODNiOWQzMWJiMTNiKgQIAyAAMgd2OC4xMC4wQOgHSgA.&nt=1&psd=WzE1LFsyLFtbIi8xODMwOTY0OTIvTWVkaWFGaXJlLVpvbmUzIixbXV1dXSxudWxsLDNd&dlt=1703780518919&idt=5996&prev_scp=dkey_present%3Dfalse%26buildnumber%3D121918%26dladtemplate%3D51%26button_delay%3Ddisabled&adks=1870779098&frm=20
Preview:	{"/183096492/MediaFire-Zone3":["html",0,0,null,1,280,336,0,1,null,null,null,1,[["ID=9786cfb55cbc4cd6:T=1703780530:RT=1703780530:S=ALNI_MYUeo4N5bzOSCdSuerpmiQTXLVn3w",1737476530,"/","mediafire.com",1],["UID=00000daf1f21ae88:T=1703780530:RT=1703780530:S=ALNI_MYHfdfJqzyYWamgN_ITRBHHcoVmLw",1737476530,"/","mediafire.com",2]],[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CJSvs4rFsoMDFXDxlAkdvfAKMg",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}h

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65439)
Category:	downloaded
Size (bytes):	155646
Entropy (8bit):	5.22898887255512
Encrypted:	false
SSDEEP:	1536:UHLSxAexj5oQXnwlzVs0MtLCMndS3ceRUp7E88Ax9W7GF77UnDGZK:DdocnwlzP+WlAGKUnDGZK
MD5:	5FCEFEEBF5DDC7B2DDF2435967E63DE9
SHA1:	494EAFAD9166A6E472CE4C4B834D3B81BAFCC9B3
SHA-256:	65D03EB82A79A732D7C0180593C4F5DC98A8FAC5C20C3A5446C4F14BF93D280A
SHA-512:	FDD963E605A3F9CF04A26C4349C139A3DAEBA8BB1CEB5B4CE315B538165025BB69BD5801A5E49B8200F6B1610B76D3358CDD6CF3A65C61479CA7D75821052E43
Malicious:	false
Reputation:	low
URL:	https://cdn.id5-sync.com/api/1.0/esp.js
Preview:	/*. @id5io/id5-api.js. * @version v1.0.55. * @link https://id5.io/. * @license Apache-2.0. /.!function(n){var r={};function o(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,o),t.l=!0,t.exports}o.m=n,o.c=r,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:n})},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=17)}([function(e,g,m){"use strict";Object.defineProperty(g,"__esModule",{value:!0}),function(e){g.generateId=function(){if(void 0!==e&&void 0!==e.crypto&&void 0!==e.crypto.randomUUID)return e.crypto.randomUUID();return"".concat(1e6Math.random()\|0)},g.semanticVersionCompare=function(e,t){var n="^\\d+(\\.\\d+(\\.\\d+){0,1}){0,1}$";if(!e.match(n)\|\|!t.match(n))return;var r=e.split("."),o=t.split("."),n=function(e){return parseInt(e)\|\|0},e=functio

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	256
Entropy (8bit):	5.044805902863265
Encrypted:	false
SSDEEP:	6:hAbb9tpLPZeRjK7tPZKpCjP7HYgq9zuC75Jh:hAFntedCbKpvgWzuKrh
MD5:	4CE933926A4778656BAB38F759EE07CC
SHA1:	711545CFC5C223F82C156F8AAD5EF2BC34DCD154
SHA-256:	6B0847DFF3D69EBDCDC6E0C5B987856B7B9642FFF95C190DFDD415C35B6C7490
SHA-512:	0D7A358B17E744B6E2935A266C3EAB34D4EDA788F5607F90522AD57139287B01D3DC2C384D988F2D54D93F595B6096E332842638556D696FE51D425BF292F685
Malicious:	false
Reputation:	low
URL:	https://www.mediafire.com/blank.html
Preview:	<!DOCTYPE html> <html> <head> <META NAME="ROBOTS" CONTENT="NOINDEX,FOLLOW" /> <META NAME="GOOGLEBOT" CONTENT="NOINDEX,FOLLOW" /> <META NAME="SLURP" CONTENT="NOINDEX,FOLLOW" /> </head> <body> <div style="display:none;"> internal page </div> </body> </html>

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	4.551245099049614
Encrypted:	false
SSDEEP:	3:b2+lWZNDrMXQQmCc6vbb6v0YUI4smmVnCm:b2qSSQmc6vbbaTR4smTm
MD5:	54BDC60104D64C915C724FF83392FB3D
SHA1:	A961EA62B2617C8DBF39D26FD89056B18B302A69
SHA-256:	41F2DAD924C288502E4AC663365DE4AD09440574FB1ACB69F70F458B4663FA7E
SHA-512:	B3054FDC3619AEAACD1E10735FC143C9C72D34A50B3FC7FF7358E8B7ACC45D170BD6707C471F9CA924C33295AE64117B777152DC78E98F2A1532A05E035CD505
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlW9z5-2lNiuRIFDZJqrL4SBQ3r55t8EhAJNUwPaZkoBP8SBQ2_r2NGEhAJdIYCTIcVRAgSBQ0WqmHn?alt=proto
Preview:	CiIKEw2Saqy+GgQICRgBGgQIVhgCIAEKCw3r55t8GgQISxgCCg0KCw2/r2NGGgQISxgCChMKEQ0WqmHnGgQICRgBGgQIZBgC

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	962
Entropy (8bit):	4.5048022108790295
Encrypted:	false
SSDEEP:	24:t4po/yL4cr4clLKnCCgOnefULSKLdsGf2oY4/:VfcEcknnSK12S
MD5:	184ACE60FDA95F4C01EE59A8842B104B
SHA1:	C619928DDF6E180873929C4FFB9DBCBFDFFE7133
SHA-256:	947B503C2B416DE31D6B171BF82D08592BE07BB4F8887BCEFF6A1E1B4CCE5410
SHA-512:	ACA928234A0860D6D800D1835FA9E353C41844DD83DE4DA062CDA00C4BB463DD948484B1B5CC1CCE950906B3DA44F229394F1C4600004E2F9B1CCD9D89422D39
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab2"><path class="cls-1" d="M92.55,67a32.1,32.1,0,0,1-5.12,17.55,2.21,2.21,0,0,1-2,1.05H34.53a2.21,2.21,0,0,1-2-1.05A32.47,32.47,0,0,1,30,54.33,32,32,0,0,1,47.36,37a32.27,32.27,0,0,1,25.28,0A32,32,0,0,1,90,54.33,31.81,31.81,0,0,1,92.55,67ZM40,70.26a4.64,4.64,0,1,0-3.29,1.36A4.48,4.48,0,0,0,40,70.26ZM47,54a4.65,4.65,0,1,0-3.29,1.36A4.48,4.48,0,0,0,47,54ZM63.92,68.17,67.59,54.3a2.38,2.38,0,0,0-1.67-2.83,2.17,2.17,0,0,0-1.74.24,2.29,2.29,0,0,0-1.09,1.44L59.42,67a6.9,6.9,0,0,0-3.89,1.58A7,7,0,0,0,54,77.47a6.67,6.67,0,0,0,4.25,3.23,6.8,6.8,0,0,0,5.3-.73,7,7,0,0,0,3-8.5A6.92,6.92,0,0,0,63.92,68.17ZM63.29,47A4.65,4.65,0,1,0,60,48.37,4.48,4.48,0,0,0,63.29,47Zm16.27,7a4.65,4.65,0,1,0-3.29,1.36A4.48,4.48,0,0,0,79.56,54Zm7,16.27a4.64,4.64,0,1,0-3.29,1.36A4.47,4.47,0,0,0,86.54,70.26Z"/></g></svg>

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1525)
Category:	downloaded
Size (bytes):	1688
Entropy (8bit):	5.507158319720898
Encrypted:	false
SSDEEP:	24:8F0nlr3DIvEd7bJPqt/AahCuBrgA157Bjxy4IBh7w57S7TzHZMRtA91WrQoAbn1k:c85JMI6Rpu/BD5wyGG1BqfLTV
MD5:	3329FE99E98153370F7F8E75ABDEB921
SHA1:	ACCCC9B4B99C091A081A747786E3676A2C4D4C05
SHA-256:	4C3244574CDBC11FC944D40D8FFE4D6DAC63DE94F9B6AE9FA234B0B42E05F79F
SHA-512:	533DA6EB502A9093FFAF7F601EBDC43BBF285F65954F91E0ED154852A9EEF142B7A90D1F06DF73F205AF85BE174BAAF06E6BC10D7E58B383734B80B79DF1AB2F
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/5/c=4545/rand=308843400/pv=y/int=%23OpR%2341329%23mediafire.com%20%3A%20Total%20Site%20Traffic/int=%23OpR%2341330%23mediafire.com%20%3A%20Site%20Section%20%3A%20file/adv=%23OpR%2342598%23Referral%20Site%20%3A%20/rt=ifr
Preview:	<html>.<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'>.<html><body><div><img src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0" width="1" height="1"/><img src="https://pixel-sync.sitescout.com/connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0" width="1" height="1" /><img src="https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%3D%24UID%2Fgdpr%3D0%2Frand=531851505" height="1" width="1" /><img src="https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP" width="1" height="1"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=NWUyMjFiMWJhMmU0YmYxMTZjNTZhZWNkYWY4NzE2ZWU&gdpr=0" height="1" width="1" /><img src="https://sync.srv.stackadapt.com/sync?n

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 112 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	583
Entropy (8bit):	7.500296490028757
Encrypted:	false
SSDEEP:	12:6v/7lxBfCFESQ78VWQlsyw6Px9/F78CJNst7TiPzJlqHDe:sfyESQ78rCyw6PXF7ZXLl4e
MD5:	E0ABC4FEA89D2C5153B73CD02AC5BA13
SHA1:	00465EF774805C82FB5B8A40B743F7B1A1D1A7D6
SHA-256:	F917A9105C311331B1D40F4D2BDBF11233C1C465616C1A9C46232F451463B061
SHA-512:	202AA7F925729CD1FE7F7E66B4217D90CD05B5FB8DDE0B3991461F88AFA11C1744A3F56974296EC155733669DB44D96B6A84593A76F2E5BE9C63016E3150F04C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p...........;j....IDATx..MN.1..=.p..\...0.......d..%..nI.........\`..p...^......X...I....>....B)%x......D. .E.p......l.".s.L.....@?.n5q?........b..x..C.......q.....<C.,.A..@E.O.pY~......oP;Q`..D..@. ..H. .M`.(...&S..(p.:F....(..Y72gb...Di..y....l@...#....T..d.........Z.2o..B+.=pe.%.8.-y...'..h.../.!...L...f..#...../.3..2...T\|,bvG.ddP..9.....y'..<R.8C...".Qp.3.N .....Q`."..t...w. ...h.K_.>.(o.{..(`(.{k....>.@s.g.y+.8.L.[..V.U.@V.....u..&.M....XZ.4.....o.#......f5..Pv..D... ......~/g`....m.p..0r.9W...P....8I.....D....6.2..p..}.....IEND.B`.

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2119
Entropy (8bit):	4.2128590298944095
Encrypted:	false
SSDEEP:	48:u6kBpTlEjRkYToowGfqlDk6da5qQ4DQbhBQ/EGdd:RkBpqNkGak6eqQ40Exdd
MD5:	6FFFBE8329FD1B1DB524B68B798566EF
SHA1:	99F19D16255D5BA549BA46236B6CAE8D02A420E6
SHA-256:	DA1F290293D87E51BA8FBD2A4A4C44094E72985B7676F3400FA7FCEFC0145FFA
SHA-512:	A73BAA331AA8DF9991B549C77827B73B02B8D32BB3E01E1F94E369404CF5B54C07AA5699C7526C9F90AC9D4E296E5AFE4C7AC5ED79BA3F2BB1F95C4DC656878D
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/gizmodo.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="342.01" height="49.08" viewBox="0 0 342.01 49.08"><title>gizmodo</title><path d="M56,43.22V5.82a6.3,6.3,0,0,1,1.33-4.37A4.43,4.43,0,0,1,60.81,0a4.59,4.59,0,0,1,3.52,1.44,6.23,6.23,0,0,1,1.35,4.39V43.22a6.28,6.28,0,0,1-1.35,4.4,4.55,4.55,0,0,1-3.52,1.46,4.42,4.42,0,0,1-3.42-1.47A6.29,6.29,0,0,1,56,43.22"/><path d="M317.48,49.07A24.52,24.52,0,1,1,342,24.55a24.55,24.55,0,0,1-24.52,24.52m0-39.12a14.6,14.6,0,1,0,14.6,14.6A14.61,14.61,0,0,0,317.48,10"/><path d="M207.4,49.07a24.52,24.52,0,1,1,24.52-24.52A24.55,24.55,0,0,1,207.4,49.07m0-39.12A14.6,14.6,0,1,0,222,24.55,14.61,14.61,0,0,0,207.4,10"/><path d="M285.11,24.54h0A24.56,24.56,0,0,0,261.31,0l-.73,0H248.27q-3.16,0-4.57,1.44T242.29,6.1V43q0,3.21,1.41,4.65t4.57,1.44l12.31,0,.73,0a24.56,24.56,0,0,0,23.8-24.51h0M262.32,39c-1.19.08-2.46.09-3.84.09H252V10h6.44c1.37,0,2.65,0,3.84.09a14.61,14.61,0,0,1,12.85,14.46v0h0v0A14.62,14.62,0,0,1,262.32,39"/><path d="M169,.22A4

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	4.444940714705788
Encrypted:	false
SSDEEP:	24:t4po/yGVchiPJ43O4H413dOnMwVlDSEH3GnMvR4M/tb3rsd672JQUg7m:VLVciZMvVFSEH3lvtlE6725
MD5:	9A293B765E14B09C5B6400BFCB7FD340
SHA1:	4B5EDD950529D148AD05A4156B9A2644096742F5
SHA-256:	C7070B09D24214746DA99508E59302BB5D881F993B837A6F72F52BEAD62EBA97
SHA-512:	1BF42DD2337521E31E6222E41D5A2665235C0D98CC8B7C66851A2181391FD22E4AEF0056D3AEA8FF7C849A2FE672F83C7C7D1EC17E12C276F37B878E22DD392E
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/pf_web_uploads.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>features-svg ready</title><g id="ab14"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,2.08V74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,2.4,0,0,1-2.4,0L34,76.39a2.41,2.41,0,0,1-1.2-2.08V45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3A2.4,2.4,0,0,1,60,29m0-5a7.4,7.4,0,0,0-3.7,1L31.51,39.28a7.4,7.4,0,0,0-3.7,6.41V74.31a7.4,7.4,0,0,0,3.7,6.41L56.3,95a7.4,7.4,0,0,0,7.4,0L88.49,80.72a7.4,7.4,0,0,0,3.7-6.41V45.69a7.4,7.4,0,0,0-3.7-6.41L63.7,25A7.4,7.4,0,0,0,60,24Z"/><path class="cls-1" d="M65.43,73a17.88,17.88,0,0,0,0-5h4.21a9.74,9.74,0,0,1,0,5m-6.41,6.93a19.49,19.49,0,0,0,1.72-4.43h3.67a10,10,0,0,1-5.39,4.43M62.91,73H57.09a15.67,15.67,0,0,1,0-5h5.83a15.67,15.67,0,0,1,0,5M60,80.41a16.89,16.89,0,0,1-2.38-4.93h4.76A16.89,16.89,0,0,1,60,80.41m-5-14.9H51.38a9.87,9.87,0,0,1,5.38-4.43A21.47,21.47,0,0,0,55,65.52m-3.64,10H55a21.47,21.47

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2980
Entropy (8bit):	7.883955905859089
Encrypted:	false
SSDEEP:	48:0QUbu84U/vKO4Zqi/YEFWroYDx4YknPBic7W32lxkTpLkfhKm/Gkz:0QfU/COahY/X94xPBLS2lSRLO
MD5:	6098EB6327B309924273EB752E1AEA22
SHA1:	A88C791BBE2105EA004F808475FBBAB9594A47B9
SHA-256:	7F1343CA74E009A2949392688B30D4A9A8F7F642AE4B593C9FDC76284531B049
SHA-512:	D9E404A77CC37A67A21DACFCA66DABB38C50439B16F915725791D1D42600EA8465E32C4EAD5879A85167E24B6C17D4914A5652D86DC37B51DA2C277486C18DA3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............z..X...kIDATx..ZYK\Y.n.1....("(..""Ape.2.N......<.Eq.%!!!.DEQDM....q.\...........a~@M.59mw...u.8..{.T.9..N..9<<$.T.......h.@?...4..T.b.i.....m...:T.KH....D....S....,...v....2..<.AFu.J..&..`M.....I3.UD......K...4??O...tpp..D....@......=cp..../K.T.....=.......tU._,...PZZ.....R..H7o...8....Wtt4.{.>\|.p.s.Z.@..:c@.Mi.....2..z.q......[.......Nm....m....a...=.D..Q^^.$.........H{{{.............kKc-. NX.U....@][z&...d.#..r.....#..........*;---l..G..D.uuu......`....t...5+{.~.J..?&;;;.y....y.G#W...,...\|t:.Yv.....N.....qpa..w..]y..........m.}.....-..r.g.../J.../...Q..g9..r.6O..O.>....>~......W......9...O.L........+TVV../itt..v{{.z{{.......ipp..p[:......{.....tmm.....444d6.q.XZZb............".m..JN......^.>\|..qz......}rr...:::(99."##....7........\'...RRR..BP...(A....V\|\|<=}.....$.......dm-...8.Jn....P..Q....q........j^.i..............s.D.}......\|...$.Y..........@...c,...=??.T....p./n{l)...$.....l+..f.L8........".g..k.aRR..8

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (475)
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	5.300690058329593
Encrypted:	false
SSDEEP:	24:WA/hJQ04lU6ydgtvlXyVcgk2KRNI4kpEpqH0L4ItJC9rCM:hhJQJU6Mgtv9R2KUqpuy4889WM
MD5:	008399B5BF32F666787FB5E562F32E18
SHA1:	165110D142F2E2D00D6F41ED206C5F3FC0CCD9D3
SHA-256:	2C34F09169D2A10E8F5863960E81575AB70F88B52F4BD3386CE5E41E73A94487
SHA-512:	F606C7C29C1FE4D9A5E9C11A6716F685122BE93B14E8A69E31CDE2BD9B23A9D0D06FBB05A7CA66F7733C668DF4ACD10E10A244EEBFA5A2DB0704955AE6CD1214
Malicious:	false
Reputation:	low
URL:	https://go.ezodn.com/porpoiseant/et.js?gcb=195-8&cb=2
Preview:	var getEzErrorURL=function(){var defaultDomain='//g.ezoic.net';var path='/detroitchicago/erjs';if(typeof __ez.dot!=='undefined'&&__ez.dot.hasOwnProperty('getURL')){return __ez.dot.getURL(path);}.return defaultDomain+path;}.function reportEzError(err,sn){if(typeof _ezaq==='undefined'){return;}.var re=/$?([^\s)]+):(\d+):(\d+)$?/;var scriptUrl,line,column;var stack=err.stack.split('\n');if(stack.length>1){var source=stack[1];var groups=re.exec(source);if(groups!==null&&groups.length>=4){scriptUrl=groups[1];line=groups[2];column=groups[3];}}.var errorMessage={message:err.message,line:parseInt(line),column:parseInt(column),error_type:err.name,script_url:scriptUrl,url:_ezaq.url,domain_id:_ezaq.domain_id,pageview_id:_ezaq.page_view_id,form_factor_id:_ezaq.form_factor_id,script_name:sn};var dataTxt=JSON.stringify(errorMessage);if(dataTxt.length>0){var url=getEzErrorURL();var logXHR=new XMLHttpRequest();logXHR.open('POST',url,true);logXHR.setRequestHeader('Content-Type','application/json');lo

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1249
Entropy (8bit):	4.507675403977368
Encrypted:	false
SSDEEP:	24:t4po/yW8LhXJ43O4H4VIXjiAyj17zZZcS6Ojuun9B9w9/fA:VEZuRk0S6Ojuun9oBA
MD5:	482729F2C68B4C66A8F3D8254C9C59EE
SHA1:	0E370AB6B890344DBA7BF63C85505C578A770566
SHA-256:	AF5E7ACE999413E0657FE05C8BC104C4555449C74D779C591305CD363073548E
SHA-512:	4E851B308F3215D620C7DA7FB871324822D36592CD4C07B2A1741F1C022DF48A26B4D863D0FA0C23F416C145E19CCB87C4DCA67431D3045D684C55B2730DB055
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab9"><path class="cls-1" d="M88.49,39.28,63.7,25a7.4,7.4,0,0,0-7.4,0L31.51,39.28a7.4,7.4,0,0,0-3.7,6.41V74.31a7.4,7.4,0,0,0,3.7,6.41L56.3,95a7.4,7.4,0,0,0,7.4,0L88.49,80.72a7.4,7.4,0,0,0,3.7-6.41V45.69A7.4,7.4,0,0,0,88.49,39.28ZM32.81,45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3a2.4,2.4,0,0,1,2.4,0L84.71,42.88l-8.71,5V46.45a2.29,2.29,0,0,0-1-2.11l-.31-.16a1.73,1.73,0,0,0-1.79.14c-1.31.94-5.39,2.8-7.92,4.27a67.61,67.61,0,0,1-6.11,3.13V51H44.71A1.71,1.71,0,0,0,43,52.75v7.57A1.71,1.71,0,0,0,44.71,62h3.17v1.92L32.81,72.57ZM72.42,65.2,72,65S67.77,63,65.14,61.42c-.48-.28-.95-.54-1.4-.78L73,55.34V64.5C73,65.18,73.06,65.44,72.42,65.2ZM58.81,57.7V54.36h.9a49.64,49.64,0,0,0,5.43-2.71C67.77,50.11,72,48,72,48l.42-.16c.64-.24.58.45.58,1.13v.58ZM87.19,74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,2.4,0,0,1-2.4,0L35.11,77l13.18-7.54a8.71,8

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstWThs9jp4xoRc_FSaqZwojO6ERPNnWE7RZ_BhXnyczaninc28V1DuLJ-LXJ9LextpvU-FyWhYY3lcvKB2TyFjJvK4QSi_alwvHns-CPy7BxWCtkjqUiCkQMGJZhcjcaMEJ82mMjmZsRg6XSRLyK5M31Mn2&sai=AMfl-YRtkvxkoeN3RFxsCeTgGrDpN8Pm646Q0_ZwOWLmEqGEODZGaG28jW16lrf5H4Hjq3agGpqSNN4xkIFLPHbsffC5KQFJwHQ_hElHGYvMBwzu8EvuPBrpJntY1HawIFtNI6RTeGqnSQH5JmuU5RC15Q&sig=Cg0ArKJSzGR6qELBkvZLEAE&cid=CAQSTwAvHhf_7wzTxJ_as-_PM1dw7jduFxRwI8zj_gv85OREaPkD3hOKKt_bDymvCw8Noo0WQzDUbhx8GF6dKqKDXdLqfothXXLjqaOsdWoMOSsYAQ&id=ampim&o=152,420&d=336,280&ss=1280,1024&bs=1280,907&mcvt=1039&mtos=0,0,1039,1039,1039&tos=0,0,1039,0,0&tfs=1362&tls=2401&g=100&h=100&tt=2401&r=v&avms=ampa&uap=Windows&uapv=10.0.0&uaa=x86&uam=&uafv=117.0.5938.132&uab=64&uafvl=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&uaw=false&adk=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 47 x 47, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	558
Entropy (8bit):	7.331891387747921
Encrypted:	false
SSDEEP:	12:6v/7Y9f8BFM+nyjiVzHzahLVk3JT3IJgnp9f0szuxQcrawa:YFZyjsTahLVkZ0gpWsCWcQ
MD5:	5C3D1EFD1C43793BB232DFFDE6A088E8
SHA1:	8EE6F446611045F441700DBC3248A85D03FD6CD0
SHA-256:	01CEF4B8CB4C142AE6E1CA309B3983F372431912A7731B5B608E8021BFCC8652
SHA-512:	1EF875A9F4C073F59FB8D925601169BF6BFE411DC809E3D137982224F128630F6DC7F4317414BE34B9504A9316E205C93AF4D01D02DE6837A06FD81843BE00E5
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/fa/img/ease-to-use-blue-icon.png
Preview:	.PNG........IHDR.../.../.....D.c....BPLTE...6..5..5..3..5..5..6..6..6..5..0..5..5..4..:..6..5..8..6..7..6....b.....tRNS.._...o?./..O.... .O/.......IDATH.... ..9.AQk]y.W]M......c...E.T.@..D.."..D. C...Ms....1g...k..v...R...4U.............0$#.g..1.S..g.ZqA..'6...ol...H.r......{.@..^.p.....{^...+y...W.d..+..+...a./.Yg..Oz.B...{.NtM.xH.N!#.........."..z..N..q.......V....S\.'.f....[8.Y...c.%....Ul...R.....b.o....?.;.9'...C...z..h....sb...~<}.V.nM_...U....]..dP3.t..........\.}0:...Q.:d.2..x..G.U^_?..{=G=...._.aR....R.;.B.:3i......IEND.B`.

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1066
Entropy (8bit):	7.462382123618429
Encrypted:	false
SSDEEP:	24:zDAOyz2OixgEs/AkHXIQfl1nP0hcJBP0MoTV:zDAOO20j/t4C7nLfsT
MD5:	600ABF80E6DEC3EB916ABE1DF7730B57
SHA1:	F0C7648CABB24CB9E86ADAB17BD97E96B55F81E2
SHA-256:	097B1EA806AFEDDCE94390AA022AA51955A3E1236BEC96609C3B06A22BFB4A05
SHA-512:	188EFDA68B18503E28653C7F594390F9EC038DA2DD6E04E82F0AE63B0FF61A271A9ED3BEB4ED5095F67129F858A802200536424AEE6FDADFD25C5F2403562263
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............PLTE.....................................................................................is.is.is.............is....ku....is.ku....ox.ox....qz.q{.......is.is.......hr.......5tRNS...........................e....] ..Z.e.....'..%f..ia..f.....IDATx^....6......[..{...Z.c...ra......7R.k....+[.}.vK2..P...u..43..uP.Qr......&J"..(I...@.J.........FhJ(.i.(......Z.....M..S.ASMQ.M.....e=45...dxP..(.....T..1..iJ.`.:\.....!.(w.W..l...I...X~`...g.h..!...c...fN...2....)..50..;...xZ........3..~J......b.....?.....24.?<.g.0..~2.6.K..2..}.YQ...!..\....7..0)w..[..0N...r............KV..k4U..".IY..<D.l<.....`....d....b..euP0.kG.S.2=(...A..3.."x.g...}r....A}....o...%.DN}.............../.."n32...../~xi............?...;.W...........%..\|.x.?..E...iq.\|X.<...d.\|..q.5.}j...#.....j..!o.Y...{zzU.S..y...)p...........3..+p......>8..-.....3]..D...<."...C...o....M.T..C%.6.(.J..&...e....[.n...+%gP%..f...F....c...r....`.z.......b.....I.....~

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6314)
Category:	downloaded
Size (bytes):	6317
Entropy (8bit):	5.0720904151282715
Encrypted:	false
SSDEEP:	96:g5uHOZtS2+ISrRftqKCgELk9XmRnn3cfjhLGmIh2:g5uHON3Srptzyn3cfxIM
MD5:	A1C4EF78B92487F9B9EFD8BE091F861B
SHA1:	2D87494F85EE583B97A21D846C4034EC25CD78F0
SHA-256:	E80FE9B2FF20052064FDA57E489C389A683605DB3D84DB786FFB1ECDE7DCCB63
SHA-512:	FBF8FDF1FC339A3DD5E8FC20AF5DA30F7BA9487E5537BA23F334E41253343FE2EC224B81A70190182ED4AA5F7BB0A0CDF3A0C5D898FB042DD4BFB1E4AF5DB633
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/Pitch.ConvertYourFiles-e80fe9b2.css
Preview:	@charset "UTF-8";.--animatedarrow_on .download__disclaimer[data-v-78f2007a]{position:absolute;bottom:-20px}.--animatedarrow_on .description-columns[data-v-78f2007a]{gap:32px}.--animatedarrow_on path.one[data-v-78f2007a]{transition:.4s;transform:translate(-60%)}.--animatedarrow_on path.two[data-v-78f2007a]{transition:.5s;transform:translate(-30%)}.--animatedarrow_on .description-column path.three[data-v-78f2007a]{animation:color_anim-78f2007a 1s infinite .2s}.--animatedarrow_on .description-column path.one[data-v-78f2007a]{transform:translate(0);animation:color_anim-78f2007a 1s infinite .6s}.--animatedarrow_on .description-column path.two[data-v-78f2007a]{transform:translate(0);animation:color_anim-78f2007a 1s infinite .4s}@keyframes color_anim-78f2007a{0%{fill:#dadada}50%{fill:#fbc638}to{fill:#dadada}}.--stylizedcsteps_on .download__disclaimer[data-v-78f2007a]{position:absolute;bottom:-20px}.--stylizedcsteps_on .step.current .step-circle[data-v-78f2007a]{animation:heartbeat-78f2007a 2.

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	37035
Entropy (8bit):	4.939323707654456
Encrypted:	false
SSDEEP:	384:wtcGGhB6/eFMm3lnAxCpph5wYgr6b8MxAc6wMFW:jbH11m5rgx
MD5:	78BA220259933F24DC696A3B1E085444
SHA1:	39C72D416A8564F5C2D9CFEE8C9DDD17CEA17807
SHA-256:	7BA1BC2084DEF769E77A7DBF97CD91D68FE6C6D55B5D183A7D36630DA8DA2B02
SHA-512:	B7622AF8523D9A31BA20AA960745E2A6DF4D1583B940A94C8380CF1D802ABFBFB1F183927DD457280F8F9477AFCF670BA17B80EB8F03884A867638F251AC2525
Malicious:	false
Reputation:	low
URL:	https://www.mediafire.com/images/icons/svg_light/icons_sprite.svg
Preview:	<svg.xmlns="http://www.w3.org/2000/svg".xmlns:xlink="http://www.w3.org/1999/xlink".width="1656".height="24">.. Define SVGs -->. <defs>. search -->. <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <path d="M18.65,17.03l-3.67-3.68A5.942,5.942,0,0,0,16,10a6,6,0,1,0-6,6,5.9,5.9,0,0,0,2.72-.65l3.81,3.8a.942.942,0,0,0,1.32,0l.8-.8A.942.942,0,0,0,18.65,17.03Zm-6.99-2.74A4.537,4.537,0,0,1,10,14.6,4.6,4.6,0,1,1,14.6,10a4.5,4.5,0,0,1-.64,2.33A4.6,4.6,0,0,1,11.66,14.29Z"/>. </symbol>.. sort -->. <symbol id="sort" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <rect x="11" y="6" width="10" height="2"/>. <rect x="11" y="10" width="7" height="2"/>. <rect x="11" y="14" width="4" height="2"/>. <polygon points="8 6 5 6 5 15 3.05 15 6.5 18.45 9.95 15 8 15

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 25460, version 1.0
Category:	downloaded
Size (bytes):	25460
Entropy (8bit):	7.991276463819816
Encrypted:	true
SSDEEP:	768:75ZH5cdbYc747eueG6rWD+ohKTCKn5aMjkb:77H5ce7heG6s+oQTKMjkb
MD5:	AD2D84F24FA0DB65A6EB402E88D3CF01
SHA1:	FE50AC6C19BF3B36DDE827B10F46C71513DDDAE7
SHA-256:	688C0BC13DEB1D30FBC17D66729EB3CFA6982E2461F0E70BE0E34ACF1C44B18E
SHA-512:	783A48BE02EEEED1A2E94FC056EB8D139CCD9647900118D7CF8321EFE499127B9DCEE9C9B3476D1A4A86A6DBDFC3A24B36ADC96A6F4E39D9F6536D232CF8C7BF
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/60da91/00000000000000000000d799/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
Preview:	wOF2OTTO..ct..........c............................/?DYNA.R?GDYN.Y..:....`..L.6.$.......0. ......j'....\|.TU.SB.....?.......?......2.m .y..`.........K-3...%..f..,T...5...A-.....b...A.F.YS...].......6.'...N.9....E...#..-.........HX&ag23.t.j@......mAP@e.4.-..PD.w)...l...ig...<..!...wgw..e.Q,m.ai.V.."5.&...)-.$.4C..X..Z.b-.....=..t..<L..wg].........+..T,....,@"E.....JMhRDE,..v.t.....{..........J...T\...I..$)...9.QT..O\&}...M{..oU..D./.......@..l+n......j..g .lbX....}K^E..p...vh.4.z5]......h.f..."UD....&.T.>.....e...BH.....Q.v...u$..'@...2U..?......a4......+.kn.`......T...J....(0....s..brz(>.A...c.....R.K.!..RQUN6.Zl_.-W4.........Q..;DS.6.j".....[4m..j..M......~.5~..?..Z.J..;~.3.....,..*T.<.Z.... ..aBc../.r.....;8..~.F.b..t.1Z..:..z...a.Fa.&a.fa..a.Va.6a.va....N.....n.....>....`..`1.a%.`=:.>.b....t6`S.fGvg_..H..d..B..I...Lh.m[.j.i..mm.6]:.Xm.t...ti....1\|....v.;.Mub.]L..;....\|.>....wn.A......];...I....B0B..pD ..E....d. ..HE....H.._..+5.$MH3..$]HW..$m

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	72
Entropy (8bit):	4.605989460690538
Encrypted:	false
SSDEEP:	3:VDKmRlD93/XAALJaSLWDYMHF/F6zvn:Zh/V3uZAzvn
MD5:	EBB298BA5E2C28763645875CCAA7513E
SHA1:	345D780AF51CE7A9E0D844AE853032CB9A52CB38
SHA-256:	65919801015B4A7FE234E9077E83CA86AB621AC0BCAE7E0D7B2ADF61E703815E
SHA-512:	A0A56800E7A676359014E8AD1863D4E1621F65B051F59235F601AFC0F37813CDC19ECC65878C220FF79AAA0DC058BDECD4F04AC4EEFD5158C07E90FD9FD5DF1F
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/bright-green-arrow-5acdeb1c.js
Preview:	const o="/bgb/old-school-images/bright-green-arrow.svg";export{o as _};.

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2255), with no line terminators
Category:	downloaded
Size (bytes):	2255
Entropy (8bit):	5.236401968445873
Encrypted:	false
SSDEEP:	48:+xzE0SDLoS7miQthVrr5p2y1LVbmXfgucD+2BPl2EPmXQu05H:Eg4S7fQtzdp2+hmXY94EPmXQusH
MD5:	1B1672A9D5E37FE31CE5B7974A4C652C
SHA1:	BD60E7AFEA4266AB3F9C728C41F9B158A4C9D53B
SHA-256:	CEBC0DED9F2EF3DD4E3C6D6010538DEE890C24A070D6BA991E0C93E451D96CCD
SHA-512:	1C9F10D4AAEC95CD665388115EE41A7E5CD53731CFB73E09AF9006FB470DD281CFD7F1F914C4B0B86DD38DE804D54CA1527A076ABF69E033A293A1D9C26F10CC
Malicious:	false
Reputation:	low
URL:	https://go.ezodn.com/parsonsmaize/olathe.js?gcb=195-8&cb=23
Preview:	try { !function(){function e(){"undefined"!=typeof ez_tos_track_count&&(ez_last_activity_count=ez_tos_track_count)}__ez.analytics=function(){var t=__ez.dot.getURL("/detroitchicago/imp.gif"),n=Date.now(),_=0,o=0,i=0;function a(){if(i++,void 0===document.visibilityState\|\|"prerender"!=document.visibilityState){if("undefined"!=typeof _ezaq){if(void 0!==_ezaq.pv_event_count&&_ezaq.pv_event_count>0){var e=parseInt((Date.now()-n)/1e3);e-_>1800?(n=Date.now(),_=0):e>=0&&(_=e,__ez.bit.AddAndFire(window._ezaq.page_view_id,[new __ezDotData("pv_event_count",_ezaq.pv_event_count),new __ezDotData("time_on_page_event",e)]),o++)}else if(!0!==window.ezAnalyticsStatic){var c=t+("undefined"!=typeof _ezExtraQueries?"?"+_ezExtraQueries.replace(/^&+/,""):"");__ez.dot.Fire(c,_ezaq),o++}_ezaq.pv_event_count=void 0===_ezaq.pv_event_count?1:_ezaq.pv_event_count+1}}else i<20&&setTimeout(a,500)}void 0===window.isAmp&&a();var c=0;return{init:function(){var t;window.ez_tos_track_count=0,window.ez_last_activity_count

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	992
Entropy (8bit):	4.56024922147393
Encrypted:	false
SSDEEP:	24:t4po/yLts8f/JdJWJ/MNBJTzUk37biewlcrr:VaZDwQvUWbiewlc/
MD5:	D0D7EC9C0600D8356AFFDD4B1D6C2EB4
SHA1:	A393FEEAAE1CBB24E8D0918D6C1B45A21D3AADE8
SHA-256:	030209A81AE29C80A93B1518FFA7BF493BB08D5FAA0E1D36E173E62327163899
SHA-512:	64919D25AECF6E16417DDC7523C25D0F126F0740EAB291B4CBEFA57FF6CB8371C818C730322BDDF3B5953364EEF691488728506033C7324B0A3D55FA26684195
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/tf_share.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab3"><path class="cls-1" d="M71.19,70.63c-11.41,8.6-28.29,15-43.41,13.26,2.86-4.11,4.07-9,1.8-14.47-3.67-8.88-17.18-9.16-20,.57s5.61,13.84,14,15.38a41.86,41.86,0,0,1-10.56,7.29c-1.43.74-.17,2.9,1.26,2.16a41.21,41.21,0,0,0,12.09-9,53,53,0,0,0,5.78.39A66.08,66.08,0,0,0,72.45,72.79C73.72,71.83,72.48,69.66,71.19,70.63ZM18.65,81.75c-6.32-2.37-10.56-11.13-3.24-15.52,5.4-3.24,11.26.46,12.48,6.11a13.09,13.09,0,0,1-2.75,11.17A36.84,36.84,0,0,1,18.65,81.75Z"/><path class="cls-1" d="M110.26,25.33A1.67,1.67,0,0,1,111,27l-6.86,41.14a1.69,1.69,0,0,1-.86,1.21,1.65,1.65,0,0,1-.83.21,1.8,1.8,0,0,1-.64-.13l-12.13-5-6.48,7.9a1.58,1.58,0,0,1-1.31.62,1.45,1.45,0,0,1-.59-.11,1.71,1.71,0,0,1-1.12-1.61V62L103.3,33.61,74.66,58.39,64.08,54A1.7,1.7,0,0,1,63.87,51l44.57-25.71a1.64,1.64,0,0,1,.86-.24A1.66,1.66,0,0,1,110.26,25.33Z"/></g></svg>

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2393
Entropy (8bit):	4.690726248163968
Encrypted:	false
SSDEEP:	48:vuUeDrLBTzLx6Ycvrd90G1I6oDUyXc4UE8RSdpFC4zI4Lx9:GBWZ93owyLUwzd
MD5:	015E34D1DD9C715D3DF025F179CDBC68
SHA1:	ED65360D3F8E9DD460A3BA0A4D7EB2701B7BF4A0
SHA-256:	B9254E222506A048B2B493115DC79A2F3FDBA6FB2A9637F9F57BEC45EBFDF167
SHA-512:	C53A510A4F77C9A52F9134780E19E2EB17641E6C673328381E2F33FF921428CBEE8CCA63DE9806F94C5C85977B3DF6286585E082FCABCE8A9DC4AA7F80C3559C
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/lifehacker.svg
Preview:	<svg id="_ogo" data-name=";ogo" xmlns="http://www.w3.org/2000/svg" width="596.39" height="148.49" viewBox="0 0 596.39 148.49"><title>lifehacker</title><path d="M26.29,148H3.42V2.64L26.29,4.11Z" transform="translate(-3.42 -1.16)"/><path d="M52.3,12.78a13.1,13.1,0,1,1-13.1,13.1A13.15,13.15,0,0,1,52.3,12.78ZM63.74,148H40.87V44.33l22.87,1.29Z" transform="translate(-3.42 -1.16)"/><path d="M118.34,65.17V88H101.18V147.9H78.31V34.18c0-17.34,14.39-33,31.36-33,5.72,0,10.33,1.66,11.44,2.4l-.92,22H109.67a8.62,8.62,0,0,0-8.49,8.67v31Z" transform="translate(-3.42 -1.16)"/><path d="M127.59,74.4a31.45,31.45,0,1,1,62.9,0V96.53A11.38,11.38,0,0,1,179.06,108H150.47v10a8.66,8.66,0,0,0,8.67,8.67h22l.74,19.37-20.66,3.14c-19.92,3.32-33.57-13.84-33.57-31.17Zm22.87,10.7h17.16V74.4a8.58,8.58,0,1,0-17.16,0Z" transform="translate(-3.42 -1.16)"/><path d="M210.05,148V3.56h14.76v43.9c4.06-1.29,10.51-1.84,14.94-1.84,15.68,0,27.85,14.2,27.85,30.25V148H253.22V75.87a14.25,14.25,0,0,0-14.39-14.2h-14V148Z" transform="trans

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad-delivery.net/px.gif?ch=2
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	261174
Entropy (8bit):	5.1795288285592145
Encrypted:	false
SSDEEP:	1536:SqG0BtcZeTFy0JTZMAwhnS+STxrE4UQSTIz/5oL4cX/PoBBTTPmV5N9PtyDiBz5Y:vJtcZq5cySK7y9DqjuDheLlkB1aj
MD5:	EBDF56BB5589A1188D10F05C7AF75AE7
SHA1:	A93F507B5CE210E90F8BABF8D4EA5A80033543DC
SHA-256:	A367DB2D796543D8667B4E244B058D31E3B97A3B97EBBD7D63BD0A67AAD9E522
SHA-512:	9B0D987F53BDF795691408C0DC948C6B83285FFBBB89F6B7F42C3D3918916A122EF54C9D241C1EA1F3534A13CBBF09BEB3CDBE40ED50B1BB4B7F82E6F92B0EFE
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/css/mfv3_121918.php?ver=ssl
Preview:	/@charset "UTF-8";/ /* CSS Document / / MediaFire - Master Stylesheet Version: 2010.6.02 / / LEGACY FORM STYLES / .form { margin: 0px 0px 0px 0px; font-size: 13px; font-weight: bold; } .form_error { font-size: 12px; background: #ffecef; padding: 3px; text-align: center; font-weight: bold; color: #FF0000; } .form_error a { color: #FF0000; text-decoration: underline; } .form_success { font-size: 12px; background: #E3FFE9; padding: 3px; text-align: center; font-weight: bold; color: #18CE3F; } .form_success a { color: #18CE3F; text-decoration: underline; } .login_box { width: 195px; border: #7dc7ff 1px solid; padding: 5px; font-size: 14px; } .default_input_box { width: 195px; border: #c1c1c1 1px solid; padding: 5px; font-size: 14px; } /LEGACY DOWNLOAD STYLES*/ .captcha_box { text-align: center; } .code_header { margin-top: 5px; margin-bottom: 2px; font-weight: bold; font-size: 12px; color: #505050; overflow: auto; } .delete_link { color:#444444; font-size: 12px; } .delete_link a {

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 850 x 515, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	87344
Entropy (8bit):	7.956290280698388
Encrypted:	false
SSDEEP:	1536:JggWDsRtCwXlEgcwmxriZ+Uf012f4z+A4EfD4BWcYBgIsychmsEihFx11N:JgeCw6gixriwUsIf4DfD+YFsRhmsEihV
MD5:	6494EBF907631E25CDF6C53ACA2B2617
SHA1:	21D76A3273C7C7C62DEFF54E0ADA85653B1A24AC
SHA-256:	3483E5B84A7A1B5B1F71275D1C405466D339F3B914329C52971AC805A741259C
SHA-512:	7BFC2DDA55C703254852B5283DF5F2FFF384C9F5CCA313DA9A4FCAFC394D9DC0084315B207CAC201267EBEC99ABFCAF6847CEFE7B6A720C68284305C60CA8603
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/fa/img/laptop_white_display_black.png
Preview:	.PNG........IHDR...R.........9]......PLTE..................................................XWZ}\|............................. ............Nc..................................................t........~.......& 2L.'.}........XX_]]e....s....ccj...%&,......QRYJKQ...-.4.....................35<...............;<B.......BDJ..........{....ijp.7....m...$C^.1\|.>.wx~..............u.qrv.C........P.................<S.D.."^.L.......1..K..\..W..JY....U.Jw.-C.2H....c..~..>..@i....#x.K.1...}..n..(;.n....:{.u....2u.....a.......Wdj./...m.M.U...^.P..]t>...^..F.T.")...A.r:.+W..h....&c..Ka.c.........9U.%H.................c'b.Wq..(.j...8.j....F.B....T......E.....ly..e....EXf:...ys.RHq..Nkx..p...S...4......a-.._2.lH.^...Z$.......G........f...zs.C..}...p!...G....c..Xq.}.....{R.y.......c&....tRNS..).YS@#q.}......^....Q.IDATx..Mo.@..AB....H.\|....N .......B.8p....".w.3......@.g?fvv.ww.6I.?...qs>Z..j.)..Z..m...uu.n..g=.v.u\|.XG.4;.c,!(g..l3+.s. j.V.s...o.../#.

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-.VeQ_.lE2pxGNWHOUYiZwwbLGk0IQ_iw1So-~A&gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	649
Entropy (8bit):	7.516032109054317
Encrypted:	false
SSDEEP:	12:6v/7iKmHREPbW6nw5tA+8LVYZZmsZP2qsZ/GKd2d0mmVqDLxDxlXYRqBZklwut4:Ilpw5l82ksZetNAqfVe9DxlXrBZklwV
MD5:	FE548BA0CE578BB71B19D698597A19F2
SHA1:	BC3E79C56F938E0A62EF302064B322CCD5B35231
SHA-256:	AB0E3C18CCDDD0DAC5FDDB8EE491AF2F1CA5F9DEB0089681A4BAC89B9F5B635B
SHA-512:	E9DEE5C91549FCA113FE4625FBC8767C8143D491E6F684E754F503F11DB72A306595E9697204B9A4E63C0B5F571F0FA2218A7E4F893760B54DA92C08DD0E34E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<......")@...KPLTE...6..5..6..6..6..6..4..6..5..5..2..7..6..:..5..0..5..6..4..@..6..7..4..6..rm......tRNS...?_....o/./...`....OO.X-I....IDATH.... ..# " .n[..IW.CU............._Rc.$...X..o...... V.7p...\|..na._..%+L.m..#Y."#...i..E-.Qo3.....eW.zi..&X.x:V0./^Z....;.z.......>P.....w.......>.....R.J.....+3(.y.o..9.h.w..P...fbNF...U....c.............*4XENG...q.>..s:.9j.....FNn..gCx..y.G%..x..!.d..D....gA^.k...).l.....2uU..Hyid.).(...\-..&...9N.<=.J..C.P.(.h.....!..T...Z...O..o.....Bh.qG6UM?..n.g.....W...%.!..WZS\...X...}.........g...g.G..R.3.l.......(......0.E......$...]u.e...d..C.5h.......IEND.B`.

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	3412
Entropy (8bit):	7.886999613438673
Encrypted:	false
SSDEEP:	96:vRzXAYT4bV0MgcLFNICWpJnA5ybcJ2fGaGi7B:ZfouMnFN3WpJCybma7
MD5:	04B104F4DECAB4A78449BDDE1B5D7D5F
SHA1:	C2C9E65420F94299FA7D4EF3701167818F42F7AE
SHA-256:	B709D4330DB8D76C4A3149387E725498B340F0538A26D498AF542C09DC8242C9
SHA-512:	A7B85D74DC836F3BA057E1D9600BF9C1BE74E3399A59A65C725ED07B73AC771380BAF099D30B3F90DF422C719718EA8D89AFE8F7B283D318C3A5E3D7D7CCCB48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/3950330566224995889/14763004658117789537?w=100&h=100&tw=1&q=75
Preview:	......JFIF..................................................."... ....+. 01(((..-11&0"'+&...........-"."'/0'(/(&2-&'(2&&''&-+'2'&&((&'-&&-&/&''&&'&-&&&'&'......d.d..........................................F........................!....1AQq..."#2a...BCRbr....Ss....$Ddt.....................................6.......................!1..AQa..q......."2B..#R.3b..............?...BT!...J.%B...P..BT!...J.(..3%...f. ......)W..........s3(k..%....[.S^X..~A-..]...(..P.7....8......\|.......J->.'.H..........:..>TEGI.?.(.S...u......S.O..J....H...R.....j..P...;......K..@.\|...I9_..lQ:Cf..K3b.q.@.w....9.P.s..p.wSH3i....51.....:...Z.Z.......+.o.{7.u..Sp..R...y.y....Oq5f..3t..z#Q.....#...H.gp..)b...........M.7<.\..3c..6..-......2..jq..}..%....9.ZoD'........_@...y&\|L{.9."..u.[.#w.....4>.c.]. .`.a......M.....v=q...o..X..6.#k.$w....\|.$*).6..:.c..4\|v..y.}+5..i.TaZK.9..M.= .{EA..T..i.6W..qS...D...b........2......[.2Y^..E...Y.q....y.Q3....x.f}AU..B..yW...@\|.[j.....h}lQov ..A....e.

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2346
Entropy (8bit):	4.765973250102129
Encrypted:	false
SSDEEP:	48:M/IL17z/GS6hD6EJvxi1JU8+mDE8J/QcGbum1q+mgJKxkQDW+mVTY5Y:MwRvGt/6U8FTm1qblyx
MD5:	44FBC166C94A965E001E1688B2870E72
SHA1:	5D8DA348FCD30E403246F836FE3607478FB57504
SHA-256:	096FD12197CD5F5ACFFEA61D3EC1991FB2AF8F0EE8990A8B59E53603B7DEB90B
SHA-512:	F9360B4A06AC4F169AE3EC6B09CA813AD813CC2A2036A6F9925E82FDC52A7492BC868D593EA5222F7D603F52E66CC2FDD43C4D92F66E87A2CDC3D4642B32FC4E
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="171.19" height="24" viewBox="0 0 171.19 24"><title>techcrunch</title><path d="M65.78,9.4V20H61.9V9.4H58V6H69.7V9.4Z" transform="translate(-0.81 -1.02)"/><path d="M78.76,15.8H72.6a1.66,1.66,0,0,0,1.78,1.68,5.48,5.48,0,0,0,2.72-.74L78.48,19a8.15,8.15,0,0,1-4.28,1.2c-3.16,0-4.9-2.24-4.9-5.46,0-3.62,2-5.48,4.8-5.48s4.68,1.9,4.68,5.8A6.73,6.73,0,0,1,78.76,15.8ZM74,12c-.82,0-1.28.56-1.4,1.6h3C75.42,12.5,75.06,12,74,12Z" transform="translate(-0.81 -1.02)"/><path d="M85.46,20.24c-3.08,0-4.92-2-4.92-5.5,0-3.22,1.64-5.44,5-5.44a4.4,4.4,0,0,1,4,2.4L87.1,13.58c-.5-.92-.84-1.36-1.62-1.36s-1.38.92-1.38,2.58.5,2.52,1.48,2.52c.68,0,1.16-.38,1.82-1.36l2.28,1.78C88.46,19.54,87.32,20.24,85.46,20.24Z" transform="translate(-0.81 -1.02)"/><path d="M97.74,20v-6c0-1.36-.46-1.72-1.2-1.72s-1.22.36-1.22,1.68v6h-3.6V6.88l3.6-1.44v4.78A4,4,0,0,1,98,9.3c2.3,0,3.4,1.54,3.4,4.3V20Z" transform="translate(-0.81 -1.02)"/><path d="M110,20.24c

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	234
Entropy (8bit):	5.183564838104692
Encrypted:	false
SSDEEP:	6:tnr9jUNA4mc4slY+FEgqRL7eVmqDDRB51RME:tr9jSS+FEgqZSmUB51RME
MD5:	26BB2E534D92FB7ED295B5E055CE0BE6
SHA1:	D270E9264F81915AB05681FE69C14AE74C599241
SHA-256:	F52A0C7D9FA7AE8E45916C491AE7193F9A1E289F128F05264122C53D8DA970DB
SHA-512:	0FA3737470C75A83C6715D5201017544C423DBBD8A2CDDD1B3B1E4FAC42143129507751448C347A35134AFB3FF7CB43BB530F8026ABC281BD344CBD8ACE860E0
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/download/additional_content/flag.svg
Preview:	<svg width="100" height="89" viewBox="0 0 100 89" xmlns="http://www.w3.org/2000/svg"><title>Artboard 2</title><path d="M45.292 44.5L0 89h100V0H0l45.292 44.5zM90 80H22l35.987-35.2L22 9h68v71z" fill="#394EFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/product/2x/translate_24dp.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	419
Entropy (8bit):	5.159793519581347
Encrypted:	false
SSDEEP:	6:tI9mc4slzvo/Ujagux0+BN5PFXAv50BU8R+yfQdbmItPUPGMWSjs5SjPUvEnUtB:t4po/yMtFXJU3siboGMWdHEnEB
MD5:	422B4B28F80C1BA0A09F7BBE30BEE39E
SHA1:	AF65D5FFAC9B41D39588C49A303283F946598A5F
SHA-256:	DC3FDE586E82046749F5690C97512F0A92CD3F29C1DCC07368935CF3C26859E4
SHA-512:	BB1B4FE6B66992E668F2974F56606CE00DF3BE1B22155F2904F275C2B9F14FEFCE5B68DB17EE3C9A32C3AA72F4F5D3D5C4F8F6025EB6CF00D6D410BE8A15885D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>features-svg ready</title><g id="ab15"><path id="folder" class="cls-1" d="M80,84H35a6,6,0,0,1-6-6V42a6,6,0,0,1,6-6H53l6,6H80a6,6,0,0,1,6,6H38.68A3.94,3.94,0,0,0,35,52V78l5.69-21.24A3.71,3.71,0,0,1,44.27,54H87.83a3.71,3.71,0,0,1,3.58,4.67L85.82,79.53A6,6,0,0,1,80,84Z"/></g></svg>

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	37035
Entropy (8bit):	4.925648658318897
Encrypted:	false
SSDEEP:	384:wtcGGhB6/eFMm3lnAxCpph5wYgr6b8MdeIG6uXg:jbH11m5rgL
MD5:	FAC9F3F3AD16BF60363BA05B27AF4403
SHA1:	DC0D08CD0C3ED7B286064861CC2241C1DA78827A
SHA-256:	1FDD0B259B84F4EC7478D7FADABF0514DC8952AE2CF24DFA9520CD6475B91A7D
SHA-512:	CAC1266ECEE200CAB6D88A57438479DE26D025822946F36FEC7EE5428E149CA545E085A0FB7F89AC87D775F39AF309D57E6C6C11E0163C5892DB40020E8B37D6
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/icons/svg_dark/icons_sprite.svg
Preview:	<svg.xmlns="http://www.w3.org/2000/svg".xmlns:xlink="http://www.w3.org/1999/xlink".width="1656".height="24">.. Define SVGs -->. <defs>. search -->. <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <path d="M18.65,17.03l-3.67-3.68A5.942,5.942,0,0,0,16,10a6,6,0,1,0-6,6,5.9,5.9,0,0,0,2.72-.65l3.81,3.8a.942.942,0,0,0,1.32,0l.8-.8A.942.942,0,0,0,18.65,17.03Zm-6.99-2.74A4.537,4.537,0,0,1,10,14.6,4.6,4.6,0,1,1,14.6,10a4.5,4.5,0,0,1-.64,2.33A4.6,4.6,0,0,1,11.66,14.29Z"/>. </symbol>.. sort -->. <symbol id="sort" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <rect x="11" y="6" width="10" height="2"/>. <rect x="11" y="10" width="7" height="2"/>. <rect x="11" y="14" width="4" height="2"/>. <polygon points="8 6 5 6 5 15 3.05 15 6.5 18.45 9.95 15 8 15

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2880)
Category:	downloaded
Size (bytes):	65702
Entropy (8bit):	5.5822704868839415
Encrypted:	false
SSDEEP:	768:mqXslQf+cypxrsQZ1ckkn5mITMnBdK05pKqnplSfAqbKko1hw1BZ:mIslwlypXZ1cB5mIonBdDDn9qbKFLwF
MD5:	DF09C6DD7238FBAEBFEC480C12F7422C
SHA1:	40983142463245704F7F883FEBF8A4A3346AF014
SHA-256:	61FCCFDC6707E6432998DA73D67D285FAD858D68D59C9EB2657930772FB2CBD9
SHA-512:	05667E4B558486A561D3E5620D4A9C5B6012D4F628887072EFC351EDD585B3CC6F029C65F58C5CA4E60F7738EB53B846D02DB4743ED47F5B066175AE98EA07A0
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/rum.js?fcd=true
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),p={},fa={};function r(a,b,c){if(!c\|\|null!=a){c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function ha(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in p?f=p:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?ba(p,d,{configurable:!0,writable:!0,value:b}):b!==c&&(void 0

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1673), with no line terminators
Category:	downloaded
Size (bytes):	1673
Entropy (8bit):	5.120768988867867
Encrypted:	false
SSDEEP:	24:IZEIlCMpRmvfR1WnoYmWOOgWTypdUrWA9WBrIOqusmksySRULh7LjXwL/u0MFC5l:gEIU+2TWnfjOOgWTY247kTSU9Xau05H
MD5:	F00A1DED89B7210FA37E80858E42B683
SHA1:	8DE42CF7DFB40D55F16B19AE79B5E8E1D148A7F0
SHA-256:	2149609073953A523EEFE7112EEEEADBA8CFB4DE700991373A4B86D530237730
SHA-512:	50A6C38E641FCC36CAB972648F398382A5409F1107F46D0F0D1DC9D88DBFCEBE1EC119D0AC2479247892819D1C69AC09319BC5A534BAE7E400B6D3D9CA7C4F2B
Malicious:	false
Reputation:	low
URL:	https://go.ezodn.com/detroitchicago/raleigh.js?gcb=195-8&cb=7
Preview:	try { !function(){var i;__ez.aucep=(i=[],{Add:function(t,e){if(__ez.dot.isDefined(t)&&0!=__ez.dot.isAnyDefined(t.getSlotElementId,t.ElementId,t.AdUnitPath)){var _=parseInt(__ez.dot.getTargeting(t,"ap")),o=__ez.dot.getSlotIID(t),d=__ez.dot.getAdUnit(t),n=t.AdUnitPath.split("/")[1];if(__ez.dot.isDefined(o,d)&&__ez.dot.isValid(e)){var a={type:"auction",impression_id:o,domain_id:__ez.dot.getDID(),unit:d,t_epoch:__ez.dot.getEpoch(0),auction_epoch:e.t_epoch,ad_position:_,country_code:__ez.dot.getCC(),pageview_id:__ez.dot.getPageviewId(),bid_floor_initial:e.bid_floor_initial,bid_floor_prev:e.bid_floor_prev,bid_floor_filled:e.bid_floor_filled,auction_count:e.auction_count,refresh_ad_count:e.refresh_ad_count,auction_duration:e.auction_duration,multi_ad_unit:e.multi_ad_unit,multi_ad_count:e.multi_ad_count,is_rl:e.is_rl,network_code:parseInt(n),data:__ez.dot.dataToStr([new __ezDotData("","")])};e.line_item_id&&(a.line_item_id=e.line_item_id),i.push(a)}}},Fire:function(){if((void 0===document.visi

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	344
Entropy (8bit):	7.112579199460549
Encrypted:	false
SSDEEP:	6:6v/lhP70wbCEBUiRqlkpNQ4K8UaayHTjpu13ABjp:6v/7ZCGRQkpS4K9abJy3G
MD5:	5D6A9042290382DB005F19EFD1D315C2
SHA1:	CEC7064B54AE5AB78487BD30F92A2555510E118B
SHA-256:	53B99E4BDE7498900885E58F9D6C383258F8A59B04389D6B54D3D4B89537B6F2
SHA-512:	48B4468088C9FC3B8D65A16651F0CDBB83EAB2D5BA1020BFE8A16028EB90B20E5B5A579C34EBC1ECA7D3AF21BCC4EF36BC41ED72B02C447C83F56C82963481C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;.J....gAMA......a.....IDAT(.R1..@..Z........,l..;.....A....hPDD...`r..A....M..-....UI..O.%.QB.[D....;.nA...:..^S.].....].B0..mH]..I..f.F./.4H... .g..*....C...Q..T..]..B...8..0....#...(..N.80\.t./.SA..i..O.N~2.B.t.....6..#.6.(.......w..... ....`..3.Q.....md.A._.O.mC.L........}O"...........IEND.B`.

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	5.264870788900711
Encrypted:	false
SSDEEP:	3:YA0fRGPRXN1/9BywT2I/9cXpZNmjVEHQMw14:YAmRAd1byqcZZR/J
MD5:	D5CE39E5E7A355423E28BA0CE48A663A
SHA1:	C46C7642DB466883243C921497ADED8900867C51
SHA-256:	8C3996D3081BA3F7207D860B8E1DDA0B349B7C0AEA72C996CD3AAB307DAFB3CA
SHA-512:	C586D083BBA85A43001ED6218E811C54E36DC4D7A111D8BFC836E946B5B07A6665D991FB6119B260705E0DA45BD7067D7F7F579AF84EEF9FB0AC84FD32D6AF2B
Malicious:	false
Reputation:	low
Preview:	{"esp":"eyJpIjoid2h1VkZzNDdTQnVtMXFNMjl1SjFIZz09In0=","i":"whuVFs47SBum1qM29uJ1Hg=="}

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (38783)
Category:	downloaded
Size (bytes):	65200
Entropy (8bit):	5.354983741853616
Encrypted:	false
SSDEEP:	1536:QBp1hta2Q9MqNmhzL5VPnltT56Icp2Q9MCc+XCpoN+Xk5LaLQBAi/LaLQBA2DE:Q/trhzL5VPnltT56IceoN+cLaLQBAgL4
MD5:	322345A0D026B7E05C6DEE206CD7C817
SHA1:	7ED2BBF8121FD86DC025D181B01EC50EB657F402
SHA-256:	21E1FC1CD4BAF2B873A174A8CC50B7FA0D711E2417FCB16C5CD16AB96254B218
SHA-512:	2DFB07CF7888BDEDC3A9517A8BBBD844D7512CE55EC985CC32630153EA06B782E55AA3D63134F4B18E04FC19BF8F92E54B19FB181E51649CD45250D3AFA48889
Malicious:	false
Reputation:	low
URL:	https://www.mediafire.com/login/
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"> <head>.<script async src="https://www.googletagmanager.com/gtag/js?id=UA-829541-1"></script>.<script>. try {. window.dataLayer = window.dataLayer \|\| [];. function gtag(){dataLayer.push(arguments);}. gtag("js", new Date());. gtag("config", "UA-829541-1", {"dimension1":"unregistered","dimension7":"legacy","dimension8":"\/20\/50\/100\/"});. } catch(e) {}. </script>.<meta name="robots" content="noindex, nofollow" /> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link href="https://fonts.googleapis.com/css?family=Open+Sans:800,700,400,300" rel="stylesheet" type="text/css"> <script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jq

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	986
Entropy (8bit):	4.577609893742807
Encrypted:	false
SSDEEP:	24:t4po/yLbbdNIZ4pGZURi9S2bai3UwhMVwhtpxZZEJ4CxWEZkm:VsbW4pGf9/NTMJ4cWEZ
MD5:	48F4D3CE124BFE86FED5D8946A83C38D
SHA1:	F9E38516283D36396DA526D690C1A7898E90480E
SHA-256:	A1910EE580F391ABDB4D8D184AE2F6DC85612505382DCBD4E5DBF3E4EBB461D6
SHA-512:	CBB78C6CB02DC2C1EA868DCEBCABA9867F00953D6BD9061F19F678675075EFBABF96C3E63E8B14AB749F0A10950D2939090898A23159A4DE6F87FDF23AEB98FD
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/tf_multi_upload.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab4"><path class="cls-1" d="M75.07,80.86a4.7,4.7,0,1,0-3.26-1.38A4.45,4.45,0,0,0,75.07,80.86ZM84.34,56.6a1.08,1.08,0,0,0-.33-.8L77,48.74a1.08,1.08,0,0,0-.8-.33H70.43v9.27H84.34ZM42.61,80.86a4.7,4.7,0,1,0-3.26-1.38A4.45,4.45,0,0,0,42.61,80.86ZM29.39,35.19A2.23,2.23,0,0,1,31,34.5H68.11a2.35,2.35,0,0,1,2.32,2.32v7h5.8a6.29,6.29,0,0,1,3.95,1.63l7.17,7.17a4.92,4.92,0,0,1,.81,1.09,6.57,6.57,0,0,1,.51,1.1,6,6,0,0,1,.24,1.34Q89,57,89,57.36t0,1.38q0,1,0,1.27V71.59a2.35,2.35,0,0,1,2.32,2.32,2.91,2.91,0,0,1-.14,1,1.36,1.36,0,0,1-.49.67l-.6.42a2,2,0,0,1-.85.22l-.81.07q-.22,0-.92,0l-.81,0H84.34a9.27,9.27,0,0,1-18.54,0H51.89a9.27,9.27,0,0,1-9.27,9.27,9.27,9.27,0,0,1-9.27-9.27l-.81,0q-.71,0-.92,0l-.81-.07a2,2,0,0,1-.85-.22l-.6-.42a1.37,1.37,0,0,1-.49-.67,2.93,2.93,0,0,1-.14-1V36.82A2.23,2.23,0,0,1,29.39,35.19Z"/></g></svg>

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:YKOHfY:YKOHw
MD5:	82380D1E263B6093F3C7535690FCDD75
SHA1:	022D91F218046AB2E61CAC1EB13D6A718F75DF2B
SHA-256:	4062EDAF750FB8074E7E83E0C9028C94E32468A8B6F1614774328EF045150F93
SHA-512:	180EA3CF6E7A00CB12ECFF7CE095B8CEF1921621DE681A64E5E53E3EFC0CF6053E557205F2BDB9B9D5AF4DE3D54C79D1C9B1C474B83897590C647B1E92D9C93A
Malicious:	false
Reputation:	low
Preview:	{"ok":true}

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4864
Entropy (8bit):	4.7995371960169155
Encrypted:	false
SSDEEP:	96:WH6k2MDRF81EHMGWw7AKh10LYiJgoc3bWGxH47CbadRi:+J2qRFxMlw1mLxO3bWl7CbadRi
MD5:	A68EB80F9FF04457F27E69FD6FAA2190
SHA1:	3D12633276DF14633A6B97CC2FA752EF448C5CC6
SHA-256:	23D0709D0D95C56DA4CC928592F25399E50529D77195CCF90F1D9A52F39B774E
SHA-512:	EA5E8DA60F5F7F0213C61892BC44B3D152136E55487C9E8FC787D8B31D9A8EB58EA1071B5B69532E2BED14E07FBCF12B44F660F4617BA9666B66FFD3AA870738
Malicious:	false
Reputation:	low
Preview:	<svg.xmlns="http://www.w3.org/2000/svg".xmlns:xlink="http://www.w3.org/1999/xlink".width="200".height="24">.. Define SVGs -->. <defs>. facebook -->. <symbol id="facebook" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M17,2V2H17V6H15C14.31,6 14,6.81 14,7.5V10H14L17,10V14H14V22H10V14H7V10H10V6A4,4 0 0,1 14,2H17Z" />. </symbol>.. twitter -->. <symbol id="twitter" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M22.46,6C21.69,6.35 20.86,6.58 20,6.69C20.88,6.16 21.56,5.32 21.88,4.31C21.05,4.81 20.13,5.16 19.16,5.36C18.37,4.5 17.26,4 16,4C13.65,4 11.73,5.92 11.73,8.29C11.73,8.63 11.77,8.96 11.84,9.27C8.28,9.09 5.11,7.38 3,4.79C2.63,5.42 2.42,6.16 2.42,6.94C2.42,8.43 3.17,9.75 4.33,10.5C3.62,10.5 2.96,10.3 2.38,10C2.38,10 2.38,10 2.38,10.03C2.38,12.11 3.86,13.85 5.82,14.24C5.46,14.34 5.08,14.39 4.69,14.39C4.42,14.39 4.15,14.36 3.89,14.31C4.43,16 6,17.26 7.89,17.29C6.43,18.45 4

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	264514
Entropy (8bit):	5.316458459897674
Encrypted:	false
SSDEEP:	3072:h5CUzGeT8CzRl+HDiC2SAP+hcX5xuJrWv0d9poGSG4R4R10u/oxBS:h5CSGeT5zdC2S4jjyWv0d9pR0u/oxBS
MD5:	300988FB5C87DFCB8CF9356182BB199F
SHA1:	D869AB0371069F5F308B925597489ADEEC4185BB
SHA-256:	864909EDB64A3E6DD9D7FDE79F064C6A23727F1A0CF6A10EEE863A97BD3689C6
SHA-512:	C2551542CFB92A71797421DD9802DCC488FF48CC91DDA380001AC67513BBD0E246BBAA0D9909F00ED7B52FE7C1889F946529D77AE5397B2AE9C0F8302B84C6B2
Malicious:	false
Reputation:	low
URL:	https://www.mediafire.com/js/prebid8.10.0.js
Preview:	if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else(function(){!function(){var e,n={35706:function(e,n,t){t.d(n,{Pd:function(){return d},Th:function(){return s},_U:function(){return f}});var r=t(55730),i=t(64358),o=t(20265),a=t(34614),u=(0,t(78640).R)(),c="outstream";function s(e){var n=this,t=e.url,o=e.config,a=e.id,u=e.callback,s=e.loaded,d=e.adUnitCode,f=e.renderNow;this.url=t,this.config=o,this.handlers={},this.id=a,this.renderNow=f,this.loaded=s,this.cmd=[],this.push=function(e){"function"==typeof e?n.loaded?e.call():n.cmd.push(e):(0,i.logError)("Commands given to Renderer.push must be wrapped in a function")},this.callback=u\|\|function(){n.loaded=!0,n.process()},this.render=function(){var e=this,n=arguments,o=function(){e._render?e._render.apply(e,n):(0,i.logWarn)("No render function was provided, please use .setRender on the rend

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 728 x 90, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5776
Entropy (8bit):	7.923247326921248
Encrypted:	false
SSDEEP:	96:GE5xPgTfKN7zuJI6OnYFXG7ZDw5UV96F7DO+xuoM5MenvALYwT+Ojcdn0kLZtDZQ:GE5RFNHJWdAEq+ooMVvqDcdn0kLS
MD5:	51E10C7963D5446FAADE4B507392DDBC
SHA1:	924B6A5EE61028FE4309078B8174240F52028A38
SHA-256:	0A22333FF99E27FDE38DE534DDFB72136D47C4CB8C930A705B99D24A9BBE1A99
SHA-512:	F1F5B286C546B0E535DD020D61A8B7F34F0C1EABCD305AB976707E68BD6BCBAF6BA8626ED5F77B4D2A59B74E39B5E634464BF9280CC52AAA8BE386FEA27FF758
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Z............,PLTE...333...www................f$..........DDD......D.P./...."""UUUfff...................D..P......$........4.A...c.m$.2.....s.\|....p3..........___...S.^???G.Q....zA....m....\|...///.^.....V........$.....d.ooo.........s....OOO......."..w.$.0....M........S..5..c......'.9..C.v.}....a..............IDATx..w{...Ip...9$u.D....r.{...M.$[.g..~...;\....T.\b.?l..A...w.....3f.1c..}z....1f.<.d...~...o....'.1X.{{......S.../}k...........A.^.o.3...w.....N...~..".].M.Z.Wk.l...q=.K.\|.`.W.Oj..6.;#..v.[....B.C..m...kH...../sS.Fg.......7.......>...0><xQ.0....L.c`..M.{....=..`v6.n.;........o.a..d...A..BI-.m.._.......9.c[.5...A.....Fk8...nt.....@.m...j..d.....{.B.n..w....v........`G.\.8.[..y.Go.K\.M?.l...............$?.;.p.j.)`..Z......aC[.5..p..-..qJ.o./.....5qm....@..O.....'qo%.]......fn..........2....cp... K......=#....Vcp.....T.../.....{..&.../jCG..4-.l.N..Iv-`{....;......n.>.....y...E.l.sm....`.Z/..{.qc.

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpmt9r_1tz", last modified: Thu May 27 18:30:51 2021, max compression, original size modulo 2^32 24615
Category:	downloaded
Size (bytes):	7927
Entropy (8bit):	7.971132676007268
Encrypted:	false
SSDEEP:	192:9Kc5LTj0P5wffE5IkNpgSuBytYo5x17NS4UkRDS8hO86A8PE:9H+RwfpkNPV/T17NcwDSVFA8PE
MD5:	DF5542B88BC0E368C6999754A5B9E2BA
SHA1:	54F17142FAEB7C882FEE3BF67D537733E75E43AE
SHA-256:	B82DA9703A35C5436F9E47711F5B95D5357F02D590CB39DBA99355B9B073561F
SHA-512:	3BF0A63824E0D30C5A71CAE83DCEEE6E2A587FC5B9B7E81943E42DC448F9654998DA35A0BDC309B40D7D3BCFC3C95AC3D3322D1394B21542578FB2BA69EADC28
Malicious:	false
Reputation:	low
URL:	https://oa.openxcdn.net/esp.js
Preview:	....[.`..tmpmt9r_1tz..<.{.6..E.ueb..V.GJ....d7....mOQ}..IlhR%!;....73.H...t..].........7Q2Mo.....l.Ld.&.dw.a...]10.;....h.Q2f...,..'>,.L.....(.....~...K..(....N.0.....)..3.7q.=....k.]..g.$..wja....2/.K.^.\."&..Y...,].L.R.;...D.^..1.B.I.....(...{.t.y...sv{u.....dz&.(....^o..m9P7^..y.NW.p..uv.`et3.{.......{..se.......f....~.o...r.3'....^5R...4.4r.L.R........KlA=..<.W.t..W..0.G.PNt..,.,.\.N.X0Xi...r.0......../.2f.,A.%-L..lQA.4...dd.Kp't..\.picItCM.e...'.-...&1.R....2p...u..........F`.....i.+..H..../.%...Ec7d\|....F1..d.$.._...!."..i"..]1....r.e"O.k\|..HpqXQ.e.\...a..<..l.....0.&n:z..-{..T.0.^.\...{..r...i.9_q'....`.e..F.....j..4..V0V....a..\|b..x..U}.p....UJ.:.. ..E.&k.,h....1P.Uje.~@..4H.H...4[......8<.Wa~.L^..kO..B#KIQ....[...m.V.z...`.&.h..o.H.k..$.....r.Vqg.4.l. +j..._...^OTd...0. %.C./.Fu5.V.......M....0.w.%..{../.....+2=.a.K...bk... &+.Z0...._.(.g..B.{..e.Dy'....m'[%.v!e.L.e,$X+.A`...}.AF..C..#E-s%."..)h... .....z....1p..i.q....9......%..W

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=0e8893f90b606c9c5d33f1be&gdpr=0&gdpr_consent=&source_user_id=3643551440069563451
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	131
Entropy (8bit):	5.262084884511865
Encrypted:	false
SSDEEP:	3:VfTVfX0SRE9SMgDNkmlJHKe+F8GJHgvHJH/MALG/FeHkQrLXf+yIn:BdXdREU2qJscVBa/LQrxI
MD5:	05A145CACBADCA091858BD189A96456F
SHA1:	1454B35A0D8A84BF5165E358D8472252D4F6C090
SHA-256:	3D41B5ECCB6D46DE2253C6C225A6AEF2009F266FC4180385B9D1AD17C19E7329
SHA-512:	4D18312FFCA910EB8D7AFAD16655EFABEACD7554B6CA9597BED0398C9874F9BC8FA084AA136292B35CF803622A6C66A8F24C932020F7B6B8B7743E5EF58212A8
Malicious:	false
Reputation:	low
URL:	https://ad.crwdcntrl.net/5/c=3722/pe=y/callback=g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback?33408082
Preview:	g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback({"Profile": {"tpid":"","pid":"","Audiences": {"Audience":[]}}});

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7191
Entropy (8bit):	4.84919166700648
Encrypted:	false
SSDEEP:	96:uZkQSFOAT0PQ7vQOjU7wHQGkn21b1b4X26YPAv8psVtTS4KmsJDO:YSFjZ7QOw7wHQGkn04GMv0sfAO
MD5:	5DEEC671444ACFB84FB89B020C8FFAA3
SHA1:	230153275C4C8D49B8D7FFD45D04A1D17C4998A6
SHA-256:	8699804EF32CCC3B40E409B12F7DD6BDC9463DCC49BDC41A60688A8203E71C7E
SHA-512:	CC70898488B961B71667466AD29EAAC6573BC1A4FC62D1799F7E7EA2D1D427635FB30441BCF057B99C2B6C1033584D06FE70970404308C6CB52F67B96BDE3E57
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#cce7ff;}.cls-3{fill:#ffdac7;}.cls-4{fill:#e2a688;}.cls-5{fill:#b2b7c4;}.cls-6{fill:#80c3ff;}.cls-7{fill:#b3ddff;}.cls-8{fill:#ffdb80;}.cls-9{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab2"><g id="color"><circle id="bg" class="cls-1" cx="95" cy="95" r="94"/><rect id="file" class="cls-1" x="89" y="18" width="24" height="30"/><g id="pic"><rect class="cls-2" x="104" y="22" width="5" height="5"/></g><rect class="cls-2" x="98" y="29" width="11" height="2"/><rect class="cls-2" x="98" y="33" width="11" height="2"/><rect class="cls-2" x="98" y="37" width="11" height="2"/><rect id="file-2" data-name="file" class="cls-1" x="145" y="55" width="24" height="30"/><g id="pic-2" data-name="pic"><rect class="cls-2" x="160" y="59" width="5" height="5"/></g><rect class="cls-2" x="154" y="66" width="11" height="2"/><rect class="cls-2" x

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65386)
Category:	downloaded
Size (bytes):	441821
Entropy (8bit):	5.499428895441287
Encrypted:	false
SSDEEP:	6144:AEEySk7DGM3/JmGCbMo0lJNEZq8VKfzGeTjBjmW3SJ307:AseMVGZnIfDBjbkU
MD5:	215B1CE47FF4A077F99C8184CFA83D00
SHA1:	1CE5DAAA88B96D37B996D95B396CADEC2E89B521
SHA-256:	108CDB682E1D256BA58174D96775EC12FE2E9515FFA2CA7EDFFF49343A4D97EA
SHA-512:	01A0EF0D70B45DE9963806D6337759740D05DEA41D77A8FBE8837440469AC58993CEF00722082391B10CF06846EDC9FD5F45F65C2FD66BF1858EE46AC07CCDD3
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202312060101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 .*/ .var ca,ea,ha,ja,na,pa,sa,va,ua,wa,xa,za,Ba,Ca,Ea,Ga,Ka,La,Ma,Na,Qa,Xa,fb,ib,kb,mb,qb,tb,xb,zb,Db,Gb,Ib,Kb,Lb,Qb,Sb,Rb,Ub,Vb,Mb,Wb,Xb,$b,ac,fc,gc,hc,ic,jc,kc,oc,pc,sc,tc,uc,wc,xc,Cc,Ec,Bc,Gc,Ic,Kc,Mc,Nc,Oc,Pc,Qc,Rc,Tc,Yc,ad,bd,cd,Wc,dd,Vc,Uc,ed,fd,gd,hd,id,jd,kd,nd,md,pd,qd,sd,wd,xd,zd,Ad,Bd,Dd,Cd,Jd,Ld,Kd,Nd,Md,Od,Qd,yd,Vd,Wd,$d,be,de,ee,he,ie,je,ke,ne,oe,ae,pe,qe,se,te,ue,ye,ze,Ae,we,Ge,xe,He,Me,Oe,Qe,Se,Te,Ue,af,bf,cf,jf,kf,mf,nf,of,pf,qf,sf,uf,vf,yf,zf,Af,Df,Ff,Hf,Jf,Lf,Nf,Qf,Rf,Sf,Tf,Vf,Wf,Yf,Zf,ag,cg,dg,eg,fg,ig,kg,og,mg,sg,tg,ug,qg,rg,vg,wg,xg,Ag,Bg,Gg,Hg,Og,Pg,Sg,Wg,$g,ch,eh,gh,hh,ih,jh,kh,lh,nh,qh,rh,xh,Eh,Hh,Kh,L,Lh,Rh,Ph,hi,ji,li,mi,ni,si,vi,Ei,Hi,Ji,Ii,Qi,Ri,Si,Ti,Ki,Ui,Li,Wi,Xi,Zi,$i,bj,aj,dj,ij,gj,jj,sj,vj,nj,oj,wj,zj,xj,Cj,Dj,Ej,Hj,Ij,Nj,Oj,Zj,fk,dk,ek,kk,ok,qk,rk,sk,uk,yk,Hk,Bk,vk,Qk,Ok,Pk,Sk,Uk,Xk,P,Zk,$k,al,cl,el,fl,nl,ol

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (693)
Category:	downloaded
Size (bytes):	732
Entropy (8bit):	5.250407629492537
Encrypted:	false
SSDEEP:	12:90XGMwSj3sjw7oZcJsmNvc5Ly8tBCt8tBC0ZftBCY+NI51XzyrAP/eemHrEc7tEc:9C6SjXsMiCIC0Z/CjNIr2rAHeDwcxEMB
MD5:	E6147523B7396AAD764A752DFC6BE7F7
SHA1:	22B6719BFB0FE1AAAD21FB3511F130E83839AB56
SHA-256:	A5230196DF9A4E9F6382C504668862EFC8E25C1EC093C7DC997FBEDB4B3EC54E
SHA-512:	B4398AECFCE57041267675D8B208E903B2DF7735E00E17875AE17B84FF7BD9019888A8B1EF066E4701E297063FB51DAC8560858858C90C7FB2B5B4C6DB4126C0
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js
Preview:	(()=>{const o="pubcid.org";function e(o){return o?(o^(window&&window.crypto&&window.crypto.getRandomValues?crypto.getRandomValues(new Uint8Array(1))[0]%16:16*Math.random())>>o/4).toString(16):([1e7]+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g,e)}window.googletag=window.googletag\|\|{cmd:[]},window.googletag.encryptedSignalProviders=window.googletag.encryptedSignalProviders\|\|[],window.pbjs=window.pbjs\|\|[],googletag.encryptedSignalProviders.push({id:o,collectorFunction:function(){return new Promise(((n,t)=>{const i=pbjs.getUserIdsAsEids().filter((function(e){return e&&e.source==o}));let r=i?i[0].uids[0].id:e();window.localStorage.setItem(o,r),r?n(r):t("Setting local storage failed")}))}})})();.//# sourceMappingURL=pubcid.min.js.map

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.css?s=1&k=vpi5heu&ht=tk&f=47864.47865.47867.47868.47869&a=45407236&app=typekit&e=css
Preview:	/**/.

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	37035
Entropy (8bit):	4.939323707654456
Encrypted:	false
SSDEEP:	384:wtcGGhB6/eFMm3lnAxCpph5wYgr6b8MxAc6wMFW:jbH11m5rgx
MD5:	78BA220259933F24DC696A3B1E085444
SHA1:	39C72D416A8564F5C2D9CFEE8C9DDD17CEA17807
SHA-256:	7BA1BC2084DEF769E77A7DBF97CD91D68FE6C6D55B5D183A7D36630DA8DA2B02
SHA-512:	B7622AF8523D9A31BA20AA960745E2A6DF4D1583B940A94C8380CF1D802ABFBFB1F183927DD457280F8F9477AFCF670BA17B80EB8F03884A867638F251AC2525
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/icons/svg_light/icons_sprite.svg
Preview:	<svg.xmlns="http://www.w3.org/2000/svg".xmlns:xlink="http://www.w3.org/1999/xlink".width="1656".height="24">.. Define SVGs -->. <defs>. search -->. <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <path d="M18.65,17.03l-3.67-3.68A5.942,5.942,0,0,0,16,10a6,6,0,1,0-6,6,5.9,5.9,0,0,0,2.72-.65l3.81,3.8a.942.942,0,0,0,1.32,0l.8-.8A.942.942,0,0,0,18.65,17.03Zm-6.99-2.74A4.537,4.537,0,0,1,10,14.6,4.6,4.6,0,1,1,14.6,10a4.5,4.5,0,0,1-.64,2.33A4.6,4.6,0,0,1,11.66,14.29Z"/>. </symbol>.. sort -->. <symbol id="sort" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <rect x="11" y="6" width="10" height="2"/>. <rect x="11" y="10" width="7" height="2"/>. <rect x="11" y="14" width="4" height="2"/>. <polygon points="8 6 5 6 5 15 3.05 15 6.5 18.45 9.95 15 8 15

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:eob9inY:pb9L
MD5:	31F3877D80DD5441446CA9A2D86968B9
SHA1:	70ACDEB1ECC1ABDF2A7D97F51D8EEACF5D8FED84
SHA-256:	493B04DA12C6AE438D73EEADDCE294DBAE4294A4A066CA4269AEBB9ADFDF724A
SHA-512:	632E7C9D2DE3E115956BD53E20C05FB87A5B99AC3CCEAEBC4EA0C81BF62C6A387EB8EA5034E114AE537192D6116F0011ECC5EDA14660D9BFC0AF895640F2E7A3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlSht1nS9Hm6xIFDbi6quASBQ2UkJL6?alt=proto
Preview:	ChIKBw24uqrgGgAKBw2UkJL6GgA=

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.406285951794881
Encrypted:	false
SSDEEP:	24:4Hksksq5/Jz2pRNrBZJuvu8goqc0ioNhc+T4+mI:2kHz2bNrVENtmN+r+j
MD5:	2D0B2B5F56EB0937775205E77FBCBCC9
SHA1:	0A8A00284F825B6B8DD84BFE212E91F504C81FE3
SHA-256:	5D7CF8E51B794C6CD0189EF8B349CEF2B79A779C5864E241FD3B94993651988F
SHA-512:	92CABE3F5AB791CE172CB0EA6AE70903B237C156B582B17AFA5E303B6781E7057CD4ED63A42B2C6033A81FCA69F297A82A8A59B53A53AE17AAE660054B56A870
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="Tnr3TCYl2-zMN1GH6zLjng">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1703780572299');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x500, components 3
Category:	downloaded
Size (bytes):	15440
Entropy (8bit):	7.396585899789576
Encrypted:	false
SSDEEP:	384:DM7uOi3sGM94x4aXnygnqioE0L8k8k8k8uwp0bWBckxPv0n:gyDcGe6ieoEetttDVbgckxHK
MD5:	FD86F279BD1733FC641882EDD44AB5D0
SHA1:	575D10B03DEC1D135738F6D5AE57C70A324C7CB0
SHA-256:	BFD85AF5FE194DA15D0DFE6014AE2353E981642449FA434CC8719E830F54B0BE
SHA-512:	B512FD1356AF5FA05FE406A9E6AACF66ABB8728D0DD809C04690BA4A31B65431AD4D319C7768D9A0E7030DB68FFDC8BEF82F9ACC2CFF7EB9F0449AF0062E2F8F
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/9119114932533656539/2076313506083323656
Preview:	......JFIF..............http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2023-11-01</Attrib:Created>. <Attrib:ExtId>8fc3b0e4-5d9a-4603-a9f1-965c7ea4aeb5</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>PDF Manipulation (1200 x 628 px) - 9</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:pdf='http://ns.adobe.com/pdf/1.3/'>. <pdf:Author>Mor Dov</pdf:Author>. </rdf:Description>.

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 451 x 289, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8839
Entropy (8bit):	7.970302636221506
Encrypted:	false
SSDEEP:	192:gAlphMbizzEq3WkCLt7FbX5vLroatIMwe1SLyM9r1eahFiw:gM80zPmkCLPX5NWMw+HM9YmFv
MD5:	1AB56B61B95A7B6A66C9B94E8AF41062
SHA1:	1C7CD9E7C99494A0BA74CAB8BA8DE7D19432330E
SHA-256:	614FE080C98515F3C6E8F931B1A768EC85C3CB1023EEA4F0A5CEF57C38BD8AC3
SHA-512:	B0278F8C0414D93D790AB4F0842BBAED54653DD23761CAC25FD3369D16A60E19A1419F74ECAAB25FC2B3B5BBC5D1A38930A0BF0075BBD2C641048BC9496E49C8
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/press/ios_v2.png
Preview:	.PNG........IHDR.......!.....4.;e....PLTE......+l.+j................,j."""................T.........d..n.........[..............;;;.^....333....."d....s..(g.zyz...*ZZZ...h..eeeooo.........BAAPPPR..HHH]......}.....p..6A....D}...8t.@M.QT........t.ee...sWW....B..#7.5>ugQbwWY......jJ;..4...........X.....!:IDATx....j.0........}.Kc.B ....!........SG..-....8`CE.eF.]!""""""""""""""""""""""..yZ...j3.p..}.....Jk..X...c.c.+g.^/I....ZW...3..V...n..^b.^..z+o#....a#tm.E.~)...x:^E...)\|..`?.xuM...gV....e.../.t-$...0.6.91........?../.^e.... .(..,aSq..?....b.k....j...toz...)........Ro....fY?u+L........!.z...'\Q8.........;...P.0..FR5'.Z...HS5.8..?.4...L.L'V...k.qZVI...'.....&...z.!.'n+....5...\..j7f..y..w3=X..c......b;.Re.7.:.fo...d..L.C......5......K..Zx......>jH.7.....:"..X....NQ.._..e.o'..^?4.......yg...c....P.N`.p...P.&.D...f..W.h.f....G\|'.5.d.M...p>....z.....^.d..Jh.b....e..f...e.,.C,c.o....N.............)..f.^...f._.r.....F.*R./....L........ .....?

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4636
Entropy (8bit):	4.542399868072674
Encrypted:	false
SSDEEP:	96:4WJruxk18Ws8CKn4ToY8HFR0vGWwLMQtNUSt:4WJru0tFblRNp
MD5:	E09B5AF507BD602AD839B261FD897170
SHA1:	59375D9405912062F37F01EB6B68E1EF54899CE4
SHA-256:	BFCC5BC8242D357752657942690541BB3E4B907384AF1C56586F6466D7116DB2
SHA-512:	76121CD48C79D309E9D84892AA0C52E5A8456866F320EDB24DDF379A168795B1AD4B07AE1B304606DE0F773F52072184C33457D53F78623EC2EF1B0DF513AAEA
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/header/mf_logo_u1_full_color.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42">. <defs>. <style>. .cls-1 {. fill: #07f;. }.. .cls-2 {. fill: #fff;. }.. .cls-3 {. fill: #0e2866;. }.. .cls-4 {. fill: none;. }. </style>. </defs>. <title>mf_logo_u1</title>. <g id="full_color">. <path id="flame" class="cls-1" d="M21.9924,9.2571a51.46,51.46,0,0,1,9.3283.9546c2.9084.5369,5.8493,1.5476,8.8277,1.5384,2.2761-.007,4.1162-1.5889,4.11-3.5334s-1.8559-3.5149-4.1318-3.5079a13.3569,13.3569,0,0,0-3.8962.647c.3277-.2425.6626-.4753,1.0061-.6949a26.136,26.136,0,0,1,15.0372-3.634c5.616.2308,11.47,1.9781,15.7643,5.6908A19.8914,19.8914,0,0,1,74.6591,24.54,19.7456,19.7456,0,0,1,62.5323,39.6153a23.995,23.995,0,0,1-14.45.5274c-6.2135-1.57-11.64-5.0474-17.4846-7.5341A46.8579,46.8579,0,0,0,20.026,29.9293l.0571.0015a8.9447,8.9447,0,0,0,4.1139-.6975c1.7275-.8285,1.7225-2.8315.8214-4.2928-1.0708-1.7366-3.2282-2.4456-5.0923-2.9507A2

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1632)
Category:	downloaded
Size (bytes):	56115
Entropy (8bit):	5.347058442712683
Encrypted:	false
SSDEEP:	384:+bOClrswMZeq3X90nTHGOf0wsb9Zpq3X9NnKU8OhqqsJXZHq3X9HnkafOWJ3ssII:fu6EcgaOyMZaqOKp
MD5:	3526DDFD6B9686840DA6207D71C5D3AE
SHA1:	C5B7575A8CA61B1A5FE04CB3B1D9D2EF3F04D43E
SHA-256:	A4692A7234B95C9908D1A9068F1BC9191815A6B1D9E3B3B84AD12EE10CAAAAEE
SHA-512:	01F8310F3A086CED93710515E4C07B3E9B9D6C14220F954C3C9FD82FF881C7E98CAA7EBBE6EB036D8CAA47B301B1ADB863F14AAF5B96ADC41D7080E7DF693ED2
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	1.9733781811385676
Encrypted:	false
SSDEEP:	12:suZHtjTPH80V0wiAaxJLaj5jphDI3iSsfn:suZh5iAaxJLa5jpm52n
MD5:	B71C63AF25F44A21143174E24791FBFB
SHA1:	EA7F0627F790FF60A65EA35B59F2641BB8CE8476
SHA-256:	7942B4CE85D40498753EC1C9AC369B1F01B2BD4C9614061F6153BC8C15F8C7BA
SHA-512:	B6B75D19FB7DE0D473D2D65D5ED1BEFDC99F2B89B4568FA363DA793A042F27A9CA8E79DA62A263F76089E0ECF2B5A0A891E786868A60B77D9193A8C267BB22D2
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/lp/appstore/img/favicon.ico
Preview:	...... .... .........(... ...@..... .................................,h.@,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h.@............,h.`,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h.`....,h.@,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h.@,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h..,h

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x500, components 3
Category:	dropped
Size (bytes):	15040
Entropy (8bit):	7.560010885808356
Encrypted:	false
SSDEEP:	384:smKcccccccccccccccccccccccccccccccccd53UrgMn0kn2D3KCJQNzOY26aPLh:smKccccccccccccccccccccccccccccg
MD5:	4BD7EB195489D0CCAF5751060D8E8340
SHA1:	BA3B3AE434FB411FF2824CD837A4B4042FD16753
SHA-256:	B92C15AC3DDD3463FC449766DA3ACC277BCC160E6885F1BFCAFE7A95CDA37BE9
SHA-512:	69907AEE18C43F4F17B59A5BDE3F858A17B146476161380F581DEF4CAC25EC7F0B1E45542BE9D84543329717A23122E1268C8C4150DE36E8B5E3F8504F3DAF12
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.........................................................................X..".........................................[.............................!1.5AQUfqt....."Ra.....27rs....#34Bu....Sb....CDV....$%6ETcd................................6..........................Sq...!1A...34Q...25."#a...............?..`......................................................................................................................#.....f..n..LN.....`.....kw.K..b..arf.&a....}...~..h@V{C..=).6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}.....w...6.6....M......vs..}....

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2328
Entropy (8bit):	4.182306010965778
Encrypted:	false
SSDEEP:	48:VsJtMfLKhqLzkSexzkwvPFllx2/hq3oDVCUerVV4rr8WV4ronFeQ:6fml/eXP9SDer4r4NrUFD
MD5:	5A8E546A9C24B13C99492E0DAF1400A7
SHA1:	C87F3EB17097681E424C6F4D2C5E80BC8E51F571
SHA-256:	3698212F73F5E3B3231EFEA40245732FAAA63064016BE0481021100F109A1878
SHA-512:	A83EDC6D4E009EC01575D08D1C8A7C5B91A57942F67589C8693EDF8B0CF595B26E7F55124D9B42C867C05414D63103E1190AAF05D4A49CCE7FB0FB6A8F655F13
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab7"><path class="cls-1" d="M64.41,37.29V82.71a5.76,5.76,0,0,1-5.68,5.68H36a5.76,5.76,0,0,1-5.68-5.68V37.29A5.76,5.76,0,0,1,36,31.61H58.73a5.76,5.76,0,0,1,5.68,5.68ZM60.15,75.62V44.38A1.44,1.44,0,0,0,58.73,43H36a1.44,1.44,0,0,0-1.42,1.42V75.62A1.44,1.44,0,0,0,36,77H58.73a1.44,1.44,0,0,0,1.42-1.42ZM51.64,38a.63.63,0,0,0-.71-.71h-7.1a.71.71,0,1,0,0,1.42h7.1A.63.63,0,0,0,51.64,38ZM49.88,85.22a3.54,3.54,0,1,0-2.51,1A3.42,3.42,0,0,0,49.88,85.22Z"/><path class="cls-1" d="M89.45,78.68a13.51,13.51,0,0,1-1.72,3.5q-1.81,2.74-3.6,2.74a6.48,6.48,0,0,1-2-.45A6.19,6.19,0,0,0,80.05,84a5.4,5.4,0,0,0-2,.46,5.06,5.06,0,0,1-1.85.48Q74.09,85,72,81.34a14.35,14.35,0,0,1-2.06-7,8.31,8.31,0,0,1,1.58-5.24,4.83,4.83,0,0,1,4-2,9.32,9.32,0,0,1,2.48.42,9,9,0,0,0,1.93.42,7,7,0,0,0,2-.48,7.92,7.92,0,0,1,2.42-.48,5.12,5.12,0,0,1,3,.91,7.23,7.23,0,0,1,1.

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4950
Entropy (8bit):	4.466883692109707
Encrypted:	false
SSDEEP:	96:2yFDgI3XNXo2ottRRQ5f/I9Qqzk1rxNs/+riv:2y5z3Xlo2fMQeyi
MD5:	5EEA5589F938F7BF234C552FD6B3AFC2
SHA1:	DB03134FBEA14E3AFCEC9BA00FDB2A40983DBD64
SHA-256:	04F73A08D0D9C31DEA3E34949B3A3B10FE8C670BF8EDABA760EA9C3865203A22
SHA-512:	2432687A9285DA2CE58B12050F68F0630915D17983B74951BD229B6AE615FAC7D058B7EFB644D721216031EEA8747E6DE91D5951EABD227FC3DBD30D05DC6AFB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="237" height="145" fill="none" viewBox="0 0 237 145">. <path fill="#DADADA" d="M0 0h237v145H0z"/>. <path fill="#F5F5F5" d="M7 24h223v114H7z"/>. <rect width="144" height="24" x="47" y="34" fill="#D7D7D7" rx="2"/>. <rect width="143" height="23" x="47.5" y="34.5" stroke="#000" stroke-opacity=".08" rx="1.5"/>. <rect width="76" height="19" x="81" y="107" fill="#C9C9C9" rx="4"/>. <rect width="50" height="57" x="19" y="69" fill="#D7D7D7" rx="2"/>. <rect width="49" height="56" x="19.5" y="69.5" stroke="#000" stroke-opacity=".08" rx="1.5"/>. <path fill="#fff" d="M117.347 50l-.352-1.338h-2.319L114.314 50h-2.119l2.329-7.168h2.574L119.456 50h-2.109zm-.752-2.92l-.308-1.172c-.072-.26-.159-.597-.264-1.01-.1-.414-.167-.71-.2-.89-.029.167-.088.44-.176.821a70.85 70.85 0 0 1-.571 2.251h1.519zM126.292 46.28c0 1.19-.329 2.109-.986 2.753-.655.645-1.576.967-2.764.967h-2.31v-7.139h2.471c1.146 0 2.03.293 2.651.88.625.585.938 1.431.938 2.538z

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1132), with no line terminators
Category:	downloaded
Size (bytes):	1132
Entropy (8bit):	5.216696103765718
Encrypted:	false
SSDEEP:	24:bQvG2WfqwufP8zySRZT7GgtCRxsXP/u0MFC5Nz:baXhSIgtCRxsXnu05H
MD5:	F30B2B0AFDA27D162333658F6676C555
SHA1:	15027022E5F19C38E184050B7BB8F0C4B2CD849F
SHA-256:	671C9364F35B1A7EF0F50CB98B0CC36CBD6ACB045E51C304DAA97F6732C4AD33
SHA-512:	70DCDD557D348037FD767E04D425DDDC4D5053F250D71AC13775D9A2B3E050DFBDD4993B6A5F7D8A1C0024A062CE3A9A1880DB8C32CA91AE746114E288435BBB
Malicious:	false
Reputation:	low
URL:	https://go.ezodn.com/parsonsmaize/mulvane.js?gcb=195-8&cb=6
Preview:	try { __ez.bit=function(){var i=[];function e(e,t){__ez.dot.isDefined(e)&&__ez.dot.isValid(t)&&i.push({type:"pageview",pageview_id:e,domain_id:__ez.dot.getDID(),t_epoch:__ez.dot.getEpoch(0),data:__ez.dot.dataToStr(t)})}function t(){if(void 0===document.visibilityState\|\|"prerender"!==document.visibilityState){if(__ez.dot.isDefined(i)&&i.length>0)for(;i.length>0;){var e=5;e>i.length&&(e=i.length);var t=i.splice(0,e),d=__ez.dot.getURL("/detroitchicago/greenoaks.gif")+"?orig="+(!0===__ez.template.isOrig?1:0)+"&ds="+btoa(JSON.stringify(t));void 0!==window.ezWp&&ezWp&&"undefined"!=typeof _ezaq&&_ezaq.hasOwnProperty("visit_uuid")&&(d+="&visit_uuid="+ +_ezaq.visit_uuid),__ez.dot.Fire(d)}i=[]}}return{Add:e,AddAndFire:function(i,d){e(i,d),t()},Fire:t}}(),void 0!==window.ez_bit_cmd&&Array.isArray(window.ez_bit_cmd)&&window.ez_bit_cmd.forEach((function(i){"function"==typeof i&&i()}));} catch(err) {var hREED = function(er) {return function() {reportEzError(er, "/parsonsmaize/mulvane.js")}}; typeof

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	444
Entropy (8bit):	5.2965543496154615
Encrypted:	false
SSDEEP:	12:TMHdjIMu5E4Bn/KY8XdU/gKSnXaV8U4VTQV2BVTDRey6X1Fb:2djx0L8tU/daaV8BVUVUVH8yEFb
MD5:	6C560D3B737954CBF3BFC2B909448443
SHA1:	11AE355BF71A04E43D9ED009E4DB57D306490CF8
SHA-256:	03C8D2DC7D985C3004FF2CD6D8148DD03560F37ED15EFDF6C2D7F4D771D0E599
SHA-512:	CFB37400E944F79AC46B9522E84427D375D3A859ABBE12754C181B60FA7365B50D2CB1F2000AEFB3AF5AE15FDC6560C893E708074F2132747A24E55AFA8320F1
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/icons/svg_dark/check_circle_green.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24" fill="#6c3"><path d="M12,2A10,10 0 0,1 22,12A10,10 0 0,1 12,22A10,10 0 0,1 2,12A10,10 0 0,1 12,2M11,16.5L18,9.5L16.59,8.09L11,13.67L7.91,10.59L6.5,12L11,16.5Z" /></svg>

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	209
Entropy (8bit):	5.117136451414438
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhgtwQR4Eo9kMt4iBokHsjfq9m:t4BdStwlEomMGAIf/
MD5:	5EA6F0338C2012A1EA0E0D18B9D661D5
SHA1:	2BB5E016D567E122CD9CF7DF31CF430E3AF6F06B
SHA-256:	066A1D5E23190D9C34E21C70C88A954FE3D151A4411E36FBA000D24D639E85F4
SHA-512:	1A67E861CA1E24487945ED6EFC068B17E8A293631605205655DD161460BCF907563ABA38E0E62BE975AEBE1D924A8D839F7AA632AE506FB0EC511823145FBCE3
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24"><g fill="#fff"><path d="M5 16h13v3H5z"/><path fill-rule="evenodd" d="M10 14.968h2.979v-3.989h5.029l-6.507-6.988-6.508 6.988H10v3.989z"/></g></svg>

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6642
Entropy (8bit):	4.74675213780431
Encrypted:	false
SSDEEP:	96:/HzQR38u1cXuAVf67ipnC4aRMWyOYaMVFUwbVKGHR5z:/H0RLWXuAVy7ECFMLOYaMVFjwGx5z
MD5:	57945A7C05FF07FAD6AEB6998557F239
SHA1:	44E3F0ED04438CFE73C8012C1533A7CE7B755BD4
SHA-256:	E22FE5109026DF550B18309203F2954F87E434B75C1D7C011B6FD05A33F636D4
SHA-512:	95803927A96151A67264F0A82707192AE980C4D4C1334755D821C4F55D30C93199C8059CBBBECA7112034854D3E069F0A494709AE23DCEFDB52DD54C61ED99AB
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/src/download_file.js?nocache=1680678097636
Preview:	function formatBytes(bytes, decimals) {. if (bytes === 0) return "0 Bytes";. var k = 1024,. dm = decimals \|\| 2,. sizes = ["Bytes", "KB", "MB", "GB", "TB", "PB", "EB", "ZB", "YB"],. i = Math.floor(Math.log(bytes) / Math.log(k));.. return parseFloat((bytes / Math.pow(k, i)).toFixed(dm)) + " " + sizes[i];.}..function makeRuquestForFile(url, callback, errCallback, progressCallback) {. var httpRequest = new XMLHttpRequest();. var reader = new FileReader();. if (!httpRequest) {. errCallback("Giving up :( Cannot create an XMLHTTP instance");. return false;. }. var startTime = new Date().getTime(); // Record start time.. httpRequest.onprogress = function (params) {. var loadedSize = params.loaded;. var totalSize = params.total;. var downloadedPercent = Math.round(loadedSize / (totalSize / 100));. var downloadingSpeed =. loadedSize / ((new Date().getTime() - startTime) / 1000);. var remainingSize = totalSize - loadedSize;. var timeRemains = Math.ro

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39591), with no line terminators
Category:	downloaded
Size (bytes):	39591
Entropy (8bit):	5.423402288373742
Encrypted:	false
SSDEEP:	768:DTbAKrL7fAVvNZzx2rgXMr3ADieLx+Eto:PkKrLcfsHrQDiAxpo
MD5:	E073E71ED7A44E6F9CDD72904FDA5940
SHA1:	00663A9CD1B46666876EF2B507FA56CA20DF183D
SHA-256:	E885BADFF253144E188588B5657E13CFA1135D4CD682053C9CCA02B83BAF1EF2
SHA-512:	799210F04639D033B73E43B6F49CC9CC58EAAC5CC0DD1C0C09919B59DD6F3AD0BBC5A180CFA46B62F87CBDA689922D8A7BAAE0BE25CFE647A9D34AC3CBB07447
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/16589/sync.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16589_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16589_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16589_a(a)}}var sync16589_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16589_c; if("function"==typeof Object.setPrototypeOf)sync16589_c=Object.setPrototypeOf;else{var sync16589_d;a:{var sync16589_ba={Sa:!0}

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30556)
Category:	downloaded
Size (bytes):	265778
Entropy (8bit):	5.556569731472283
Encrypted:	false
SSDEEP:	3072:X6dZAlCXWYd1jh4ypDDMpM5/hA9DfFWkpp9w1OhlaD64X:X6fXHrqM5/hA9DfYI9lad
MD5:	7877E408BD8399C1E8845D76897234C8
SHA1:	21C65E8179934B38A0564C8260B62CDE02493AF8
SHA-256:	BD93016396FB0AFD29C72B1F6136BA24DB8CDAACADA3C15383060CAB5B8F8471
SHA-512:	A68E4AF69D48A79FBD491919238192A00352019C10D828B68A4E1C84FD564D90D1ABBBB6BF72FEF8BEB306E11289D3825758FD00CD3F6809A1646227B7F6FEFA
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-53LP4T
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"173",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_useEcommerceDataLayer":true,"vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":true,"vtp_trackingId":"UA-86547571-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_ecommerceIsEnabled":true,"vtp_enableGA4Schema":true},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"userType"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_useEcommerceDataLayer":true,"vt

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15388)
Category:	downloaded
Size (bytes):	16148
Entropy (8bit):	5.5505998218085155
Encrypted:	false
SSDEEP:	192:6vxgzjL4gcdL8Duwh731PzzJ0qfpZU8n73J+BvZAqarRsbLb9OZLc9aU5NPL1yuz:6/hjwh7370qfpZU873JcxAh+j1QVEMti
MD5:	6F126634166BA22A25DB38B2537BA446
SHA1:	CD8A9A4FC09EE09C4E7747DEEA0DDC220E01E11C
SHA-256:	D920363AF3E8F84E9C6E997DF4F6ADC2CCC318FACF005123C33CB1435D2A8F26
SHA-512:	8617E60DC260AA1DA5C68528AFC340D47AD3DFF9D969C0334D25D0680572FDAED780C42073977F37D201DC34F3AB017DEE618CECC9D91006BC8DC10867179EFA
Malicious:	false
Reputation:	low
URL:	https://device.maxmind.com/js/device.js
Preview:	(function(){(function(){var m,p;window.__mmapiws=window.__mmapiws\|\|{};var w=window.__mmapiws,s=["Abadi MT Condensed Light","Adobe Fangsong Std","Adobe Hebrew","Adobe Ming Std","Agency FB","Arab","Arabic Typesetting","Arial Black","Batang","Bauhaus 93","Bell MT","Bitstream Vera Serif","Bodoni MT","Bookman Old Style","Braggadocio","Broadway","Calibri","Californian FB","Castellar","Casual","Centaur","Century Gothic","Chalkduster","Colonna MT","Copperplate Gothic Light","DejaVu LGC Sans Mono","Desdemona","DFKai-SB","Dotum","Engravers MT","Eras Bold ITC","Eurostile","FangSong","Forte","Franklin Gothic Heavy","French Script MT","Gabriola","Gigi","Gisha","Goudy Old Style","Gulim","GungSeo","Haettenschweiler","Harrington","Hiragino Sans GB","Impact","Informal Roman","KacstOne","Kino MT","Kozuka Gothic Pr6N","Lohit Gujarati","Loma","Lucida Bright","Lucida Fax","Magneto","Malgun Gothic","Matura MT Script Capitals","Menlo","MingLiU-ExtB","MoolBoran","MS PMincho","MS Reference Sans Serif","News Go

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (516)
Category:	downloaded
Size (bytes):	4745
Entropy (8bit):	5.207579006738011
Encrypted:	false
SSDEEP:	48:35Y2zQVJD221QG+YGwjGbMX6+GVvG1MGkMuGbG4GGMbxwFWGLwFOGZwFJGbMjGKO:pbzQLJmwEMX63u4MVMjMpMzMfY
MD5:	48469AB80336513092DD9D2F02CCDAE5
SHA1:	87405CABEB5862568E46AB2E2BCA65E7CCCAF86D
SHA-256:	ED2528A57D5C3AFDD59186A63F52CD2AEB7439C98A8914EB8B96A2935B5FE80A
SHA-512:	3478974B02F8B5479EDD5D9E4F5314962575F12B7F812CB5C884A5EF4F9A19A38F7E66B10FE8CFFEFDBBC33EB269C9ACDAB864496C7347FDE78411A7F7629E66
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/rgb4vnm.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . chennai:. * - http://typekit.com/eulas/00000000000000000000d792. * - http://typekit.com/eulas/00000000000000000000d799. * mundial:. * - http://typekit.com/eulas/00000000000000007735ee06. * - http://typekit.com/eulas/00000000000000007735ee08. * - http://typekit.com/eulas/00000000000000007735ee0d. * - http://typekit.com/eulas/00000000000000007735ee0e. . . 2009-2023 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2022-12-19 21:28:10 UTC"}*/..@import url("https://p.typekit.net/p.css?s=1&k=rgb4vnm&ht=tk&f=1499.1506.47864.47865.47868.47869&a=135778284&app=typekit&e=css");..@font-face {.font-family:"chennai";.src:url("https://use.typekit.net/af/9f7632/00000000000000000000d792/27/l?primer=7cdcb44be4a7db8

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://003671fc100d103863f0d450dc42fd7d.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	downloaded
Size (bytes):	666348
Entropy (8bit):	6.025146976412239
Encrypted:	false
SSDEEP:	12288:u9DJ6QES4a2savlVz9Uj69A7EDtQweypMI+44KHUd/9qmrH:u9DJ6QES4a2s4lVz9bmEDtQw2T44KHU3
MD5:	39E358E812C1CDB9DA1E589DA1F6DC52
SHA1:	754DAFF7A7CA2DC7199F784713A1B5404D0B259D
SHA-256:	F0EFACBEAAAFBDFCD8F4745D36D3A75C8E5C06C37C97561657524FEB3F61CEDD
SHA-512:	C5B82FA90A4271709EFC7D7DF8EE4FC512A0147D459BD96B160562A9C5369AF682601B590624B736B7E91FCA5D31641C8D681C9893C1B579348BCD293BD308F3
Malicious:	false
Reputation:	low
URL:	https://app.termly.io/embed-policy.min.js
Preview:	/! For license information please see embed-policy.min.js.LICENSE.txt /.(()=>{var e={5585:(e,t,n)=>{"use strict";n.d(t,{Z:()=>i});var r=n(2729),a=n.n(r)()((function(e){return e[1]}));a.push([e.id,'.gtKUfxFvcgbfv16IFDd2SA\\=\\={display:flex;flex-direction:row;font-size:1rem;font-family:Roboto,"Open Sans",Helvetica,Arial;background:#e6e7e8;height:100%;align-items:center;justify-content:center}.VNSHIqUbJfuwT5dXne3q5w\\=\\={display:inline-flex;flex-direction:column;text-align:center;background:#fff;border:1px solid rgba(255,255,255,.3);box-shadow:0px 0px 15px rgba(0,0,0,.15);border-radius:5px;padding:2em}.KYP2bJ2RfIm\\+8qcPjiAUDw\\=\\={font-size:1.25em;font-weight:500;margin-bottom:.75em;line-height:1}.hZLxz0Hy8A3B51dCWxKdLA\\=\\={font-size:.75em;line-height:1.75}.KGkXL6zenAcalbpalnjVzQ\\=\\={display:flex;justify-content:center;margin-top:1.25em}.KGkXL6zenAcalbpalnjVzQ\\=\\=>*{margin:0 .5em}',""]),a.locals={root:"gtKUfxFvcgbfv16IFDd2SA==",shadowBox:"VNSHIqUbJfuwT5dXne3q5w==",title:"KYP2b

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16002
Entropy (8bit):	6.019264773648205
Encrypted:	false
SSDEEP:	384:YibRHAnejmyEPbAopZmIHK+N0t6tsEM6BRz9GIBDxQbeh3vOuz:HtAn63CMEHqVqsEM6Lz9zNd/Ouz
MD5:	094E950A89F275E7749DC26DDF211A01
SHA1:	71733A6C7E1B84AD327697514B7E6B07EC7D3AD5
SHA-256:	FD94AB37CC8BB43988B594E3F97340B634EFFF6974DD14C4F5286667CBF4932E
SHA-512:	9A3B4A96BB66E7C73CB9EDF60E5C7996FDF1E27A30B35606E1B4EA0269728285299082CBD812244C7567F502031B5E7A42B5B5A8A05BD46CD021C26D4AB72911
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=m202312060101&st=env
Preview:	{"sodar_query_id":"26CNZffLD-SW28cPr7Ct-Aw","injector_basename":"sodar2","bg_hash_basename":"Dtt_-LR3WxpzwV0Gscftq1A_D1owstvxoTnWWhwY4Ow","bg_binary":"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

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.702819531114783
Encrypted:	false
SSDEEP:	3:H3L:b
MD5:	D2609A507B4E4DFED72D93843FB373D6
SHA1:	7FBE28723236FAA79ADC4ED06E831274F3F40A22
SHA-256:	764193986DA5C7B5AD9FDDA066DA2C950E3F4397DE7E99BCFBCD45E971B52B78
SHA-512:	CCFBA5DC89A88B00753EC15FFE23AF312C8269CD5FFA8EB6B546783ED1A45D40EA58571B27456E9E71747220DBDDD0CB8642C205A0990E5DC7857EA59DF9C802
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlPgW2Jrt6cPRIFDbi6quA=?alt=proto
Preview:	CgkKBw24uqrgGgA=

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (526)
Category:	downloaded
Size (bytes):	725
Entropy (8bit):	5.496169326583765
Encrypted:	false
SSDEEP:	12:2ebxkC6DVU4dxhwVVImH0pDgfCYKA2TN9g8I4imdOubmILNFL8BMnuxJxL8BMnut:2e2C6hHfhiVITpDMKzN9g8FOSmILNqBa
MD5:	CA991A89770A8A1C2F77EA4986AE94F5
SHA1:	B73C0EC9D36984DA3618106250B73DB3EE0F257B
SHA-256:	2982BE077AC5404C9F4DEE8994C02E00B670A160E2834ADFC0826917112419A9
SHA-512:	A4E30DF6777F3739A6E97AC46B5A2A31BB506A7FD986FD95C5D9DDD25E237CB3600E305C962F8480EDED47436C8E53531EE104345FEF495F01FC11D4B754D94F
Malicious:	false
Reputation:	low
URL:	https://google-bidout-d.openx.net/w/1.0/pd?plm=5
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://pr-bh.ybp.yahoo.com/sync/openx/8570cc0b-f710-e5a5-cdd7-7d2b6d928baa?gdpr=0"><img src="https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=4961d632-7b16-cc16-3c0e-e949faf68d03"><img src="https://match.adsrvr.org/track/cmf/openx?oxid=11b7aa4f-67bc-77ec-fc00-6bde92c546e3&gdpr=0"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=M2RkODc5ODUtYWVjYi0yOTQ4LWU5ZTAtMzE2NzU4Mjc4ODgz"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc">..</body>.</html>.

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4950
Entropy (8bit):	4.466883692109707
Encrypted:	false
SSDEEP:	96:2yFDgI3XNXo2ottRRQ5f/I9Qqzk1rxNs/+riv:2y5z3Xlo2fMQeyi
MD5:	5EEA5589F938F7BF234C552FD6B3AFC2
SHA1:	DB03134FBEA14E3AFCEC9BA00FDB2A40983DBD64
SHA-256:	04F73A08D0D9C31DEA3E34949B3A3B10FE8C670BF8EDABA760EA9C3865203A22
SHA-512:	2432687A9285DA2CE58B12050F68F0630915D17983B74951BD229B6AE615FAC7D058B7EFB644D721216031EEA8747E6DE91D5951EABD227FC3DBD30D05DC6AFB
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/basic-plan.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="237" height="145" fill="none" viewBox="0 0 237 145">. <path fill="#DADADA" d="M0 0h237v145H0z"/>. <path fill="#F5F5F5" d="M7 24h223v114H7z"/>. <rect width="144" height="24" x="47" y="34" fill="#D7D7D7" rx="2"/>. <rect width="143" height="23" x="47.5" y="34.5" stroke="#000" stroke-opacity=".08" rx="1.5"/>. <rect width="76" height="19" x="81" y="107" fill="#C9C9C9" rx="4"/>. <rect width="50" height="57" x="19" y="69" fill="#D7D7D7" rx="2"/>. <rect width="49" height="56" x="19.5" y="69.5" stroke="#000" stroke-opacity=".08" rx="1.5"/>. <path fill="#fff" d="M117.347 50l-.352-1.338h-2.319L114.314 50h-2.119l2.329-7.168h2.574L119.456 50h-2.109zm-.752-2.92l-.308-1.172c-.072-.26-.159-.597-.264-1.01-.1-.414-.167-.71-.2-.89-.029.167-.088.44-.176.821a70.85 70.85 0 0 1-.571 2.251h1.519zM126.292 46.28c0 1.19-.329 2.109-.986 2.753-.655.645-1.576.967-2.764.967h-2.31v-7.139h2.471c1.146 0 2.03.293 2.651.88.625.585.938 1.431.938 2.538z

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	186
Entropy (8bit):	4.712496643099425
Encrypted:	false
SSDEEP:	3:YGKrFegLuVGSJAI5fDa9dHEeyX9MWVAL9lE7p/MRAhsH5gwMvtWHMEYKQM2HtFn:YGKrFtyss2HqX9XqrE7p/Qim+wN3Y3Ms
MD5:	B6BA82C37C780E791616F8F4D5CA5772
SHA1:	EFA54D817926FA08DEAA77DB53DBD93521D97B39
SHA-256:	7B23628656640102C1C313D5CC07B5C4747AEBE0C14B8AA0F2B0773E5B0FD197
SHA-512:	0F91EBBA603879CCFE270DB25ADD89134FE8D36205F05683DF6272EA82FE017FF582D3F26D46F50F5483C2AF46E2686B66FEFD7944B583D93E99C56577EE67AF
Malicious:	false
Reputation:	low
Preview:	{"config": {"enable_collect_everything": true}, "toolbarParams": {}, "isAuthenticated": false, "supportedCompression": ["gzip", "gzip-js"], "featureFlags": [], "sessionRecording": false}

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	926
Entropy (8bit):	4.486617853875907
Encrypted:	false
SSDEEP:	24:t48CSh8ONqwJ9PiOwQr1dkaxyAgVpdrf2o5wA:ESf8m9PiOwQrQaoAgVzrfXV
MD5:	F51A31DA564D1E818651FFB251BE5D31
SHA1:	2EDD0AF0B6443861CCB8A0A2183DDE1E9EB59C7D
SHA-256:	4335A4241A637C91845D75A0EA955F846A6B14EB991B579D890584BB2AE9C626
SHA-512:	24D469BE8CDCD02C50EC1CC85A99F2E01EF9E46184F7F6D19C41DDD17B487EE459DEF64E44246E904E767BB0C1D53149F8CDE66ACBF5D04FB285F7BBC08E1171
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="76" height="42" viewBox="0 0 76 42"><title>mf_logo</title><g id="flame_mono"><path id="flame" fill="#ffffff" d="M68,6.72C63.66,3,57.81,1.26,52.19,1a26.14,26.14,0,0,0-15,3.63c-.34.22-.68.45-1,.69A13.36,13.36,0,0,1,40,4.71c2.28,0,4.13,1.56,4.13,3.51s-1.83,3.53-4.11,3.53c-3,0-5.92-1-8.83-1.54a51.47,51.47,0,0,0-9.33-1c-10,0-13.09,5.17-13.09,5.17l.86-.65a7.24,7.24,0,0,1,2.92-1.46,2.16,2.16,0,0,1,1.57,3.93c-3.76,2.34-9.88,1.38-13,9.92A5.67,5.67,0,0,1,3,23.94,15.06,15.06,0,0,1,9.89,21.5a24.36,24.36,0,0,1,10,.49c1.86.51,4,1.21,5.09,3,.9,1.46.91,3.46-.82,4.29a9,9,0,0,1-4.11.7h-.06a46.86,46.86,0,0,1,10.57,2.68c5.84,2.49,11.27,6,17.48,7.53a24,24,0,0,0,14.45-.53A19.75,19.75,0,0,0,74.58,24.54,19.89,19.89,0,0,0,68,6.72Zm-43,18.1,0,0-.06-.06.06.06,0,0ZM57.35,30a27,27,0,0,1-11.73-3.17c-7.61-3.7-10.7-5-10.7-5.22s4.55,1.57,12.2-2.62c4.42-2.42,6.1-5,10.18-5a8,8,0,1,1,0,16Z"/></g></svg>

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7418)
Category:	downloaded
Size (bytes):	7941
Entropy (8bit):	5.239386177792446
Encrypted:	false
SSDEEP:	192:KAgQI38KZyMTtfsxJPN3L3Vp9qXw67NTYlfsuUDZXcH:rgQIUn7VEpNsOZI
MD5:	61AC8C9F56D5DCEFCEE51C0156B674D2
SHA1:	53883E1E0D4570F3587B484AF4243A415336D159
SHA-256:	549BD3E9E2CFE91E355BA68C1FE15C0AF27E0391123630B9CCFBBBD559CDBA47
SHA-512:	1A3C08D3A235430060E7CCAD69C3108E63C7B5526ACF47D49CF576892B3C23C87ACFB5B6B18049B021870FD9AD993ADDDF14F3A0B5EFB213C0BA6A271A8DC59F
Malicious:	false
Reputation:	low
URL:	https://go.ezodn.com/tardisrocinante/vitals.js?gcb=195-8&cb=3
Preview:	try { !function(e,n){n((e="undefined"!=typeof globalThis?globalThis:e\|\|self).webVitals={})}(this,(function(e){"use strict";var n,t,i,r,o,a=-1,c=function(e){addEventListener("pageshow",(function(n){n.persisted&&(a=n.timeStamp,e(n))}),!0)},u=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]},s=function(){var e=u();return e&&e.activationStart\|\|0},f=function(e,n){var t=u(),i="navigate";a>=0?i="back-forward-cache":t&&(document.prerendering\|\|s()>0?i="prerender":document.wasDiscarded?i="restore":t.type&&(i=t.type.replace(/_/g,"-")));return{name:e,value:void 0===n?-1:n,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:i}},d=function(e,n,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){var i=new PerformanceObserver((function(e){Promise.resolve().then((function(){n(e.getEntries())}))}));return i.observe(Object.assign({type:e,buffered:!0}

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	268008
Entropy (8bit):	5.574180685317305
Encrypted:	false
SSDEEP:	3072:3jMXldZAlCIWYMuUyO1jh7ypDDMlML6OhoO7DfFWkIr8rI1DEWRqj4X:TUfIHMuUy4tAL6OhoO7DfYhwrI1DN
MD5:	E0530E6AC5582B3DFC20F87DC7657BA8
SHA1:	A28AB74C125B4459FD848EDD64E9392F6EC2DAE0
SHA-256:	4CEEACA281D11832F347FE4D312E12E612CC8161E9B3CB4394FA3EAE2DE44457
SHA-512:	87B1C8EC365EC01E63213942ED6CD75A99E226B729CEC7A26B410F02F968DD568E0A91D216EDF308D275DE49D0286F5345766F079E8C5FD99D2303D16AF032BF
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-ZDEB536PB9
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":28,"vtp_rules":["list","wavebrowser\\.co","mywavehome\\.net"],"vtp_enableSuggestedDomains":false,"tag_id":13},{"function":"__ogt_ip_mark","priority":18,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":18,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_is

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	268034
Entropy (8bit):	5.574358232159413
Encrypted:	false
SSDEEP:	3072:3jMXldZAlCIWYMuUyO1jcdypDDMlML6OhoO7DfFWk9r8rI1DEWRqj4w:TUfIHMuUy4SAL6OhoO7DfYKwrI1D2
MD5:	1050F1C40F4AE8DF1317FEB1BAA696DE
SHA1:	9B614865AA0EAC61F93D37EEDF9B60A75964C616
SHA-256:	1542B345C95C4F90EA4B8BB3FE447ED91006D8C42553DAB1FA70BCFA0C5256EC
SHA-512:	276172E0B7439A0F2D07949A27A847495AF76655AE82C5D5D1FFC8437E3D34A80DD5A420FC7480766465316B42FE3E1161DA98B70C9C3AE60AB0A7AFC8E4434A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-ZDEB536PB9&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":28,"vtp_rules":["list","wavebrowser\\.co","mywavehome\\.net"],"vtp_enableSuggestedDomains":false,"tag_id":13},{"function":"__ogt_ip_mark","priority":18,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":18,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_is

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 731 x 458, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	83450
Entropy (8bit):	7.9483572334694985
Encrypted:	false
SSDEEP:	1536:IHnvfM++fB6W7MTkvHvd2FfTCKw8iUX6lPeDLS09QKWbR41YGT1W4daEn4C1EfLU:cXtQYTDBGaJ68DL8KORnG0KT42EUGsB
MD5:	5CD8CF4130AC425E5B9AC939EA935F52
SHA1:	CD016832828F1C7CC01FA4CFBE65FC8ABA016C8C
SHA-256:	21BA01A82A1687C4AEC593F4E44A8413C845FFEC206F88C0F293D4A0AFB40516
SHA-512:	6D2279FD876D6EC75FDC917C5BAE496534F3C0896A3EFB36A68D275CC6A062512300EE6C18422FB7422970A179392B2FA14B23A028B4836B301CC536E5C000A0
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/lp/global/img/start_menu_w10_white_theme.png
Preview:	.PNG........IHDR...............w9....PLTE......................................Lb...............v.......................).......... /H........................................}...........\|.......%7L............)s..../..w.............."f.8........3..f.............&.....A..2....>.....=V...;..=..N.6N.........E.}.X(Ea.....-F.H.5R.I...>j.`..M....KZcfi....%=....Y...6a.'..s$>Y.....Z....Xe...v.0.g..Q..p..y.....I.......F..Y.k.I.`.......T....pqq.x..Hr..y{\|DED.H.TVV.E.....l..G..\|..........P....$.....!"!&g.542....b.u7..`..^n.r..=..e.....6}.q........T..F\....W..h..`.'S..Xu.b....?..@\|..."E..Le.y..ID....K.....C.?)Y....g\|=..p*og..i..X.]-KgC...r.M.......\.jt..D.a+..{uy........M...p....+.......h.....w..v........b ....4".uO........unR<.<..t:...Fr..R.T".......Q..f.p..........o..n.S...B.IDATx..K..0.E.<.q.S......C.7...X...X.3.L......H....-K-.(x.w.v..\|}XS.j......4.....EJ..(.{/.......d.}.Y......&_...G#..IK4..........YJ..Y&...R.ze#.a}.I...i#u[W..o.....lZ.,.Nr.$..R

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	570
Entropy (8bit):	5.120867923578939
Encrypted:	false
SSDEEP:	12:tT34/KYf3SQoT38IJqfSX/oxEJsDAzbNM4QLSxXU:tsLfBoTsduEAmBL+U
MD5:	C6694E0DD34DFF3948576D7082EF99A7
SHA1:	2201EDF4BD25F8BD836539FDF66CC35156AAFFC6
SHA-256:	358D933448D630883ABD7F83DF13A535DE82B948EF2821D1E01028A10E03C933
SHA-512:	0177368D71394A0E3032AD70201ED9897528179FFA3280EE9393712B7CF57C80DBF78D099B77F690CEAFAC132764E1ED767F907D3D8548CD8453AD83DBDDBEEA
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/icons/svg_dark/loading_indeterminate.svg
Preview:	<svg version="1.1" id="loader-1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". width="40px" height="40px" viewBox="0 0 50 50" style="enable-background:new 0 0 50 50;" xml:space="preserve">. <path fill="#07f" d="M25.251,6.461c-10.318,0-18.683,8.365-18.683,18.683h4.068c0-8.071,6.543-14.615,14.615-14.615V6.461z">. <animateTransform attributeType="xml". attributeName="transform". type="rotate". from="0 25 25". to="360 25 25". dur="1s". repeatCount="indefinite"/>. </path>. </svg>

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.799187402237062
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkpboUxNtk1:wpoSySv6yF8pbJnt+
MD5:	98341C2B2C1A631FB21F4C3FD75E56D2
SHA1:	AF449884B8D898D0CAD129DB40C5F1EFD4E2DFA3
SHA-256:	64C37283F6956532804662C7757085A4A28968787F1F84D0ECAB4F89C15FB27F
SHA-512:	FD4863491321FF48FF29E375650786054177040FAC0E430D194683340450E86505E73CAB255CEAB7E9F935A7AA0554ACC461A74A536FFF51022D306DFA4E5AB5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAn9uqUg1dGU6RIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9bEhcJUobdZ0vR5usSBQ24uqrgEgUNlJCS-g==?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgAKEgoHDbi6quAaAAoHDZSQkvoaAA==

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://api.wavebrowser.co/cookie/set?tid=va6g28ar
Preview:	OK

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 451 x 289, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8839
Entropy (8bit):	7.970302636221506
Encrypted:	false
SSDEEP:	192:gAlphMbizzEq3WkCLt7FbX5vLroatIMwe1SLyM9r1eahFiw:gM80zPmkCLPX5NWMw+HM9YmFv
MD5:	1AB56B61B95A7B6A66C9B94E8AF41062
SHA1:	1C7CD9E7C99494A0BA74CAB8BA8DE7D19432330E
SHA-256:	614FE080C98515F3C6E8F931B1A768EC85C3CB1023EEA4F0A5CEF57C38BD8AC3
SHA-512:	B0278F8C0414D93D790AB4F0842BBAED54653DD23761CAC25FD3369D16A60E19A1419F74ECAAB25FC2B3B5BBC5D1A38930A0BF0075BBD2C641048BC9496E49C8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......!.....4.;e....PLTE......+l.+j................,j."""................T.........d..n.........[..............;;;.^....333....."d....s..(g.zyz...*ZZZ...h..eeeooo.........BAAPPPR..HHH]......}.....p..6A....D}...8t.@M.QT........t.ee...sWW....B..#7.5>ugQbwWY......jJ;..4...........X.....!:IDATx....j.0........}.Kc.B ....!........SG..-....8`CE.eF.]!""""""""""""""""""""""..yZ...j3.p..}.....Jk..X...c.c.+g.^/I....ZW...3..V...n..^b.^..z+o#....a#tm.E.~)...x:^E...)\|..`?.xuM...gV....e.../.t-$...0.6.91........?../.^e.... .(..,aSq..?....b.k....j...toz...)........Ro....fY?u+L........!.z...'\Q8.........;...P.0..FR5'.Z...HS5.8..?.4...L.L'V...k.qZVI...'.....&...z.!.'n+....5...\..j7f..y..w3=X..c......b;.Re.7.:.fo...d..L.C......5......K..Zx......>jH.7.....:"..X....NQ.._..e.o'..^?4.......yg...c....P.N`.p...P.&.D...f..W.h.f....G\|'.5.d.M...p>....z.....^.d..Jh.b....e..f...e.,.C,c.o....N.............)..f.^...f._.r.....F.*R./....L........ .....?

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2120), with no line terminators
Category:	downloaded
Size (bytes):	2120
Entropy (8bit):	5.689297287269179
Encrypted:	false
SSDEEP:	48:Cqyhm3CCO1BWqPWXaNH87BHqPWUP2WZq7nJCJHpn:CG3gzWgWX8SgL2rJCpx
MD5:	9F438AB3A87DE12B58104DDBC6AE3454
SHA1:	E57D66302D57DEB793EF4AA1B80F1A59FF5899F3
SHA-256:	915150323B5A98F04CFD3BD2C538F8E1BD2AA81BFF0F8C66E47F71B48CD12EA8
SHA-512:	BBDE0856199BEAD13D6DCAB7A4AFEAEDE4EA237B60AE94EBA15681030F87CBF4ACCAE5D58885473D700176D546FF8ADEB91B4C62D17062FA67036C784DCCEF53
Malicious:	false
Reputation:	low
URL:	https://otnolatrnup.com/Tag.engine?time=-60&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=26604&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=60&fpe=1&bw=1280&bh=907&res=1280x1024&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone
Preview:	g367CB268B1094004A3689751E7AC568F.Media = {"Items":[],"ClientSideFilters":null,"DecisionProfileId":"50283a24-29e3-4bc1-9c11-78125c4b786a","DecisionProfile":null,"Server":"INFINITYWEB1"}; g367CB268B1094004A3689751E7AC568F.MappingPixel = { UserId : 'e52c68bd2ec041bc8bb423ef3441546f', PlaceMappingPixel : true, CallExtractionAPI : true, ExtractionAPICallbackUrl : '//otnolatrnup.com/leapi.engine?audIds=' }; g367CB268B1094004A3689751E7AC568F.ImpressionPixel = { PlaceImpressionTrackingPixel: true }; g367CB268B1094004A3689751E7AC568F.MiscData = {"Connection":"Keep-Alive","Accept":"/","Accept-Encoding":"gzip","Accept-Language":"en-US,en;q=0.9","Host":"otnolatrnup.com","Referer":"https://www.mediafire.com/","User-Agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","X-Forwarded-For":"212.102.41.2","sec-ch-ua":"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\"","X-Forwarded-Proto":"https","CF-Visitor

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	401
Entropy (8bit):	5.426332379505581
Encrypted:	false
SSDEEP:	12:TMHdjIMu5E4Bn/KY8XdU/gKwl8qaNrBrz:2djx0L8tU/d1ZTv
MD5:	E7D8500FB02A316F0780B7249BE354A8
SHA1:	EA566CA75737F10957EFA544DB2A92BAA0B81B37
SHA-256:	D98133CE0DC7033265505BFFC7AEBD92FAD444A0CD0271832A877418CCC889C6
SHA-512:	09C5C1C3F5687E7F63F7DDA53778735620F1A19549A60D3424C4D95CB7F564F2467FE6D06B8244B12F501EFD589F6AC17EB79963BEE5E22CA9DEA83D57E06DBF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24" fill="#fff"><path d="M17,2V2H17V6H15C14.31,6 14,6.81 14,7.5V10H14L17,10V14H14V22H10V14H7V10H10V6A4,4 0 0,1 14,2H17Z" /></svg>

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 731 x 458, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	69974
Entropy (8bit):	7.937009891832966
Encrypted:	false
SSDEEP:	1536:onSJZFaVxiI8D05giXc1CLyM45OTTEpF3o225wvjUYZw/NODq:OSJZFamIQCLCsED3o22kNZw/yq
MD5:	4DF347D62433116350C4CD2C9EEEAD53
SHA1:	4742E17F2CC9361F92D0BF075D833DEBA435701A
SHA-256:	5FB57ED9F6640C1D34A8CDD3E96F1C21975A482E3D1E121A2C95818D0917828C
SHA-512:	7C12084FDFCD9E00BDDFBE53997232A1B78DF7175040E2A1ED0F68A34D9D37CE47ECCD4E6587F3568CAB53CF4D614D873B30F475A859660A81F31781D50028B1
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/lp/global/img/start_menu_w11_dark_theme.png
Preview:	.PNG........IHDR...............w9....PLTE......!!!...''',,+...111666.&C......^..w.....J..m..e..o..h..x..t..p..G...)FA..\|..k..Z..x..-..b..\|..O..a..R.....R..r..\|..Y..t.....N..m..j........H..V..r...........d.......5.........0.....\...).<...4..........G....R...t..h... ....<=>./..'..7Uf....B..g.8........s...+...],.......H..t3..X..j....08..]......5..!.w.i..B..JLMTUV..._....:....qh.......O......BDF.')......P.....hij^_a.c....2.........#'....5......................rst....... ....xz{...6=.....D................\..........P7.............x..a......+3m;#.......!-\...Nn.<Zi.F..F..Qr...q'.....nZa............85l...-..............T...2...w...~...4.XJJ............{.{2../...#.....p.....F ..l..M0,....P.......kI/.a$..V...........:m...j1..t..L..~%....._rL\|....x.~.8...I^.L....G.Y.[...F...Z..J.D......\|pOq.....IDATx.....A..y........(.(H..K..nG.R..2M.%x.$......q...p;.x.....;..>...z=.....b..YmL..=...?...Y..EZ3..d..hi.......{_...+.._......f.[.<W....z.....z..I..O.-?........Y..S...`.7..

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.427567157116928
Encrypted:	false
SSDEEP:	3:mSeniCn77nSb9inY:mS8hnqb9L
MD5:	F232E697CFC3BC866EA19532B020CC06
SHA1:	896364C8D194DEA96AFDD91226D706DF52F03B31
SHA-256:	4851BB3657B9772D3DF46826CDC83543A95928876FAA6195DEE0C0EC784FB617
SHA-512:	4FB9FEE32582F8C9A66A0D5A2C6BD3ED7D8EDD786E96E3BD3940F73428851ACECFAC820F2352A681D4F493A6C47485F196F6592F82DF3A8E3FB0AF3BA0FC6CFC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHglP08NxNjXVihIFDWcd3soSBQ2LTorDEgUNlJCS-g==?alt=proto
Preview:	ChsKBw1nHd7KGgAKBw2LTorDGgAKBw2UkJL6GgA=

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	239977
Entropy (8bit):	5.582143756355394
Encrypted:	false
SSDEEP:	3072:HXPdZAlCIWYMuUyO1jh8ypDDMlMT6LhA9DfFWkVR8rIs55qd4w:3PfIHMuUy4CAT6LhA9DfYq6rIs58
MD5:	C32FCED802117DD43357F8F41EB7C412
SHA1:	7F521076AAE4F0F00AAB491905BA0AF5180B739B
SHA-256:	34D6DD0F573D7D597184A7DEBB014988734380E975EFC893EE9E776D92AF87EC
SHA-512:	470EC88EAB54CF75B05863B473D83350E327EF1151AB2AA1DE4FC731CAA91C097D194E68973E43CA06AFC84A4ABCDC082E122DE3A132318B863B01C6CF1C46A3
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-K68XP6D85D&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":11,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":10},{"function":"__ccd_ga_first","priority":10,"vtp_instanceDestinationId":"G-K68XP6D85D","tag_id":22},{"function":"__set_product_settings","priority":9,"vtp_instanceDestinationId":"G-K68XP6D85D","vtp_foreignTldMacroResult":["macro",5],"vtp_isChinaVipRegionMacroResult":["macro",6],"tag_id":21},{"function":"

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9157
Entropy (8bit):	4.758532234615348
Encrypted:	false
SSDEEP:	192:bqHzPrdwKH+vtzbv78dHJS1Dlo1M5oBWVGkvxlv01du:crdClbvCJS1DS8ocVVX8du
MD5:	B3F3114E2E91F2984BF79BAC56F2DF8F
SHA1:	2B0BB05CDFDB1DACBA1A8F9A6DAB1F119B604DC9
SHA-256:	F6A38407001F4214C44B9C44B70A6E05A5E92C507898E8A6E10EFB6F765926A6
SHA-512:	072D525ADB0ED07D2B915668F5CA3A32C9C7937431DA4133B64DF9AB3B73F1ADB852F6749D0AAC833999852155E14DDE8FF1A6B18EA915F5EC25A54733270675
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/wave-ico/svg/wavebrowser-128.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg. id="Layer_1". viewBox="0 0 128 128". version="1.1". sodipodi:docname="wavebrowser-128.svg". inkscape:version="1.2.2 (b0a8486541, 2022-12-01)". width="128". height="128". inkscape:export-filename="wavebrowser-128.png". inkscape:export-xdpi="96". inkscape:export-ydpi="96". xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape". xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd". xmlns="http://www.w3.org/2000/svg". xmlns:svg="http://www.w3.org/2000/svg">. <sodipodi:namedview. id="namedview72". pagecolor="#ffffff". bordercolor="#000000". borderopacity="0.25". inkscape:showpageshadow="2". inkscape:pageopacity="0.0". inkscape:pagecheckerboard="0". inkscape:deskcolor="#d1d1d1". showgrid="false". inkscape:zoom="0.921875". inkscape:cx="140.47458". inkscape:cy="135.59322". inkscape:window-width="1269". inkscape:window-height="917

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	4.471351405003666
Encrypted:	false
SSDEEP:	3:YX2vHO7JMVMXCO7JGLLvyfNHG/4HviaNmGKLqyR6Gaif6HW48HKg:YmvHYJMVMXCYJGXyFHrHaaNmdL62fszg
MD5:	CF1E27C1B6EF389BF5FED4E9F899191D
SHA1:	E5A727F50A326E67186A39D70A04CBF983918342
SHA-256:	2D4C689516444ACA2FD9F0841DEB799B65BD55E87B36F937D733EB6DABE73422
SHA-512:	DAF237AB6B6C4D991D554DD736BC7D6693CC8969597EA0155744815311A365FB2989A7067026B385182863E8C53133A239F137D838D5B2602A3B7EF1BC00DDED
Malicious:	false
Reputation:	low
URL:	https://app.termly.io/api/v1/snippets/websites/5c7c818e-90ba-4e9e-b259-9c620b055e9c/ip?random-uuid=d59e74f7-0bb3-c468-a8f4-0dba0ad7befd
Preview:	{"request":"212.102.41.2","ip":"212.102.41.2","country_code2":"US","country_name":"United States","continent_code":"NA","state":"Texas"}

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24984, version 1.0
Category:	downloaded
Size (bytes):	24984
Entropy (8bit):	7.992209564589015
Encrypted:	true
SSDEEP:	384:Q5uIjdBKsKtonblEDVlglYSnDqoK0/65voSFjngxDnMG5QLKhfpy8PCyjc:Q5ZesAoh4lglYSnmoK0/4vFjc8LCRjO
MD5:	303A79D404D97CCBB3D803088FC387D8
SHA1:	66E3525B79A1A58A63FE0934F31676DD40C7F033
SHA-256:	7E510E61C497D334DA21ECCDA06DF5D3A428C9EA94D6903B6138E7C7255ABA0F
SHA-512:	5751D97634F0FD270E36044A1EF077C0EC1D9B146BD8E5D28207A083CB350FA467E083433C2F81CFF896AC7E3756B7014A408FEB203F2D175FDEBA0A37F3614E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2
Preview:	wOF2......a...........a...............................j?HVAR.V.`?STAT.$'....+...\|.../V....`.D..j.0..T.6.$..>. ..~.......'...6.Yw.....=W.y.DL.4.a.&)....N.!C.n..R.....".".P..=.#.L........62....2...e.z.V..U...r.H.Y.T.ZdkK...#ux3,..&.I..dcb.[.>.....)g9up..f4.p..D.l...V..iEl.A..e....z.S..v.......c?.<..w...{V.9..C.=0MsF..o9......[.3...K..'...`....HA....b5..ms.l+.t....a...^......m.[...8.....A.DR@.3P..F0. ...s..XT}T. .......MzK(.FX..3<m..o.!..z....."..]3.e$ .X...Y.f].n7.([....{....@......sxC....8...9q........XJ........&m..e...M.. . A.B..!!x..AK}.i;Q.[.........N;..u.A...w9qA..4...I..q..e...o.....C.UVW.}.rn.x.W.8.kP.C<..{.3o.G&U.......25..3.../..k..uK..BB......(D....?....xgf...8...U)..Y%j.p.2....^....Q..!...".......a...P.../m.w&<.....R.1..FZ]H.8):.3...\...wV.P........K..@.j..C.:..jE..L...R.Z..@.<....y-_hsj.+J`....i. ..Ba.S..4...\|o@.R.R..8.!..t.3y!U!J..X........i..+..P.X..M...K5..fgF+.F..V.! .....X.B.........i.]..m.......*..`[>.q..m..w.......fC<

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	59034
Entropy (8bit):	5.993390616428103
Encrypted:	false
SSDEEP:	768:xWu9UreQNoq/vJoik5zZ05O5W5u5x5n+f+l505074Y+D5vSA:xLq/vq4vd
MD5:	6F24EE14853AF2351521146C65214159
SHA1:	9ED30EC0C28667CC185E6BEE3998520B002433D1
SHA-256:	C7BB5841BD9BF482B94CAE51D6EB696B23CA0784DDB9EBB661A60BFAC8393B6E
SHA-512:	9527E916490DC30C9197CA88883AAB03D45B8B128FD8FB2165550CF618D6BAC7EEBA7EA5751D903039D749F964922F13DF6679DF098B3C07E81CAFD168F965EA
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2407496164193484&correlator=8984882879328&eid=31080125%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202312060101&ptt=17&impl=fifs&gdpr=0&us_privacy=1---&gpp_sid=-1&iu_parts=183096492%2CMediaFire-Zone3&enc_prev_ius=%2F0%2F1&prev_iu_szs=336x280%7C300x250&ifi=3&didk=3528871077&sfv=1-0-40&eri=5&sc=1&cookie=ID%3Dfb7f03735d5241db%3AT%3D1703780530%3ART%3D1703780530%3AS%3DALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ&gpic=UID%3D00000daf1f27be5b%3AT%3D1703780530%3ART%3D1703780530%3AS%3DALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g&abxe=1&dt=1703780569408&adxs=152&adys=420&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0&ucis=3&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe%2Ffile&vis=1&psz=960x1500&msz=336x-1&fws=0&ohw=0&ga_vid=1411026819.1703780523&ga_sid=1703780569&ga_hid=139214927&ga_fc=true&td=1&topics=9&tps=9&htps=10&a3p=EloKDWNyd2RjbnRybC5uZXQSQDVlYTE5NTEzY2MzMWI1MTcyMDI1YzQzOWJkZDRhOWZiOTI3YTBkZjM1MmFkNjM2MzdjNDRhYjg3NGViYTZiMDYYp_DuicsxSAASGQoKcHViY2lkLm9yZxiJ7u6JyzFIAFICCGoSHQoOZXNwLmNyaXRlby5jb20YpuXuicsxSABSAghkEhcKCHJ0YmhvdXNlGITv7onLMUgAUgIIahIZCgp1aWRhcGkuY29tGKbl7onLMUgAUgIIZBI-CgVvcGVueBIsZXlKcElqb2lkMmgxVmtaek5EZFRRblZ0TVhGTk1qbDFTakZJWnowOUluMD0YtfzuicsxSAASGwoMaWQ1LXN5bmMuY29tGOP77onLMUgAUgIIag..&cbidsp=CrYBCAESGQoIcHVibWF0aWMQtAYgAlIIcHVibWF0aWMSGQoIbWVkaWFuZXQQ4wQgAlIIbWVkaWFuZXQSIQoMc2hhcmV0aHJvdWdoENAFIAJSDHNoYXJldGhyb3VnaBIdCgp0cmlwbGVsaWZ0EKQGIAJSCnRyaXBsZWxpZnQYAiIkOTdmZDNjOWYtNTJjNC00YzQ3LThlOWItMTUzZDg4ZmQzOGEyKgQIAyAAMgd2OC4xMC4wQOgHSgA.&nt=1&psd=WzE1LFsyLFtbIi8xODMwOTY0OTIvTWVkaWFGaXJlLVpvbmUzIixbXV1dXSxudWxsLDNd&dlt=1703780566939&idt=1264&prev_scp=dkey_present%3Dfalse%26buildnumber%3D121918%26dladtemplate%3D51%26button_delay%3Ddisabled&adks=1870779098&frm=20
Preview:	{"/183096492/MediaFire-Zone3":["html",0,0,null,1,280,336,0,1,null,null,null,1,null,[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CI2Ju53FsoMDFc8qswAdS1MCNA",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adjust:100%}html.i-amphtml-singl

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 451 x 289, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5692
Entropy (8bit):	7.924314540981831
Encrypted:	false
SSDEEP:	96:bLxs4kywX43sUEaV9IRF82DWkqy581p//lDd5m/pF20cYIFc+jtF5noN:bLnkTXGWRFIi81p//pzKp00cXuN
MD5:	649D474A717D45421D0E5BFE2E749A3B
SHA1:	F92DD35DD9DEF3B221DDBA31B1B78365F99AEFEA
SHA-256:	444DB899E2AF17C7F06959C416956011CF9C43515B016D0326CCCC1164401B99
SHA-512:	C20CE8616EC9B28F41A7B18A0E3FBB7A214B4BD806DBAEDB408CA4A84DED3352B0A035BB21C2EA9371D39569050AE83BEE4A5456A0EBB405B406C87BD0EC462C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......!.....4.;e....PLTE...-44........sss...y.......6...........OQQ......=BB...........5::$%%...........t.D......)1u.....T..p..&.....N.......LS.....\|....yH37..........V8)..1..<..._}7A....#4?.......@...P...6...u.....q(,,z....\|... ........+22....bO...6..ccc:.. ).&.5.....e............211...d..177..!...................-5............c.........g......;E1......0A.Q`>.CE.....6....................<i$....wIDATx...1..... ....n`............@pv. .m........d`..!w.F...K-.y.......5<.I#<.+\|.....6..9.%z.s&b.)..E..(..c\..\..p[.(..u.G[\|..RPK...i.....2.n...}&.........._d.....(..2.a.....8/.....=e....opK&....~.i..3.....'S}....M..%..@e.Y>[.....\.....v.._.C....:..v..XJQ..p`A;..hG...K..G.p\.(BJ.'..Q..W.....HBM\|......0....JV.5...'.Q.o...,..k.E....gh...zBk.-..A..P_J..Y..YCkh...5.....Z.....+7...@<.R..:Mww...!..[$..@...yQ.>.R..>....oM.&.q...bV.q.c...Cz.\..:w..o......m.R.\.0...QQ.,.N2wV.e.k.n(.p....9!@J`.n......D.ylK...P(.Px.8.. ...P....w.eSC)5..Dp.%.l.:.

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1213
Entropy (8bit):	4.312328151743703
Encrypted:	false
SSDEEP:	24:t4po/yLmie8JlbNaXcrNN8cIcVs1GCnyhsBmlx8W5/VL0Iy1aF:VTUbNaXcxN8cIcsRssBmd/RQ1m
MD5:	AB7D2E2A5C8EEC566BF58E5EADD1A90C
SHA1:	F196F75BA5C0F836948ABFB22E70276B83072395
SHA-256:	4E96C317406E2C84CA0A065CF8F77F26C9808C9C2E6258EBEA8814B18D6F5EA3
SHA-512:	D715E916358C680A9347721546187E069FB0A9580EA08E75C8BD539736FB1D039B6C1ADEBA65446951024A6E4403CE1D5CE58E8EDF2BDA7B03711D7571CBD3EC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab6"><path class="cls-1" d="M81.82,36.55l1.63,1.63-8.63,8.6,2.41,2.4a2.26,2.26,0,0,1,0,3.22L75,54.66A24.91,24.91,0,1,1,30.27,76.47a24.81,24.81,0,0,1,0-19.35A24.39,24.39,0,0,1,43.53,43.85,24.9,24.9,0,0,1,65.34,45l2.26-2.26a2.26,2.26,0,0,1,3.22,0l2.41,2.41ZM48.5,50.87a2.21,2.21,0,0,0,0-1.73,2.14,2.14,0,0,0-1.2-1.24,2.21,2.21,0,0,0-1.73,0A20.56,20.56,0,0,0,34.32,59.15a2.21,2.21,0,0,0,0,1.73,2.14,2.14,0,0,0,1.24,1.2,2.37,2.37,0,0,0,.85.18,2.18,2.18,0,0,0,2.12-1.41,15.89,15.89,0,0,1,8.74-8.74A2.28,2.28,0,0,0,48.5,50.87Zm33.6-16.31a1.08,1.08,0,0,1-.78.35,1.12,1.12,0,0,1-.81-.35L77.3,31.38a1.15,1.15,0,0,1,1.63-1.63L82.11,33a1.07,1.07,0,0,1,0,1.59Zm2.79-5.13v3.39a1.13,1.13,0,1,1-2.26,0V29.44a1.13,1.13,0,1,1,2.26,0Zm5.34,1.95L87,34.57a1.08,1.08,0,0,1-.78.35,1.11,1.11,0,0,1-.81-.35,1.07,1.07,0,0,1,0-1.59l3.18-3.22a1.15,1.15,0,0,1,1

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14061
Entropy (8bit):	5.6096980977443165
Encrypted:	false
SSDEEP:	192:o/y/XMYmiG9Ir5zEwTNRhiZqxyHFU1/s3jZi5aTAGoEbIqehlZN+yc4:hncpIPkCT
MD5:	2371135568EEF24255D4BFF01EC173E9
SHA1:	70AD97570DF72685D5F947395A4B95B230B7B1E6
SHA-256:	AADE7746342F608807B7EB107059C842FE200E1FF09E146DB822250055CECAED
SHA-512:	D557E663F1ED55445C4E212D3F863A432819541E44F1FBD4E36C7A1DFD85B8A44E25F4DBA3329F57C3424EDEA5011028278A0DDD49EF1A25093543021072A5E6
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0964-0965, U+0980-09FE, U+1CF7, U+1CFA, U+200C-200D, U+20B9, U+25CC;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPj8UvaYr.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	962
Entropy (8bit):	4.5048022108790295
Encrypted:	false
SSDEEP:	24:t4po/yL4cr4clLKnCCgOnefULSKLdsGf2oY4/:VfcEcknnSK12S
MD5:	184ACE60FDA95F4C01EE59A8842B104B
SHA1:	C619928DDF6E180873929C4FFB9DBCBFDFFE7133
SHA-256:	947B503C2B416DE31D6B171BF82D08592BE07BB4F8887BCEFF6A1E1B4CCE5410
SHA-512:	ACA928234A0860D6D800D1835FA9E353C41844DD83DE4DA062CDA00C4BB463DD948484B1B5CC1CCE950906B3DA44F229394F1C4600004E2F9B1CCD9D89422D39
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/tf_downloads.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab2"><path class="cls-1" d="M92.55,67a32.1,32.1,0,0,1-5.12,17.55,2.21,2.21,0,0,1-2,1.05H34.53a2.21,2.21,0,0,1-2-1.05A32.47,32.47,0,0,1,30,54.33,32,32,0,0,1,47.36,37a32.27,32.27,0,0,1,25.28,0A32,32,0,0,1,90,54.33,31.81,31.81,0,0,1,92.55,67ZM40,70.26a4.64,4.64,0,1,0-3.29,1.36A4.48,4.48,0,0,0,40,70.26ZM47,54a4.65,4.65,0,1,0-3.29,1.36A4.48,4.48,0,0,0,47,54ZM63.92,68.17,67.59,54.3a2.38,2.38,0,0,0-1.67-2.83,2.17,2.17,0,0,0-1.74.24,2.29,2.29,0,0,0-1.09,1.44L59.42,67a6.9,6.9,0,0,0-3.89,1.58A7,7,0,0,0,54,77.47a6.67,6.67,0,0,0,4.25,3.23,6.8,6.8,0,0,0,5.3-.73,7,7,0,0,0,3-8.5A6.92,6.92,0,0,0,63.92,68.17ZM63.29,47A4.65,4.65,0,1,0,60,48.37,4.48,4.48,0,0,0,63.29,47Zm16.27,7a4.65,4.65,0,1,0-3.29,1.36A4.48,4.48,0,0,0,79.56,54Zm7,16.27a4.64,4.64,0,1,0-3.29,1.36A4.47,4.47,0,0,0,86.54,70.26Z"/></g></svg>

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 622 x 948, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	26402
Entropy (8bit):	7.980181237992742
Encrypted:	false
SSDEEP:	768:9qrz8dBiizDKyPBn0AG2TSY5ND9dnVpd4CFEYW:YcdBiEDDuOSY5lr5s
MD5:	60E1910D77B2F40536DA8A50793F5E8B
SHA1:	0BC07C9048D8294F54314269E04F140B020FCA67
SHA-256:	2FCDA32A86BEA80FE0E301F3FAF1FC81A48F05447FBBDAFCE096449DA26745A2
SHA-512:	739772A6ED143874C32731D149F691F58E5DBB52BF9EB7944748878F4CC43CD32CE334BD53244C13AA3AFA518FD0058D8C53C2F8475F216029BB4E9E30391405
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/hero_tile.png
Preview:	.PNG........IHDR...n.........a.R}....PLTE.(f.2x..r.+kg.Ej..f.IDATx.].o3E._...".4@..8G<........Id.#>.$..$......P.(r...4........DA.......<....o.;.x....J_.........ov.#.....g?..a..(.\.mB.....?.iw...W...s..m....b.....%..!.\.%....4.#B../..(...\|..r.0....}.K4. dLZ.O..rM7r>H`.6\|JI..........f&jtP.a..z.....E..z.>%.,.\.86.. .+.-. .\|..V.Du......#s.2.a.0........XJ....t.8..sh>.U..[B..k &^..'hu.j...aF\k.W..o......NJ).s>..$.k"..D.4..X?p^H.N\|dvl.Kf_..W.....'..=u.(f...!?..n..f..h..e..D{^D#..?.s..D...%......%.(.i..hD..t.\.#...2.D../.O...,.h"/.E. .W8../.\|'.......{.%@\ne....(.\.,....;...k..h..z^..P7".W{..(.~......k0.........2........z...) .rk...nD..g..Z....3.`.S....~...{.3.F.?.=.r.....Q9.....*^H....NL#..9.J..G...5g.\|.~ ...S....)1.;}M.:.d.V]QK9.w.9S...TD...b.w.K.1.......f........QW.p\..0.{tX...........u..Y..L.2.[........8..}L..]c.n.d..Q..L...... ...P.q.D\|/...._Ii....Y_...L...Z.. C.B>...Z.DsPn...v./}..-.7.9...N.. .......n-H./.\....;...-g....&..x..

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35280)
Category:	downloaded
Size (bytes):	92803
Entropy (8bit):	5.59361910292156
Encrypted:	false
SSDEEP:	1536:sqDOoRwKPt0eAWttn5jYkuFuTHuFcSCTmMI0070o:moRt3nNY5wmf
MD5:	05675CF9FA5849B5ABB8D94F233423F8
SHA1:	F399C87F3A0376E1513BA36C99E115CCA3B686BD
SHA-256:	61B8D2638C29C9CD97D3A1F419B31AB074449A3DAB23D190ED64678364193072
SHA-512:	C1D1B77809D8EB98C19967A76DCE8F5E95AFE97CBE5B691098CD7C387A1312B57E376DACB9FCD079970DACD99A417BD356D7967298552FB323BFC32287496C21
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},fa={},u=function(a,b,c){if(!c\|\|null!=a){c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3397
Entropy (8bit):	7.92414523271258
Encrypted:	false
SSDEEP:	48:9QjkRh62qbgroYD3AosDTbGrqgNN/aIVjfj4PYGetsvmd00qfU/rrOeBy2zwA:SjkR42XpqbGrq4aIGPYak+Xeyw
MD5:	F3F91969E8ADB2E40754D2FE5B9ED06F
SHA1:	90FFFCE1474EAE0F55724CF038B7B8EF54397CFF
SHA-256:	AD013C56B378A1FBF28331272BF2F4BAB1C69B5C256B118E1932C03A5364F3FA
SHA-512:	A0E81BDE19ECEC4A5B3DC0E8472C5A6ACEED8674367369EF01CA2333DC65811C87E3E6F72EE2DAAD7BF5967A17C3846196F6C3E30862C3A7C5886633B9096ED5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATh...{.T.....kO.03.....a.n20.E.`X1...T"D....dS)S..Mm.!Y.[.nv.cKC.Y%b4.[.bD7.............e..v..\|......A.T.:..}N...{..r.....n..Q.....Z..DPe@.=e.."..P.....V..~...}..d....Y.R... ..b......6../.]o..........Xj=. H..t.j..a.T.@I9.V8...:.x.bC.x..O...0BO../.... mm!......#..`.4hY.7.B^~......<...... ....A...._..^..a.......2.....K...../8......6....x{.n..H........".......i..w ...Y...w~....~....%.../..S......"..I_...(u@..s.\|#E@.u<..7...6..............E...(.K.....m.).h(.%.S..n.t...y....[DB,Z...}fx.....O.....O.....=...0-..U..........o_w].....x..a.J.X.B.....-0..w.......{.s..h..]...(..N.d~G..s.....w.72.........{.r....>.RK...S.?......tX.K. ...B...)d..X.6=../....7..Y...]...m...h2.....d.HD.B[..-.9.Y.......M.]N.w....'...mA..o[....i..!...RD....F~.V.,........Hq2\|...\|.s.z.i.e&Y...o..U.%)ng..)Q.S.<..d.......zD........N...../...h...r.-.t......H.H.K..V...$............

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3850 x 44, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	77777
Entropy (8bit):	7.958862210527548
Encrypted:	false
SSDEEP:	1536:W3sNDI4kXb/58zcTtt8keFwp2/Cekf+rinZtfyZQucMrI6B:Ms5I/b56otv9p2KeyKbM6B
MD5:	4B0BCBEBCA1DAA97B01EA6E48045452C
SHA1:	F737B6AAF5B6AA859654524F6D9C5CE1E62BEF80
SHA-256:	B7FE1DB6B4419FC807AD7E66D4C75BB4CE6C1324673C7DD963C54BF56CEDBDF9
SHA-512:	92B9F6BE3CE5941DD1F594B469176584FF68DF65C64CF97FBC665FA586ACAA60EFDD3371193D3E1F35CDF4280AF155B85491FE9BCC4CC603A6D64598FDFE87E4
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/lp/global/img/row_partners_logo_gray.png
Preview:	.PNG........IHDR.......,......?.P....pHYs.............../.IDATx..y\|....?.....+.......zQok+J..^x..TX&.?.H....b""*..(..b..Z...V..zTDQ.#......<...3.&...........3..nvg...\|?./13...........................................................v-............................................................C.q............................................................. ..u"".^.rpppppppp.E.....q../.pRo......................3.v..............................z..&.vpppppppp.q.....kkk........................................................#.P..........[<.x..@ ...r.L.d.....\|...rppppppppppppppppppppppppppppppppppppppppppppppp......................n.7.}W.........~..../.................................................#.P.........GH4...\|>...V....i.=zt.....-:p.M_2....'..mnl.~.1............................Qow...................G....`,.?......0.@......`.....XOD....f~.....3gn.>......zbw.SSS.{!DF.q....8.....!.(...}mM...1........;#...S....\|./$0U....@U...`..N9.....FYYY..E.,c...6m:..v/..?..

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52471), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	181654
Entropy (8bit):	5.736684373984092
Encrypted:	false
SSDEEP:	1536://nnA2l/3hEUjlRC3YxEtfKp+6cnM6dUq1h2+2RHUi9gsjwxe5F4PtHzACOKk44E:9hEUFEtfKg6cnM6OVxrO8vnOiodt
MD5:	D5A7D68A6EC3FC56DA09EEAE983B420F
SHA1:	AFFCB67763666162E94E1A1DCD6989EA5A0F4076
SHA-256:	BA7E5FEA408BD231E539021718A07A1725966BC12131D7524DBE3C29E92A1FA9
SHA-512:	870FC110625127A25016E9B01A87F6B646E6A20B53334438D29F09F7C6E5B31903E079C9059381212E1F1BAEA2DE889D07A18250180535B1A1D1EBB08E737C54
Malicious:	false
Reputation:	low
URL:	https://cdn.otnolatrnup.com/Scripts/infinity.js.aspx?guid=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0
Preview:	var isInRect = function(selector, clickEvent) { if (selector != null && clickEvent != null) { var linkPosX = clickEvent.clientX; var linkPosY = clickEvent.clientY; var selectorBox = selector.getBoundingClientRect(); if ((linkPosX >= selectorBox.left && linkPosX <= selectorBox.right) && (linkPosY >= selectorBox.top && linkPosY <= selectorBox.bottom)) { return true; } } return false; }; var getDownloadUrl = function(targetUrl) { try { if (typeof targetUrl === "string") { targetUrl = new URL(targetUrl); } let segments = targetUrl.pathname.split("/"); let dkey; for (let i = 0; i < segments.length; i++) { if (segments[i] === "file" && i < segments.length - 1) { dkey = segments[i + 1]; break; } } if (!dkey) { return null; } return new URL(targetUrl.href + (dkey ? ((targetUrl.search ? "&" : "?") + "dkey=" + dkey) : "")); } catch (err) { g367CB268B1094004A3689751E7AC568F.ConsoleLog("dkey not found:\n", err.stack); return null; } }; window.InfCustomFPSTAMobileFunc = function(event, os, browser,

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2119
Entropy (8bit):	4.2128590298944095
Encrypted:	false
SSDEEP:	48:u6kBpTlEjRkYToowGfqlDk6da5qQ4DQbhBQ/EGdd:RkBpqNkGak6eqQ40Exdd
MD5:	6FFFBE8329FD1B1DB524B68B798566EF
SHA1:	99F19D16255D5BA549BA46236B6CAE8D02A420E6
SHA-256:	DA1F290293D87E51BA8FBD2A4A4C44094E72985B7676F3400FA7FCEFC0145FFA
SHA-512:	A73BAA331AA8DF9991B549C77827B73B02B8D32BB3E01E1F94E369404CF5B54C07AA5699C7526C9F90AC9D4E296E5AFE4C7AC5ED79BA3F2BB1F95C4DC656878D
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="342.01" height="49.08" viewBox="0 0 342.01 49.08"><title>gizmodo</title><path d="M56,43.22V5.82a6.3,6.3,0,0,1,1.33-4.37A4.43,4.43,0,0,1,60.81,0a4.59,4.59,0,0,1,3.52,1.44,6.23,6.23,0,0,1,1.35,4.39V43.22a6.28,6.28,0,0,1-1.35,4.4,4.55,4.55,0,0,1-3.52,1.46,4.42,4.42,0,0,1-3.42-1.47A6.29,6.29,0,0,1,56,43.22"/><path d="M317.48,49.07A24.52,24.52,0,1,1,342,24.55a24.55,24.55,0,0,1-24.52,24.52m0-39.12a14.6,14.6,0,1,0,14.6,14.6A14.61,14.61,0,0,0,317.48,10"/><path d="M207.4,49.07a24.52,24.52,0,1,1,24.52-24.52A24.55,24.55,0,0,1,207.4,49.07m0-39.12A14.6,14.6,0,1,0,222,24.55,14.61,14.61,0,0,0,207.4,10"/><path d="M285.11,24.54h0A24.56,24.56,0,0,0,261.31,0l-.73,0H248.27q-3.16,0-4.57,1.44T242.29,6.1V43q0,3.21,1.41,4.65t4.57,1.44l12.31,0,.73,0a24.56,24.56,0,0,0,23.8-24.51h0M262.32,39c-1.19.08-2.46.09-3.84.09H252V10h6.44c1.37,0,2.65,0,3.84.09a14.61,14.61,0,0,1,12.85,14.46v0h0v0A14.62,14.62,0,0,1,262.32,39"/><path d="M169,.22A4

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	174
Entropy (8bit):	4.4435858534741
Encrypted:	false
SSDEEP:	3:YRc8fxgsKvMnUhBlH2l7reLR3vFXQreQWUPRQKHGLC+Oo2LrNAtfwzRfH4xHmJY:YxgsDUXgl7o/mreDUPRm2lzRfYxGW
MD5:	0133A1F266F4740A5D50DE1410FC1CA5
SHA1:	64955AA4F31415A69929B984665530F3C8C65E1D
SHA-256:	94C5140FFBCABF14891B919CB87810EF0B7307CFE424DFFE47D25FB5FD6A551C
SHA-512:	D6534F3C3305B72BDAEEE3C11CF0C193832E07DE6BBC2D41F577B7C25927BEB2F69DA987E57953BAACE421A805A91A26CDB2125ACAE99C3B7E84272B219E91EE
Malicious:	false
Reputation:	low
Preview:	{"type": "validation_error", "code": "no_data", "detail": "No data found. Make sure to use a POST request when sending the payload in the body of the request.", "attr": null}

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4336
Entropy (8bit):	4.569678130120933
Encrypted:	false
SSDEEP:	96:P3iQ9ke21b1b4X26xPAv8psVtTk1KmsJ+6:/iQ9ke04G7v0sfw6
MD5:	07DAFB3B3B19203786484D9074C7E230
SHA1:	A76349E24A4E3A03F9BB020743D1F49DA0131714
SHA-256:	8597CB7AE41240BE9D8D9EF96F1F0E511F9DCD5A5D7F6CC96F243976A27BFDCB
SHA-512:	1E8CF6389BB4A42B2C9908B23AA75F60129E97A522B136F365615E47763B65E5CD3BDD8C426006C4DE7DA135178D85344918E0512EDD9D5EF5752038505BC8E7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab2"><g id="outlines"><circle id="bg" class="cls-1" cx="95" cy="95" r="94"/><circle class="cls-2" cx="34.36" cy="77.93" r="1.86"/><circle class="cls-2" cx="23.22" cy="77.93" r="1.86"/><path class="cls-2" d="M32.06,81.68l-.5.25a6.21,6.21,0,0,1-5.53,0l-.5-.25a1,1,0,0,0-.89,1.79l.5.25a8.22,8.22,0,0,0,7.32,0l.5-.25a1,1,0,1,0-.89-1.79Z"/><circle class="cls-2" cx="93.23" cy="40.99" r="1.86"/><circle class="cls-2" cx="82.08" cy="40.99" r="1.86"/><path class="cls-2" d="M90.92,44.74l-.5.25a6.22,6.22,0,0,1-5.54,0l-.5-.25a1,1,0,1,0-.89,1.79l.5.25a8.23,8.23,0,0,0,7.32,0l.5-.25a1,1,0,0,0-.89-1.79Z"/><polygon class="cls-2" points="94 61 92 61 92 86 86.9 86 93.01 90.79 99 86 94 86 94 61"/><path class="cls-2" d="M79,82A14,14,0,0,0,65,68H58v2h7A12,12,0,0,1,77,82v4H71.9L78,90.79,84,86H79Z"/><path

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1671
Entropy (8bit):	4.373953575559949
Encrypted:	false
SSDEEP:	48:r9sZgcn6H7zC7+ClTU7NQ74VbLf23iarpuhlTy4ML:SJuyMNf2VurTyb
MD5:	892A5AC02A6ABD105EB9BA14B81E07A8
SHA1:	5A11FD0E2BF2FD3103EBC926CCF255EE7145138B
SHA-256:	7D3B708FBCBC101D8F5B68141E4C4B9121B41DF5F1E302E416CC0572F284CBF2
SHA-512:	559BA18A6A1141B32989D9657838510D53A22EE9AA2D5455E43AEAC8F42CC614D8CD745783F1422D5CB0545A75FC3D68E84C3EA9F2DFEC54C58CA06D7FFCF635
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/engadget.svg
Preview:	<svg id="svg2" xmlns="http://www.w3.org/2000/svg" width="1534.39" height="333.13" viewBox="0 0 1534.39 333.13"><title>engadget</title><g id="g10"><g id="g12"><path id="path14" d="M0,243.49c0,16.15,13.13,29.28,30.29,29.28H151.42V242.48H30.29V212.2H149.4c16.15,0,32.3-13.13,32.3-29.28V124.37c0-16.15-15.14-32.3-32.3-32.3H30.29C14.13,92.07,0,108.22,0,124.37Zm151.42-61.58H30.29V121.35H151.42ZM556.21,91.06H436.09c-16.15,0-32.3,16.15-32.3,32.3V242.48c0,16.15,16.15,30.29,32.3,30.29H555.2V303H434.07v30.29H556.21c16.15,0,29.28-14.14,29.28-30.29V123.37C585.49,107.22,572.36,91.06,556.21,91.06Zm-1,151.42H434.07V121.35H555.2ZM323,91.06H233.19c-16.15,0-31.3,16.15-31.3,32.3v149.4h30.29V121.35H323c16.15,0,30.29,15.14,30.29,32.3V272.77h30.28V153.65C383.59,120.34,356.34,91.06,323,91.06ZM757.1,242.48H636V152.64c0-16.15,16.15-32.3,33.31-32.3H757.1V271.76h30.28V123.37c0-16.15-12.11-32.3-28.27-32.3H669.28c-33.31,0-63.6,29.27-63.6,62.58v89.84c0,16.15,17.16,29.28,33.31,29.28h52.49c27.26,0,55.52-11.1,65.61-30.29

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4230
Entropy (8bit):	4.197667486476688
Encrypted:	false
SSDEEP:	48:AVG39o+zjQ/m0tKBmaTrq1hJa8wfVFdosFZkWdbHHle1h5yCC1PaUQDI+H24MwS1:W+nQ/fNXI8Cdos1dblgiCAPP8WAyVn
MD5:	B58FFE96F6851CEA6B0D0868CADC5D36
SHA1:	E05B4D488F699D835CB1F58FAB43BADEA523930B
SHA-256:	EFEA616F7C43710A2352033E402A704D93FD70428E2E2C7EA5CA3AF6FCEA6508
SHA-512:	27E765FD7B31B72FC89EA30DAF7DF7C9B1FBB2EA1BE33D661F2E21242686E1F733FCFBFDE609D3B0BFD4FD62E2A65B846B7EA9652CEE8DE86CABFFB39CBB6F3B
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/access.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#cce7ff;}.cls-3{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab4"><g id="outlines"><circle id="bg" class="cls-1" cx="95" cy="95" r="94"/><rect class="cls-2" x="27" y="82" width="2" height="54"/><path class="cls-3" d="M82,17a26,26,0,0,0-.15,52l8.56,6.58,4.22-9.85A26,26,0,0,0,82,17ZM93.38,64.14l-.31.17-3.48,8.12L82.53,67H82a24,24,0,1,1,11.38-2.86Z"/><path class="cls-3" d="M89,28H70V52h5v5H94V33H89ZM72,50V30H87V50H72ZM92,35V55H77V52H89V35Z"/><path class="cls-3" d="M95,1a94,94,0,1,0,94,94A94,94,0,0,0,95,1Zm0,186a92.13,92.13,0,0,1-83.77-54,16,16,0,0,1,7,1.87,18,18,0,0,0,8.88,2.1A18,18,0,0,0,36,134.9a16.12,16.12,0,0,1,8-1.9,16.12,16.12,0,0,1,8,1.9,18,18,0,0,0,8.88,2.1,18,18,0,0,0,8.88-2.1,20.4,20.4,0,0,1,3.28-1.32h0c.27-.08.57-.15.87-.21l.2,0,.84-.14.22,0a20.39,20.39,0,0,1,2.59-.15,16.12,16.12,0,0,1,8,1.9,19.87,19.87,0,0,0,1

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	37035
Entropy (8bit):	4.939323707654456
Encrypted:	false
SSDEEP:	384:wtcGGhB6/eFMm3lnAxCpph5wYgr6b8MxAc6wMFW:jbH11m5rgx
MD5:	78BA220259933F24DC696A3B1E085444
SHA1:	39C72D416A8564F5C2D9CFEE8C9DDD17CEA17807
SHA-256:	7BA1BC2084DEF769E77A7DBF97CD91D68FE6C6D55B5D183A7D36630DA8DA2B02
SHA-512:	B7622AF8523D9A31BA20AA960745E2A6DF4D1583B940A94C8380CF1D802ABFBFB1F183927DD457280F8F9477AFCF670BA17B80EB8F03884A867638F251AC2525
Malicious:	false
Reputation:	low
Preview:	<svg.xmlns="http://www.w3.org/2000/svg".xmlns:xlink="http://www.w3.org/1999/xlink".width="1656".height="24">.. Define SVGs -->. <defs>. search -->. <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <path d="M18.65,17.03l-3.67-3.68A5.942,5.942,0,0,0,16,10a6,6,0,1,0-6,6,5.9,5.9,0,0,0,2.72-.65l3.81,3.8a.942.942,0,0,0,1.32,0l.8-.8A.942.942,0,0,0,18.65,17.03Zm-6.99-2.74A4.537,4.537,0,0,1,10,14.6,4.6,4.6,0,1,1,14.6,10a4.5,4.5,0,0,1-.64,2.33A4.6,4.6,0,0,1,11.66,14.29Z"/>. </symbol>.. sort -->. <symbol id="sort" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">. <path d="M0 0h24v24H0z" fill="none"/>. <rect x="11" y="6" width="10" height="2"/>. <rect x="11" y="10" width="7" height="2"/>. <rect x="11" y="14" width="4" height="2"/>. <polygon points="8 6 5 6 5 15 3.05 15 6.5 18.45 9.95 15 8 15

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 47136, version 1.0
Category:	downloaded
Size (bytes):	47136
Entropy (8bit):	7.99615068864472
Encrypted:	true
SSDEEP:	768:/mKiHVeRlbsF/1p6cYAagXYe2eUEBJu2Sz12n7PS/NwlY2jOh/QOaReZ5QBdN5TA:/mjHmqNp6cYJe2u6z12njS1E6BQOa1TA
MD5:	A47C3355AAE82555F7CA3C38E8A4C1D6
SHA1:	C57E17BD233D69F67EC6EDE882E7932CDC02D56D
SHA-256:	6B0DAB5300943D98F4F20DE9D48A49E0186441F6FB8B5E95A9635A30C0B60E72
SHA-512:	3F448E5625EFDC95929CA2A504C17C4814FC8ED2A83B232F07B2E1A50F421D894C34F4CE5C699C42ED6F615C3EF9A141C98B740E14EA6923CA4E64A4FA7D3B77
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2
Preview:	wOF2....... ......................................s..z...?HVAR.H.`?STAT.$'....+...\|.../V.....<.....T.0..$.6.$..$. ..~......[q.qB.c.A.IUY?.v.'...s;(y..w...."A}.]...?5...I.iAA....?....,.H...h.s...U.zi..CRk..6^[.c.....r...a...!.....U,.."......).skT.c..N.:.M../i.:]?._...n..%h..?..L.x..LI...h../\|.yn..M...ni..~[./.7..8y......-F..v....C.Ju....'..o.....\e....DQ.e/.D.L%.dm."0n...T.k......1..........ANOzfT.m7)59..Q.-'=Q.R2<m......p.y.....;... .....TD..dV`...s...MY.3.T....(ZJ....T..LT.D.....`s....7.~.......a.V...1.,D.l..._e..6.....QV1....M....R.g....W...@..Vlmj.$mn..00.g.p....b....%.....^.v...........3..Z........E...F(..a.&.!.y..Q.C...u.../}.a&F...Fm...GB-......%.....w..I..6..B.$.L2Qb.]gs>........Kp'.y8.u......f%.:&...T..l.fmJ...,..]u.8.n..)i..H.b....,...2.^...M5..Y..R.}."\|.c,.ur8M._.lY......X].zw.@.x. ......B=..6.0t."Y..Z...C.;?=8W...@.a..S.].4 ...&..Y..R. p..zV..3[..R-g`.c..@<....r'Ep$...9..$.>.u..... ..k..P..#Ch..D..O'D<.BQ3.../;.`..\|......Y{...._.8...}$..m.L...W

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5021)
Category:	downloaded
Size (bytes):	5139
Entropy (8bit):	5.207850479567536
Encrypted:	false
SSDEEP:	96:oIvllJxvYaYpoVGe5QYqMvs5PPm2nrH8PQJ+9ixh3oyfqRVnKBRxk5REWS:rbvApkGaQnymPmsH49ixvfqzn15REWS
MD5:	DD59FEDB150C363F59D7E58BF77CA1AB
SHA1:	1DCB32609736A7B3F724A7798023F7861253AAB6
SHA-256:	516F5E4C2DC5C69F3E1707E76695F866F8E62468ACA15C1A9DDB165EB684F6F0
SHA-512:	B74ECF2D67EB939DBBE09C9BD09E419ADD91E447D78A97F3344D2850A2BED69FC7CBAE1CA807E03BFC0E63B91CEB624D37BEF979CBF5382EDE534E8A60747667
Malicious:	false
Reputation:	low
URL:	https://cdn.ampproject.org/rtv/012310301456000/v0/amp-fit-text-0.1.mjs
Preview:	;.(self.AMP=self.AMP\|\|[]).push({m:1,v:"2310301456000",n:"amp-fit-text",ev:"0.1",l:!0,f:function(t,n){(()=>{var n,{isArray:i}=Array,{hasOwnProperty:e,toString:o}=Object.prototype;function r(t){const n=parseFloat(t);return"number"==typeof(i=n)&&isFinite(i)?n:void 0;var i}var s=["Webkit","webkit","Moz","moz","ms","O","o"];function l(t){const n=t.replace(/[A-Z]/g,(t=>"-"+t.toLowerCase()));return s.some((t=>n.startsWith(t+"-")))?`-${n}`:n}function c(t,i,e){if(i.startsWith("--"))return i;n\|\|(n=Object.create(null));let o=n[i];if(!o\|\|e){if(o=i,void 0===t[i]){const n=function(t){return t.charAt(0).toUpperCase()+t.slice(1)}(i),e=function(t,n){for(let i=0;i<s.length;i++){const e=s[i]+n;if(void 0!==t[e])return e}return""}(t,n);void 0!==t[e]&&(o=e)}e\|\|(n[i]=o)}return o}function f(t,n,i,e,o){const r=c(t.style,n,o);if(!r)return;const s=e?i+e:i;t.style.setProperty(l(r),s)}function u(t){return`${t}px`}function a(t){return CSS.escape(t)}var h="i-amphtml-fit-text-measurer",m="i-amphtml-fit-text-content",

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6086
Entropy (8bit):	4.258226321313911
Encrypted:	false
SSDEEP:	96:kw7DYYMk0yLtuovEUSVziD8jG/4a/x3D8jGjgVJjw13K0MkYjLtuoPIExSVzWo3j:kwQ7k03SEU+iQGwJjwKkYw3Ex+jj
MD5:	8CC1EFBA1DB849049A6B9A6F4ECFDA2C
SHA1:	61AA0A05F210150F29C994060BF56219B2D28141
SHA-256:	8EF79111CB93B88AD71BF488B86DDFED18D8EFAFE82010885C47E9DCF3ADC61E
SHA-512:	C4222907026CC144B4A1A2F326068DDC7CF886E0B4D3055A9A6FEFAAA550009A0572B0AAF02081BE44E5EB6D18ED78BA5EF3FAF3E81F9043C48634AAFC28AB56
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/store_color.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#07f;}.cls-2{fill:#fff;}.cls-3{fill:#b2b7c4;}.cls-4{fill:#ffdb80;}.cls-5{fill:#b3ddff;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab3"><g id="color"><g id="outlines"><path class="cls-1" d="M155.5,117a4.5,4.5,0,1,0,4.5,4.5A4.5,4.5,0,0,0,155.5,117Zm0,7a2.5,2.5,0,1,1,2.5-2.5A2.5,2.5,0,0,1,155.5,124Z"/><path class="cls-1" d="M180.09,55A94,94,0,0,0,1,95a94.71,94.71,0,0,0,6,33A94,94,0,0,0,185,122c.69-2.3,1.3-4.63,1.81-7,.14-.66.28-1.33.4-2a94.16,94.16,0,0,0-7.17-58ZM8.83,127.3A92.71,92.71,0,0,1,3,95,92,92,0,0,1,172.87,46H114.59A3.59,3.59,0,0,0,111,49.59v60.86L75.71,133H67.24A4.49,4.49,0,0,0,66,126.76V125h6a1,1,0,0,0,0-2H67.91a2.6,2.6,0,0,0,.09-.63V100.66A2.63,2.63,0,0,0,65.37,98H63V90.11H55l-.68-5.23L34,87.52,34.73,93h-4.1A2.63,2.63,0,0,0,28,95.63v26.74a2.6,2.6,0,0,0,.09.63H22V107.69a10.43,10.43,0,0,0-3-7.32A2,2,0,1,0,17,102a2,2,0,0,0,.64-.12A8.42,8.4

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1332
Entropy (8bit):	4.445616470476398
Encrypted:	false
SSDEEP:	24:t4po/yWDcKjo//dzoX5U7837D6H5F3wVchiPJ43O4H413dOV:VhTjqOe703UwVciZS
MD5:	480A62AA64D0A5BA67C343FB6ED2E319
SHA1:	695D992D05D09C9C1E220015BC7B7F08F40CE6AB
SHA-256:	4D9CCF2F203E169C71FC4AB2310C23CFB469CB92AFF7B9D6D1422ECAA9AA39E4
SHA-512:	3A5AF4886945D45E6C854B090B2E8BB9DE3DA6390591DD50DF5BF05F7C64944F770FD16A63A26377C9334972C515034A14E7C097695933EED99D15EBA3F60DDB
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/pf_1_time.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab11"><path class="cls-1" d="M74.22,63.29l-3-3a6.83,6.83,0,0,0-9-.55l-2-2a6.83,6.83,0,0,0-.55-9l-3-3a6.75,6.75,0,0,0-4.81-2h0a6.75,6.75,0,0,0-4.81,2l-1.31,1.31a6.81,6.81,0,0,0,0,9.62l3,3a6.83,6.83,0,0,0,9,.55l2,2a6.83,6.83,0,0,0,.55,9l3,3a6.75,6.75,0,0,0,4.81,2h0a6.75,6.75,0,0,0,4.81-2l1.31-1.31A6.81,6.81,0,0,0,74.22,63.29ZM54,54a1.77,1.77,0,0,0,0,2.5l1.16,1.17a3.27,3.27,0,0,1-3.93-.51l-3-3a3.27,3.27,0,0,1,0-4.62l1.31-1.31a3.27,3.27,0,0,1,4.62,0l3,3a3.27,3.27,0,0,1,.51,3.93L56.54,54A1.77,1.77,0,0,0,54,54ZM66,66a1.77,1.77,0,0,0,0-2.5l-1.16-1.17a3.27,3.27,0,0,1,3.93.51l3,3a3.27,3.27,0,0,1,0,4.62l-1.31,1.31h0a3.27,3.27,0,0,1-4.62,0l-3-3a3.27,3.27,0,0,1-.51-3.93L63.46,66A1.77,1.77,0,0,0,66,66Z"/><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,2.08V74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (26703)
Category:	downloaded
Size (bytes):	36266
Entropy (8bit):	5.443926480116674
Encrypted:	false
SSDEEP:	768:4V/I5uNJjKvMtCGsOlBSt2Rfz4wDQjZvy/HQWwY4RXrqt:4JI5uNEUtCGhBSt29DQjZK/HQWwY4RXI
MD5:	4AD58DA091F5B86DF0DFB16731DE4758
SHA1:	B1A53AF9287E97251DB7ABD5D9AF8902AA1913F7
SHA-256:	4E4338DFC676973FAD1D86CDC24EEE3F97D6B80A1D3AE3C90782B403C5E358A0
SHA-512:	52093D4B19A1210FB9FD67EA64BD15AEEA64E7C364863105433E81FEB4DD5BDA545242005EE284CDACAAF5C5200121E41D9A49BEBABF1EB65FF6380AC1498011
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUO2689O&prvid=2034%2C2033%2C2030%2C273%2C2028%2C2027%2C2025%2C237%2C117%2C359%2C97%2C55%2C99%2C3012%2C3011%2C3010%2C201%2C3007%2C246%2C4%2C203%2C446%2C9%2C2011%2C3022%2C3020%2C173%2C294%2C251%2C175%2C450%2C2009%2C178%2C255%2C3018%2C3017%2C214%2C336%2C3014%2C337%2C338%2C459%2C77%2C38%2C182%2C261%2C141%2C262%2C461%2C222%2C301%2C225%2C468%2C10000%2C80%2C108%2C229%2C307&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":141,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":"c","coc":"NA"},"cs":"8","lookup":{"son":{"name":"son","time":28,"cookie":"data-so","urls":[{"type":"img","url":"https:\/\/sync.go.sonobi.com\/us?https:\/\/contextual.media.net\/cksync.php?cs=8&vsid=<vsid>&type=son&refUrl=<refUrl>&vid=<vid>&axid_e=<axid_e>&ovsid=[UID]","eu_url":null}],"pvid":35,"isBl":0,"g":1,"cocs":0},"opx":{"name":"opx","time":364,"cookie":"data-o","urls":[{"type":"img","url":"https:\/\/us-u.openx.net\/w\/1.0\/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D%3Cvsid%3E%26type%3Dopx%26refUrl%3D%3CrefUrl%3E%26vid%3D%3Cvid%3E%26axid_e%3D<axid_e>%26ovsid%3D","eu_url":null}],"pvid":43,"purge":["\\{\\$UUID\\}"],"isBl":0,"g":1,"cocs":0},"g":{"name

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7087
Entropy (8bit):	4.838967944508341
Encrypted:	false
SSDEEP:	192:f91L1o1G1A1mK1W1jjtGKIT0HxT41HmTgHdT/sTKMpU4Ug:l1L1o1G1A131W1jjtGKIT061VFE1
MD5:	510705596D4E0C18083DD41E5DEF0526
SHA1:	901D611CED86EB441B9C0053F6A3F9C10D1364D7
SHA-256:	76399C7E8D135705D5032F4B5A423D17FF63FEA7172F0AB306518776DD216F52
SHA-512:	3D9C8AAF1FED4BDDC1A1C2C1E7763112947DD77F5FEB1EB13A408F1128FF0C5E8398FDA26947AD039B7EF9D620E24DF69B071A304FF3ABE0B422EE2C4F038BC0
Malicious:	false
Reputation:	low
URL:	https://app.termly.io/api/v1/snippets/websites/5c7c818e-90ba-4e9e-b259-9c620b055e9c
Preview:	{"uuid":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","id":2474921,"name":"https://convertwithwave.com/","over_consent_quota":false,"over_consent_quota?":false,"consents_count":92400,"provisions":[{"id":null,"key":"allow_banner_custom_languages","type":"boolean","config":{"value":true},"data":{},"create_time":null,"update_time":null,"delete_time":null,"provision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","resource_type":"website"}},{"id":null,"key":"allow_banner_custom_styling","type":"boolean","config":{"value":true},"data":{},"create_time":null,"update_time":null,"delete_time":null,"provision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","resource_type":"website"}},{"id":null,"key":"allow_banner_extended_regional_consent_config","type":"boolean","config":{"value":true},"data":{},"create_time":null,"update_time":null,"delete_time":null,"provision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","resource_type":"website"}},{"id":null,"key":"allow_cookie_

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=20909&user_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 738 x 292, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	21609
Entropy (8bit):	7.981178821301492
Encrypted:	false
SSDEEP:	384:wHB2v9h/PLtHaX+1KcvgEYNN2lKZ19bd3XYLRk0/YkLip3eQf8mWrUfJb6K5IBi:wHIFxPLJG+1DONklK/YLziRehH2x6Ka0
MD5:	30FC76D6B2556E296DA05D1CB1278C8B
SHA1:	8810B1670B62E848DAE36098287505103B7CD425
SHA-256:	FDB57C5DBC2A536D1A81B06340541E290B921EB23DB83B25AF9E01AD88181E56
SHA-512:	52AE04948A2FFDCAE1F139C7C0273119D4DF197BCDEA94FC937C1810BA2FB31AD1AD8CB85B9DB51F6358AA77425925BEEC65C302DE34657655343391B0C638DE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......$.....]d.9....PLTE.........17=................................................,27............................../..7.....(-3........%...7........JMQxyzVY^eef>@C....oop....@z-j.......4.........$(--..Z`i............[..214...o...............(.K......t..<.....\.....p..............=.................Q../..Pw.....#h.........`iu......_....7Ld ..)..#.-9/_37LO3LI....2$....1+)2#=:...........\|cX..9...qBIPt<.y`..g....f\|pSj.P'u..e.cg.E.............Y1[....H&4......smR%..z{2.1.......... >#.,........_.....^....R,IDATx..Y.O#U.....)..i.....d..]b.n".....7.j4..M..GB$....Q.#n\|$f............1~.{^..o.9{.....0.T........)kPp.vaddd..5.cDm(l.`.3%..tPq...aq.Z%y..T. ..f`...z)R..gN..h.....!..SXig}.I...l...+?W.p..H.g...N...5.L4<..(...8.X....e..bg.K[..HE7~]7..~'.(.......HP.z.....Q....o./.>..k}.d:W..!..."m.Q.....B.(4&...X.=....1n.....T;.O.&y..>..!.H=.2.P..@.4.q..6.\|%_..O.R...i..>.gl.......V%/..o.G.;U.V...@.......1.j...I..-P)A.o..!C.....0..T.&...sR.

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3357
Entropy (8bit):	4.584804289234705
Encrypted:	false
SSDEEP:	96:/cGxX80qHIM6F+jNGDey1nd7KdQZnrJVeNo1DU:TbhXq7xQZ/eUQ
MD5:	B3BB5BF9102F80054D199F293046DB84
SHA1:	DA895FAF7E3BE63D6F966C5651068954483F74DD
SHA-256:	8539C91AE0A82F8CAB27D481EA38AC4E66D1E5B36701FE295BCBA4399B9255BD
SHA-512:	563AC8D5546E50ACB2E895685D1CB0EDC4EDF50452E8629C46E7CB18460C714B66366658F24F0E705D1AB631F4E17E0947083F7DE854A32B4E1E1298DC5F29C6
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/header/mf_logo_full_color.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42"><defs><style>.cls-1{fill:#07f;}.cls-2{fill:none;}.cls-3{fill:#fff;}.cls-4{fill:#0e2866;}</style></defs><title>mf_logo</title><g id="full_color"><g id="flame"><path class="cls-1" d="M21.91,9.26a51.47,51.47,0,0,1,9.33,1c2.91.54,5.85,1.55,8.83,1.54,2.28,0,4.12-1.59,4.11-3.53S42.32,4.7,40,4.71a13.35,13.35,0,0,0-3.9.65c.33-.24.66-.48,1-.69A26.14,26.14,0,0,1,52.19,1C57.81,1.26,63.66,3,68,6.72a19.89,19.89,0,0,1,6.62,17.82A19.75,19.75,0,0,1,62.45,39.62,24,24,0,0,1,48,40.14c-6.21-1.57-11.64-5-17.48-7.53a46.86,46.86,0,0,0-10.57-2.68H20a9,9,0,0,0,4.11-.7c1.73-.83,1.72-2.83.82-4.29-1.07-1.74-3.23-2.45-5.09-3a24.36,24.36,0,0,0-10-.49A15.06,15.06,0,0,0,3,23.94,5.67,5.67,0,0,0,1.2,26.16c3.08-8.54,9.2-7.58,13-9.92a2.16,2.16,0,0,0-1.57-3.93,7.24,7.24,0,0,0-2.92,1.46l-.86.65S11.9,9.26,21.91,9.26Z"/><path class="cls-2" d="M24.93,24.82l0,0,0,0Z"/><path class="cls-3" d="M24.84,24.73l.06.06Z"/><path class="cls-3" d="M57.3,1

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/8570cc0b-f710-e5a5-cdd7-7d2b6d928baa?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (926), with no line terminators
Category:	downloaded
Size (bytes):	926
Entropy (8bit):	5.1921818332582115
Encrypted:	false
SSDEEP:	24:9kKR6Dj1uBT5q3od781LDt3msXUXwSS/u0MFC5Nz:B4luxAY2NDAcUXRUu05H
MD5:	EDB8B12570B9800E149DB7F709D37CAF
SHA1:	707AFD04A118FAA66BCC6D44550AC78025BF6860
SHA-256:	B0DC9F241EC7F0549DB655A6D4AAA8C5540E5C82A1C908B8B83750E6853CD2CF
SHA-512:	C23BDE4E9F098E7FC809132BA839C7DDE19120CE35528A2F63904BA80E4D3C945762F406A85EA6FA062236DF44FB4D4693F5ACD4DDDDBFECF22358C1D47919F1
Malicious:	false
Reputation:	low
URL:	https://go.ezodn.com/detroitchicago/boise.js?gcb=195-8&cb=2
Preview:	try { __ez.ck.get=function(e,o){null!==o&&(e=e+"_"+o);for(var n=e+"=",t=decodeURIComponent(document.cookie).split(";"),i=0;i<t.length;i++){for(var c=t[i];" "===c.charAt(0);)c=c.substring(1);if(0===c.indexOf(n))return c.substring(n.length,c.length)}return""},__ez.ck.setByCat=function(e,o){if("https:"===location.protocol&&(e+="; Secure; SameSite=Lax;"),-1===e.indexOf("path=")&&(e+="; path=/"),"undefined"!=typeof cmpIsOn){if(null!=o){var n=__ez.ck.get("ezCMPCookieConsent",null);-1!==(n=n.substring(1,n.length)).indexOf(o+"=1")?document.cookie=e:""===n&&"undefined"!=typeof cmpCookies&&(void 0===cmpCookies[o]&&(cmpCookies[o]=[]),cmpCookies[o].push(e))}}else document.cookie=e};} catch(err) {var hREED = function(er) {return function() {reportEzError(er, "/detroitchicago/boise.js")}}; typeof reportEzError==="function"?hREED(err):window.addEventListener('reportEzErrorDefined',hREED(err), {once: true}); console.error(err);}

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59252
Entropy (8bit):	5.990559420896918
Encrypted:	false
SSDEEP:	768:0W59UreQNoszvJoiYvwwjxD2QT5Ta7l74gTnPpx:0kszv0YwjxD2QT5Ta714gTPpx
MD5:	4DB2302EB2D89BF07F92DC858D9C24BB
SHA1:	9A9D99B6F4BC368AFC99ED2F4CAB57F17B9710A4
SHA-256:	F15CECE32E229C992BD03AAD177103D69E907F3B3468BFFAB3F52B7137DFE6EA
SHA-512:	A978949F955B2098209D14F380E44B011AD49AE1B32E73D254772909B15CC8B0EEC8DAA6F56BE61A6B5A9EACB5C580A65BE7C8792EC68FE49CDDD808A40D8AAE
Malicious:	false
Reputation:	low
Preview:	{"/183096492/MediaFire-Zone3":["html",0,0,null,1,280,336,0,1,null,null,null,1,[["ID=2f792abd942ab1d1:T=1703780532:RT=1703780532:S=ALNI_MZaOvBOVq3tsbRWZ8aFrUMTNveYgg",1737476532,"/","mediafire.com",1],["UID=00000daf1f95a9e3:T=1703780532:RT=1703780532:S=ALNI_MYG8XpD3ZYOS_Zzx9f0sqnbe_XlEg",1737476532,"/","mediafire.com",2]],[138398611357],[6065278055],[44223692],[157444412],[187058],null,null,null,null,null,null,1,[44714449],null,null,null,null,null,null,"COj2qIvFsoMDFWMSswAdHcsD3Q",null,null,null,null,null,null,null,null,["012310301456000"],null,null,null,null,null,"3",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012310301456000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!impor

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3878
Entropy (8bit):	4.7098248622178165
Encrypted:	false
SSDEEP:	48:ydLcXwUnPWcmNVBV+VTIwUymdLswUnPxNVBVDMwfBKqBVBVSMjBq:KuPnqVBVeTI5yQuPrVBVDPBK+VBVSeBq
MD5:	E0213BA339B020695A1B4A258CC28F3E
SHA1:	92822B5C1F0DC3B38E49FF98DB12E394A3D46F9F
SHA-256:	2580BE55F5DB7648328614A2623480E3F750B915EBF84B0B615BEDA75765FEF9
SHA-512:	3389F69D071858C39C2D8549E3E50AA0CFB4BC18C8335290CC97BD840C63DA2D9DA13806D8DFE8F0091CC454A88008B431F15497D1AA0A121ABD1BCB8EA5D690
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/home/pixels?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%2520converter&crt=677032990697&plc=www.mediafire.com&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE
Preview:	.. var getInstallFinishedPixelsLoadedPromise = function () { return Promise.resolve(); };. var getInstallStartPixelsLoadedPromise = function () { return Promise.resolve(); };. . (() => {. let script = document.createElement('script');. script.async = true;. script.type = 'text/javascript';. script.src = 'https://www.googletagmanager.com/gtag/js?id=G-ZDEB536PB9';.. let fs = document.getElementsByTagName('script')[0];. fs.parentNode.insertBefore(script, fs);. })();.. window.dataLayer = window.dataLayer \|\| [];. function gtag(){ window.dataLayer.push(arguments); }. if (!window.gtag) window.gtag = gtag;.. // if (!window.dataLayer.some(e => e && e[0] === 'js')) // only run js tag once. gtag('js', new Date());.. var params = {. 'groups': '' \|\| 'ga',. 'transport_type'

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2795
Entropy (8bit):	4.328922815564655
Encrypted:	false
SSDEEP:	48:AVGS2XGsm/M+uzx//OgsW9cI/fK34mrYMkEAInjOYtuoPIExSV3DsnEczE3D8Si8:na/AR13K0MkYjLtuoPIExSVzWo3D8jGj
MD5:	E0911D2DEA1A6C2400BE2CF42DFB760C
SHA1:	88AB10D95B94592FBA202B895F40432F1C9FA83C
SHA-256:	822A7F21F2B6C513ED87FD34DD8CBF9F64D9CF1A53CB94A7FCCE5F619B70F2EB
SHA-512:	E195C1859378C27E221B6BDD2AEEB624054D15CC1813B690E93DDDEA99157AD929B578FAD0C5F02C6768E99157B2FFA4645B5420F0A30D4B769B6E986420B95D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab3"><g id="outlines"><path id="bg" class="cls-1" d="M189,95a93.66,93.66,0,0,1-1.74,18c-.12.67-.26,1.34-.4,2-.51,2.37-1.12,4.7-1.81,7A94,94,0,0,1,7,128,94.71,94.71,0,0,1,1,95a94,94,0,1,1,188,0Z"/><path class="cls-2" d="M155.5,117a4.5,4.5,0,1,0,4.5,4.5A4.5,4.5,0,0,0,155.5,117Zm0,7a2.5,2.5,0,1,1,2.5-2.5A2.5,2.5,0,0,1,155.5,124Z"/><path class="cls-2" d="M180.09,55A94,94,0,0,0,1,95a94.71,94.71,0,0,0,6,33A94,94,0,0,0,185,122c.69-2.3,1.3-4.63,1.81-7,.14-.66.28-1.33.4-2a94.16,94.16,0,0,0-7.17-58ZM8.83,127.3A93.1,93.1,0,0,1,3,95,92,92,0,0,1,172.87,46H114.59A3.59,3.59,0,0,0,111,49.59v60.86L75.71,133H67.24A4.5,4.5,0,0,0,66,126.76V125h6a1,1,0,0,0,0-2H67.91a2.18,2.18,0,0,0,.09-.63V100.66A2.63,2.63,0,0,0,65.37,98H63V90.11H55l-.68-5.23L34,87.52,34.73,93h-4.1A2.63,2.63,0,0,0,28,95.63v26.74a2.18

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15907), with no line terminators
Category:	downloaded
Size (bytes):	15907
Entropy (8bit):	5.514273213911923
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncM:jAJ00JnLOH4ZjhwDi2+0s9R
MD5:	AE79DB664406C9254F4F32DAF70C93AC
SHA1:	FAE0AE1FCEB99F996F315545F1C75EB04939B20C
SHA-256:	8E53E50181B7A9E2CAA94173C37FCD9DE8FA75750764A2AD8AD02FAC3306D652
SHA-512:	FBD5EC409CE57592EFF6BDFB2DF69C2414A79D84CB9B1BE5B6C5110985A0FF4D192B7D31160D9F14F3E3DBA21628129ECF9BC925597F968AC1CF6DF849346AF6
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=158936
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3397
Entropy (8bit):	7.92414523271258
Encrypted:	false
SSDEEP:	48:9QjkRh62qbgroYD3AosDTbGrqgNN/aIVjfj4PYGetsvmd00qfU/rrOeBy2zwA:SjkR42XpqbGrq4aIGPYak+Xeyw
MD5:	F3F91969E8ADB2E40754D2FE5B9ED06F
SHA1:	90FFFCE1474EAE0F55724CF038B7B8EF54397CFF
SHA-256:	AD013C56B378A1FBF28331272BF2F4BAB1C69B5C256B118E1932C03A5364F3FA
SHA-512:	A0E81BDE19ECEC4A5B3DC0E8472C5A6ACEED8674367369EF01CA2333DC65811C87E3E6F72EE2DAAD7BF5967A17C3846196F6C3E30862C3A7C5886633B9096ED5
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/wave-ico/wavebrowser-48.png
Preview:	.PNG........IHDR...0...0.....W.......pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATh...{.T.....kO.03.....a.n20.E.`X1...T"D....dS)S..Mm.!Y.[.nv.cKC.Y%b4.[.bD7.............e..v..\|......A.T.:..}N...{..r.....n..Q.....Z..DPe@.=e.."..P.....V..~...}..d....Y.R... ..b......6../.]o..........Xj=. H..t.j..a.T.@I9.V8...:.x.bC.x..O...0BO../.... mm!......#..`.4hY.7.B^~......<...... ....A...._..^..a.......2.....K...../8......6....x{.n..H........".......i..w ...Y...w~....~....%.../..S......"..I_...(u@..s.\|#E@.u<..7...6..............E...(.K.....m.).h(.%.S..n.t...y....[DB,Z...}fx.....O.....O.....=...0-..U..........o_w].....x..a.J.X.B.....-0..w.......{.s..h..]...(..N.d~G..s.....w.72.........{.r....>.RK...S.?......tX.K. ...B...)d..X.6=../....7..Y...]...m...h2.....d.HD.B[..-.9.Y.......M.]N.w....'...mA..o[....i..!...RD....F~.V.,........Hq2\|...\|.s.z.i.e&Y...o..U.%)ng..)Q.S.<..d.......zD........N...../...h...r.-.t......H.H.K..V...$............

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=NWUyMjFiMWJhMmU0YmYxMTZjNTZhZWNkYWY4NzE2ZWU&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1127)
Category:	downloaded
Size (bytes):	1207
Entropy (8bit):	5.1347458642275905
Encrypted:	false
SSDEEP:	24:Ce47ZUH2ogoUAz4F7ky8v7Wp7/HAdivgF7d7RLQ7RGR5bPQkfcwa8fA4v75Q2XG9:CeU2HbNZzaleCpjgF5mQPQkfla8oMPX8
MD5:	28B94933298B865851D240A14002A291
SHA1:	ABEC66274C23F76A2B9C66D8987F4FABBAD451F8
SHA-256:	B04A268FBD6AC543DCD653B1C529871767A5B78CB2A2F40E54BCB0BFE2DAA154
SHA-512:	0A07DBD7642EF0ABA4C353A4E309652547CFB6635841FB5CA3EA97196111F3041E081471C2BB0BC7ADA785CE6FADB9FB8F51B5B1E1846C2EE4F88E6771D5EC13
Malicious:	false
Reputation:	low
URL:	https://invstatic101.creativecdn.com/encrypted-signals/encrypted-tag-g.js
Preview:	/*. ESP - RTBHouse. * @version v1.2.4. * @link https://www.rtbhouse.com/. */.!function(){async function e(){var e=window.localStorage.getItem("rtbhouse-esp"),n=window.localStorage.getItem("rtbhouse-segments"),t=pbjs.getUserIds()?.pubcid;return signal_decrypted={domain:encodeURIComponent(window.location.href)},e&&(signal_decrypted["rtbhouse-esp"]=e),t&&(signal_decrypted.EID=t),"browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics")&&(e=await document.browsingTopics(),signal_decrypted.topics=JSON.stringify(e)),n&&(signal_decrypted.segments=n),document.referrer&&(signal_decrypted.referrer=encodeURIComponent(document.referrer)),async function(e){return(await(await fetch("https://esp.rtbhouse.com/encrypt",{method:"POST",body:JSON.stringify({publisher_id:"rtbhouse",signal:e}),headers:{"Content-Type":"text/plain"}})).json()).message}(signal_decrypted).then(e=>e)}new class{constructor(e){Object.assign(this,e)}send_signal(){window.googletag.encryptedSignalProvide

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	926
Entropy (8bit):	4.486617853875907
Encrypted:	false
SSDEEP:	24:t48CSh8ONqwJ9PiOwQr1dkaxyAgVpdrf2o5wA:ESf8m9PiOwQrQaoAgVzrfXV
MD5:	F51A31DA564D1E818651FFB251BE5D31
SHA1:	2EDD0AF0B6443861CCB8A0A2183DDE1E9EB59C7D
SHA-256:	4335A4241A637C91845D75A0EA955F846A6B14EB991B579D890584BB2AE9C626
SHA-512:	24D469BE8CDCD02C50EC1CC85A99F2E01EF9E46184F7F6D19C41DDD17B487EE459DEF64E44246E904E767BB0C1D53149F8CDE66ACBF5D04FB285F7BBC08E1171
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/backgrounds/home_unicorn/mf_logo_flame_reversed.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="76" height="42" viewBox="0 0 76 42"><title>mf_logo</title><g id="flame_mono"><path id="flame" fill="#ffffff" d="M68,6.72C63.66,3,57.81,1.26,52.19,1a26.14,26.14,0,0,0-15,3.63c-.34.22-.68.45-1,.69A13.36,13.36,0,0,1,40,4.71c2.28,0,4.13,1.56,4.13,3.51s-1.83,3.53-4.11,3.53c-3,0-5.92-1-8.83-1.54a51.47,51.47,0,0,0-9.33-1c-10,0-13.09,5.17-13.09,5.17l.86-.65a7.24,7.24,0,0,1,2.92-1.46,2.16,2.16,0,0,1,1.57,3.93c-3.76,2.34-9.88,1.38-13,9.92A5.67,5.67,0,0,1,3,23.94,15.06,15.06,0,0,1,9.89,21.5a24.36,24.36,0,0,1,10,.49c1.86.51,4,1.21,5.09,3,.9,1.46.91,3.46-.82,4.29a9,9,0,0,1-4.11.7h-.06a46.86,46.86,0,0,1,10.57,2.68c5.84,2.49,11.27,6,17.48,7.53a24,24,0,0,0,14.45-.53A19.75,19.75,0,0,0,74.58,24.54,19.89,19.89,0,0,0,68,6.72Zm-43,18.1,0,0-.06-.06.06.06,0,0ZM57.35,30a27,27,0,0,1-11.73-3.17c-7.61-3.7-10.7-5-10.7-5.22s4.55,1.57,12.2-2.62c4.42-2.42,6.1-5,10.18-5a8,8,0,1,1,0,16Z"/></g></svg>

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 44 x 54, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	519
Entropy (8bit):	7.324236135674253
Encrypted:	false
SSDEEP:	12:6v/7qJDr7SPvZS5attoppt7BcY7gXWlENssJ+G/fMXzmlrsBo4b:t70sstQt7BDgmlEWjufMXzmve
MD5:	D09A78D421E280D60BB8AA7751BA5265
SHA1:	260C8149E0BBEC543785877721879F8E5A2CBB99
SHA-256:	D704E96A2E3BA3C946FF6473758A6B80FBF58EDFF4E85EBF73DD89EF879C94EA
SHA-512:	248234668E532517D86ADC3AF95E4434BE276F5BA0EEBC31B126607E474696EA08B225B6032E617615B3A8E91E0B9B3D32016D42DBE2A4C1519F0ADD928223A5
Malicious:	false
Reputation:	low
URL:	https://pcapp.store/fa/img/shield-blue-icon.png
Preview:	.PNG........IHDR...,...6............<PLTE...6..7..5..5..5..6..7..5..4..5..6..6..6..0..6..5..5..5..6....9#....tRNS......?o..__. .O/.......gIDATH.... .EsA..k....h'....s...wCN.....y.g.}:....\..zx.!..&;...+.Ol%.....s.._.*.3u\|...X.E_....4.k..H..UT<...{%..1......F^}.J..........._.).R......,R.v).a+........X...'-jLY..Es_...+..`>..n.a.;.".....]...e.......'.;..............nN.O:c?0.].~.E/.YOI{b.E.:.....:...PJ.....n...5....Z...H.[.(w..3D....Cf2..L..es:.."<q&.....s...V.Ie&....I..........$.A.K.....IEND.B`.

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	163470
Entropy (8bit):	5.547914304589543
Encrypted:	false
SSDEEP:	1536:EZ8CqT0BxPmZ8CqT0BxPxZ8CqT0BxPRZ8CqT0BxP7:9
MD5:	EDDDDA909BF3894A1CBFA19B627FCF81
SHA1:	5DDC0616B8BDC8479EB1D2C0ACF615AE9AD93E24
SHA-256:	379A2A11BE29EED8D6750F58650FAD3D0451DBDD4F103E2F3F2A80AB2DF6EF71
SHA-512:	A80268DE75D127318E81B34989A89C4D6DEEF0AFEE8AD590E972925C46D7DE183293893AE23BE7A9B0E8E200066E17A3F00FF8478CAC8F839E2D0729CFFE2427
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/858128210?random=1703780547888&cv=11&fst=1703780547888&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&gcd=11l1l1l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&hn=www.googleadservices.com&frm=0&tiba=Download%20PcAppStore&auid=1615816129.1703780548&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j475816165","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j475816165","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sWrYUUg!2sZbUtxQ!3sAAptDV4oGn2x"],"userBiddingSignals":[["596093288","7904283812","7904705661"],null,1703780549192621],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=149742651319\u0026cr_id=663155881132\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDE

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	146658
Entropy (8bit):	3.778642392275519
Encrypted:	false
SSDEEP:	1536:N/iRfxBTNQYru8zv/86qSwNxZdYxvK7DPeZJT/2Bg1qkwhjd3/iI2FvBs03RLwos:qfTvzYUsN
MD5:	73F7AEE18F28CF8C6F03AA4AC4BEB665
SHA1:	36E6EC6604FAFF0AC12471AA9822BB11DC6AF9CF
SHA-256:	4342FEAC38021C4FE3069EBA0EDF1C2E1B4345E2B548B0AFB7AB21B7369B3BC8
SHA-512:	32A80C11338208A617ECEA099D76E9F0D14857C0A9595FC048BC39B8B408EF810C0EA714B718321B79B039C7165E54794612EFE1B665ABD26EC5338404856B12
Malicious:	false
Reputation:	low
Preview:	<svg id="all" xmlns="http://www.w3.org/2000/svg" width="402" height="210" viewBox="0 0 402 210">. <defs>. <style>. .cls-1 {. fill: #abdda4;. }. </style>. </defs>. <title>world</title>. <g id="africa">. <path id="path2330" class="cls-1" d="M199.868,65.452a2.048,2.048,0,0,1-1.849.084.247.247,0,0,0-.322.085c-.085.153-.238.153-.594-.017-.373-.169-.492-.169-.56,0a.384.384,0,0,1-.356.2.858.858,0,0,0-.492.2c-.169.17-.288.17-.543,0-.458-.271-.933-.254-3.223.119-1.916.322-3.053.713-3.053,1.069,0,.085-.119.135-.254.085a.269.269,0,0,0-.34.05.45.45,0,0,1-.356.17,1.419,1.419,0,0,0-.678.424,1.684,1.684,0,0,1-.628.441,2.475,2.475,0,0,1-1.187-.169,2.7,2.7,0,0,0-1.1,0c-1.069.152-1.7-.1-1.849-.713-.1-.339-.339-.407-.662-.186a3.975,3.975,0,0,0-.593,1.051,3.525,3.525,0,0,1-2.019,2.324c-1.018.492-2.035,1.391-2.035,1.815a1.9,1.9,0,0,1-.374.8,2.263,2.263,0,0,0-.39,1.595,2.667,2.667,0,0,1-.2,1.289.753.753,0,0,0-.221.407,2.01,2.01,0,0,1-.611.679c-.339.288-.763.644-.949.814a3.846,3

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:on:on
MD5:	F1B68D66337A81CFA0D2076171CBA2A8
SHA1:	28F6EDBB2A32E83291265B6A8B9BD3F31CF965C2
SHA-256:	DE6B9D5B9A7C9E99A9421D284164B52C8A53000380D39E9E52117F4C3DA4CAF9
SHA-512:	67106FF48257D08F7657FB04C6158DC271393D0E449411717A0B2EA9EC6C61ED9E2C74AE9F5ECC608F3EF4F52BBAF8CB8604754B93F3D209A4803EADFCC47242
Malicious:	false
Reputation:	low
Preview:	BAD

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5751
Entropy (8bit):	4.562968939359178
Encrypted:	false
SSDEEP:	96:nSLb+qc6/bqUV7/+8eXqYpKfWCXQdW/5Mrk5EXDVuJcPUj:sRbvL+8expKFLaJV8j
MD5:	FBD98108E9D514C1DFF05869DECCB841
SHA1:	4AF19CD31AF25E06321213C902B4C836AB188F9A
SHA-256:	839A1FC390DB5FD65D98A4328EF1068498D930557D7428AA512CCFB9C5AC87B5
SHA-512:	AF6B35D494D283F74525B30ADCC2E3A007D8D7EA4E25C292ADBD385E0194EAEB6B7A1706C53A55A87F4F0B1648E330F68CDCE6E4C61E5D0F49F4FFE9AD601721
Malicious:	false
Reputation:	low
Preview:	<svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#99cfff;}.cls-3{fill:#cce7ff;}.cls-4{fill:#ffdac7;}.cls-5{fill:#b2b7c4;}.cls-6{fill:#e2a688;}.cls-7{fill:#ffdb80;}.cls-8{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="color"><circle id="bg" class="cls-1" cx="95" cy="95" r="94"/><path id="doc_corner" data-name="doc corner" class="cls-2" d="M83,57V78H96c8.11,0,8,7,8,7V82.38a10.59,10.59,0,0,0-3.1-7.49Z"/><rect id="text" class="cls-3" x="80" y="105" width="14" height="2"/><rect id="text-2" data-name="text" class="cls-3" x="55" y="113" width="39" height="2"/><rect id="text-3" data-name="text" class="cls-3" x="53" y="121" width="41" height="2"/><path id="w" class="cls-3" d="M74.16,82.3v4.25h2.4l-3,8.51a19.81,19.81,0,0,0-.87,3.05,11.19,11.19,0,0,0-.59-2.23L67.35,82.3H65.78a1.86,1.86,0,0,1,.11.62V86.1A2.9,2.9,0,0,1,63,89h2.16A2.84,2.84,0,0,1,68,91.84v3.28a2.86,2.86,0,0

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	234
Entropy (8bit):	5.183564838104692
Encrypted:	false
SSDEEP:	6:tnr9jUNA4mc4slY+FEgqRL7eVmqDDRB51RME:tr9jSS+FEgqZSmUB51RME
MD5:	26BB2E534D92FB7ED295B5E055CE0BE6
SHA1:	D270E9264F81915AB05681FE69C14AE74C599241
SHA-256:	F52A0C7D9FA7AE8E45916C491AE7193F9A1E289F128F05264122C53D8DA970DB
SHA-512:	0FA3737470C75A83C6715D5201017544C423DBBD8A2CDDD1B3B1E4FAC42143129507751448C347A35134AFB3FF7CB43BB530F8026ABC281BD344CBD8ACE860E0
Malicious:	false
Reputation:	low
Preview:	<svg width="100" height="89" viewBox="0 0 100 89" xmlns="http://www.w3.org/2000/svg"><title>Artboard 2</title><path d="M45.292 44.5L0 89h100V0H0l45.292 44.5zM90 80H22l35.987-35.2L22 9h68v71z" fill="#394EFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/42E5D102-FCC7-4079-AEB2-CAED94F1F642?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6519)
Category:	downloaded
Size (bytes):	8562
Entropy (8bit):	5.542090913587842
Encrypted:	false
SSDEEP:	192:k7coVVTqn7SFpxlaM1JuXXYviJpVeZnWQF6VzLvVwxMuB77zd:OVV0+Ffld/uX6iJpQZW26VzLvVwxNBXh
MD5:	882EFE0AEFEF97ECFE84A9DE63B839DE
SHA1:	5E9019E6DB04FB01A4082A822D8461D9266FEC81
SHA-256:	384A5C1E9D2D4E5A471155AA4C87FD626FB082CF0122BCC7999F0FD9BA955F7B
SHA-512:	9A36470AE33CE044E469CDFAAE92532997CDAC9FFDC5C35FF4B111C56E5F6F7B9B97976E086F9CE72F0B748A102B26E699A5164113A4544167D3C7FA54355AF3
Malicious:	false
Reputation:	low
URL:	https://convertwithwave.com/assets/Pitch.ConvertYourFiles-769fe8bb.js
Preview:	import{_ as N}from"./bright-green-arrow-5acdeb1c.js";import{d as M,D as T,a1 as V,u as W,c as u,i as q,a3 as z,a4 as Y,J as $,a5 as O,r as w,o as U,e as y,f as d,h as _,j as t,k as c,n,w as h,m as x,a6 as Z,l as o,V as H,a7 as G,Q as J,R as Q,S as K}from"./index-41235507.js";import{_ as X}from"./footer.vue_vue_type_style_index_0_lang-10a79430.js";const e=r=>(J("data-v-78f2007a"),r=r(),Q(),r),tt={class:"home"},et={class:"header"},st={class:"wave-logo-container"},ot={class:"description"},at=H('<div class="description__content" data-v-78f2007a><p class="description__text__paragraph" data-v-78f2007a> Introducing the new Wave Browser converter feature! With our Chromium-based browser, you can convert and compress your files right from the sidebar. Plus, enjoy a fast browsing experience with a lighter footprint. Wave Browser comes standard with helpful tools and features to help you find what you're looking for, stay productive, and stay protected while online. Get started now and easily

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 16 colors, 32x32, 16 colors
Category:	dropped
Size (bytes):	1078
Entropy (8bit):	1.240940859118772
Encrypted:	false
SSDEEP:	3:etFEh9HYflvlNl/AXll1pe/WNN00000000000000000000000000000000000001:QNtY6+lKY6
MD5:	4123CE1E1732F202F60292941FF1487D
SHA1:	9F12B11BDE582DAE37CE8C160537D919C561C464
SHA-256:	D961B08E4321250926DE6F79087594975FE20AD1518DE8F91EB711AF5D1A6EF8
SHA-512:	11B24C2E622C408E4774FAE120B719A21A0B2ACFA53230126C35AD6CA57D33D4DE79CBE11D296CFBDE9613CAA03D66B721BD20CF4EE030CF75F5A1FD8A286DA9
Malicious:	false
Reputation:	low
Preview:	..............(...&... ..........N...(....... ...............................................................................................................................................................................................................................................................................................(... ...@.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4636
Entropy (8bit):	4.542399868072674
Encrypted:	false
SSDEEP:	96:4WJruxk18Ws8CKn4ToY8HFR0vGWwLMQtNUSt:4WJru0tFblRNp
MD5:	E09B5AF507BD602AD839B261FD897170
SHA1:	59375D9405912062F37F01EB6B68E1EF54899CE4
SHA-256:	BFCC5BC8242D357752657942690541BB3E4B907384AF1C56586F6466D7116DB2
SHA-512:	76121CD48C79D309E9D84892AA0C52E5A8456866F320EDB24DDF379A168795B1AD4B07AE1B304606DE0F773F52072184C33457D53F78623EC2EF1B0DF513AAEA
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42">. <defs>. <style>. .cls-1 {. fill: #07f;. }.. .cls-2 {. fill: #fff;. }.. .cls-3 {. fill: #0e2866;. }.. .cls-4 {. fill: none;. }. </style>. </defs>. <title>mf_logo_u1</title>. <g id="full_color">. <path id="flame" class="cls-1" d="M21.9924,9.2571a51.46,51.46,0,0,1,9.3283.9546c2.9084.5369,5.8493,1.5476,8.8277,1.5384,2.2761-.007,4.1162-1.5889,4.11-3.5334s-1.8559-3.5149-4.1318-3.5079a13.3569,13.3569,0,0,0-3.8962.647c.3277-.2425.6626-.4753,1.0061-.6949a26.136,26.136,0,0,1,15.0372-3.634c5.616.2308,11.47,1.9781,15.7643,5.6908A19.8914,19.8914,0,0,1,74.6591,24.54,19.7456,19.7456,0,0,1,62.5323,39.6153a23.995,23.995,0,0,1-14.45.5274c-6.2135-1.57-11.64-5.0474-17.4846-7.5341A46.8579,46.8579,0,0,0,20.026,29.9293l.0571.0015a8.9447,8.9447,0,0,0,4.1139-.6975c1.7275-.8285,1.7225-2.8315.8214-4.2928-1.0708-1.7366-3.2282-2.4456-5.0923-2.9507A2

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	298
Entropy (8bit):	5.355497688298125
Encrypted:	false
SSDEEP:	6:TMVBd/NIxmc4sl3WWIDzagu/0BNqWbSvs8mXLzlndxUfi2J+:TMHdV01WfDz207Gfi2J+
MD5:	DFA142012C40D1144E6396C45F8B5D86
SHA1:	2145BCA51A577986791B9FCA04A4ECB480D9653F
SHA-256:	9E5340944CA71D232BDF0FFE92D91C806699413C3E2E844C7DF276BEC55674CB
SHA-512:	2461459B3D2BEC94187D42CB712C14D21B9F5196FBCA53DDA23551644D4CA7A420227B8DFDE91224E4FCF530D6ACDA207C58AEEB49634FE12509919D9CF39D52
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="_...._1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 360 216"><defs><style>.cls-1{fill:#05f106;}</style></defs><path class="cls-1" d="m360,72L216,0l27,45c-9.79,0,2.77,0-18,0C81,45,0,216,0,216c0,0,72-117,231.05-117h11.95l-27,45,144-72Z"/></svg>

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2499), with no line terminators
Category:	downloaded
Size (bytes):	2499
Entropy (8bit):	5.905882524714021
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08B4HpxpPZxIZxZspSP6:wsbSUtJfxrqLWWWdV6j1CJnZxIZxdS
MD5:	F53B8CB76F95746AC188DA4D41D0431D
SHA1:	CA26BBDC0F11F4CAABF4140CE2BC2568BC4B718C
SHA-256:	7630C5159B79DC3E009E25ABBF04010066A4ECE13B1B55C3E6FDDC7C1AA95A49
SHA-512:	EC48CB89D0757EA9D9FC9FEC0056004ECE7B07478AFE52163D12EE78CA967E8F8957B41F3B7128C2356464024D0FD15BC527A7FE06FB0E1157DAE909B6706653
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/858128210/?random=1703780548033&cv=11&fst=1703780548033&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&gcd=11l1l1l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&hn=www.googleadservices.com&frm=0&tiba=Download%20PcAppStore&auid=1615816129.1703780548&fledge=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&data=event%3Dpage_view&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6320), with no line terminators
Category:	downloaded
Size (bytes):	6320
Entropy (8bit):	5.389723262878052
Encrypted:	false
SSDEEP:	96:TlxamrSH4P02GwS4uEfUAaQ4JhhtVRnxDCp69DnXOQaXFusH:TlLrSH4bGHE3QTVRn1Cp69DGXVH
MD5:	0E9E203E6E9E2B3CF0A4F825ECD95CC5
SHA1:	1239F29589C0638BD8D1BBCBADFD600A043457CF
SHA-256:	3BC74AFAC90099DAD5CB17EBE83F1B63D4A389F17B57CCA101D6FDAABA36AC1D
SHA-512:	0B3F750E76E2504D2FB64B8F35FB206ED6A489ED6A0B587645034E5F2C84EF03A17EB5B35DF494F3D0D951C48E4B7E6A9D5730E309FA88CCDBCDBAACD076401E
Malicious:	false
Reputation:	low
URL:	https://go.ezodn.com/parsonsmaize/abilene.js?gcb=195-8&cb=32
Preview:	try { !function(){function e(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}window.__ezDotData=function(e,t){"string"!=typeof e&&2==e.length&&(t=e[1],e=e[0]),this.name=e,this.val=t},__ez.dot.b64={keyStr:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",encode:function(e){var t,n,r,o,i,a,d,f="",u=0;for(e=Base64._utf8_encode(e);u<e.length;)o=(t=e.charCodeAt(u++))>>2,i=(3&t)<<4\|(n=e.charCodeAt(u++))>>4,a=(15&n)<<2\|(r=e.charCodeAt(u++))>>6,d=63&r,isNaN(n)?a=d=64:isNaN(r)&&(d=64),f=f+this._keyStr.charAt(o)+this._keyStr.charAt(i)+this._keyStr.charAt(a)+this._keyStr.charAt(d);return f},decode:function(e){var t,n,r,o,i,a,d="",f=0;for(e=e.replace(/[^A-Za-z0-9+\/=]/g,"");f<e.length;)t=this._keyStr.indexOf(e.charAt(f++))<<2\|(o=this._keyStr.indexOf(e.charAt(f++)))>>4,n=(15&o)<<4\|(i=this._keyStr.indexOf(e.charAt(f++)))>>2,r=(3&i)<<6\|(a=this._keyStr.indexOf(e.charAt(f++))),d+=String.fromCharCode(t),64!=i&&(d+=String.fromCharCode(n)),6

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	949
Entropy (8bit):	4.796826733417717
Encrypted:	false
SSDEEP:	24:2djx0L8tU/dxauLsgo7bK/urVIMD4GKO7Rit+5/N:cjm8m/TauwxCJMDRKOVR/
MD5:	9442C8065F9382E1526919B34571D3AC
SHA1:	B38144CF1DB3E705AC25725C17549DCD24C9FD96
SHA-256:	F15316721389B1B084E6FB85747089EA51CCF9D81FCFB1B33ACE326898E2913F
SHA-512:	E3E1F4DEE5090AD216C8C5C4D5BB4E0B07BC95406616D061EE4FBC1797A0A50AFC1F1D4946D677B0E9C9EE88A95A4FBDE2BFA4133672F12CE04C1A48F0E54CF4
Malicious:	false
Reputation:	low
URL:	https://static.mediafire.com/images/icons/svg_light/twitter.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24" viewBox="0 0 24 24" fill="#fff"><path d="M22.46,6C21.69,6.35 20.86,6.58 20,6.69C20.88,6.16 21.56,5.32 21.88,4.31C21.05,4.81 20.13,5.16 19.16,5.36C18.37,4.5 17.26,4 16,4C13.65,4 11.73,5.92 11.73,8.29C11.73,8.63 11.77,8.96 11.84,9.27C8.28,9.09 5.11,7.38 3,4.79C2.63,5.42 2.42,6.16 2.42,6.94C2.42,8.43 3.17,9.75 4.33,10.5C3.62,10.5 2.96,10.3 2.38,10C2.38,10 2.38,10 2.38,10.03C2.38,12.11 3.86,13.85 5.82,14.24C5.46,14.34 5.08,14.39 4.69,14.39C4.42,14.39 4.15,14.36 3.89,14.31C4.43,16 6,17.26 7.89,17.29C6.43,18.45 4.58,19.13 2.56,19.13C2.22,19.13 1.88,19.11 1.54,19.07C3.44,20.29 5.7,21 8.12,21C16,21 20.33,14.46 20.33,8.79C20.33,8.6 20.33,8.42 20.32,8.23C21.16,7.63 21.88,6.87 22.46,6Z" /></svg>

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2247)
Category:	downloaded
Size (bytes):	261602
Entropy (8bit):	5.576323538540405
Encrypted:	false
SSDEEP:	3072:s2oWBisLdcoF+hQjd0EHmGj4+zLCmaeW+JMKnLHWuH/yPBd+1eSy4:LoOFdaeW+JmOb
MD5:	8FFA7589FA5A19277C1251AAD0D3DE82
SHA1:	D3338E7290CB8818E38731FEAC2EBEFAEAC0F458
SHA-256:	D0CAC8752FA8BA53A1555E539E1A29FA7A4BCF8EE3BD8F9D7C80DB9760206AC9
SHA-512:	6A0F07B26339EBBDEE2DDF069AD3A1EF8B319BA144F4AFCDF902412050195EBCA7720D96FF0379C1C7E64C32D9DC1F942101D8561552DEBF14906B2B9A14FA78
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.SXj_cMASdOk.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqv_EcKxwRpDpG4ZDKtCiTmzNoYWA/m=el_main
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Mh,Nh,Oh,Wh,fi,gi,hi,ii,mi;Mh=function(a){return _.Aa?_.Ba?_.Ba.brands.some(function(b){return(b=b.brand)&&-1!=b.indexOf(a)}):!1:!1};Nh=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Oh=function(){return _.Ca()?Mh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.Ca()?0:_.v("Edge"))\|\|_.v("Silk")};_.Ph=function(){return _.v("Safari")&&!(Oh()\|\|(_.Ca()?0:_.v("Coast"))\|\|_.Da()\|\|(_.Ca()?0:_.v("Edge"))\|\|(_.Ca()?Mh("Microsoft Edge"):_.v("Edg/"))\|\|(_.Ca()?Mh("Opera"):_.v("OPR"))\|\|Nh()\|\|_.v("Silk")\|\|_.v("Android"))};._.Qh=function(){return _.v("Android")&&!(Oh()\|\|Nh()\|\|_.Da()\|\|_.v("Silk"))};_.Rh=function(a){if(!_.og){a:{var b=document.createElement("a");try{b.href=a}catch(c){a=void 0;break a}a=b.protocol;a=":"===a\|\|""===a?"https:":a}return a}try{b=new URL(a)}catch(c){return"https:"}return b.protocol};_.Sh=function(a){if("javascript:"!==_.Rh(a))return a};_.Uh=function(a){return _.Th&&null!=a&&a instanceof Uint8

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 28, 2023 17:21:56.692554951 CET	192.168.2.4	1.1.1.1	0xcb9a	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:56.692910910 CET	192.168.2.4	1.1.1.1	0x8306	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:21:56.693419933 CET	192.168.2.4	1.1.1.1	0x6dff	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:56.693665981 CET	192.168.2.4	1.1.1.1	0x1711	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:21:57.960040092 CET	192.168.2.4	1.1.1.1	0x1b28	Standard query (0)	classicshell.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:57.960256100 CET	192.168.2.4	1.1.1.1	0x4cc3	Standard query (0)	classicshell.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:21:58.086976051 CET	192.168.2.4	1.1.1.1	0x9a24	Standard query (0)	classicshell.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:58.087147951 CET	192.168.2.4	1.1.1.1	0x65b2	Standard query (0)	classicshell.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:21:58.784876108 CET	192.168.2.4	1.1.1.1	0xb950	Standard query (0)	www.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:58.785087109 CET	192.168.2.4	1.1.1.1	0x1b20	Standard query (0)	www.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:21:59.656162977 CET	192.168.2.4	1.1.1.1	0xc324	Standard query (0)	the.gatekeeperconsent.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:59.656429052 CET	192.168.2.4	1.1.1.1	0xf16a	Standard query (0)	the.gatekeeperconsent.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:00.334700108 CET	192.168.2.4	1.1.1.1	0x9b56	Standard query (0)	btloader.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.334871054 CET	192.168.2.4	1.1.1.1	0xe37c	Standard query (0)	btloader.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:00.335474014 CET	192.168.2.4	1.1.1.1	0x33bf	Standard query (0)	privacy.gatekeeperconsent.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.335864067 CET	192.168.2.4	1.1.1.1	0x7af1	Standard query (0)	privacy.gatekeeperconsent.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:00.344084978 CET	192.168.2.4	1.1.1.1	0x74e9	Standard query (0)	www.ezojs.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.344805956 CET	192.168.2.4	1.1.1.1	0x66cb	Standard query (0)	www.ezojs.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:00.350778103 CET	192.168.2.4	1.1.1.1	0xaad8	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.351078033 CET	192.168.2.4	1.1.1.1	0xe5cb	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:00.351689100 CET	192.168.2.4	1.1.1.1	0xf569	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.352000952 CET	192.168.2.4	1.1.1.1	0x2ea2	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:00.354804039 CET	192.168.2.4	1.1.1.1	0x7c7b	Standard query (0)	cdn.amplitude.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.355110884 CET	192.168.2.4	1.1.1.1	0x5a86	Standard query (0)	cdn.amplitude.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:00.358433962 CET	192.168.2.4	1.1.1.1	0x6a38	Standard query (0)	static.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.358715057 CET	192.168.2.4	1.1.1.1	0x4143	Standard query (0)	static.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:00.545027971 CET	192.168.2.4	1.1.1.1	0x56	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.545182943 CET	192.168.2.4	1.1.1.1	0x3d7c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:00.695982933 CET	192.168.2.4	1.1.1.1	0x170a	Standard query (0)	cdn.otnolatrnup.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.696639061 CET	192.168.2.4	1.1.1.1	0x4f1e	Standard query (0)	cdn.otnolatrnup.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:00.943684101 CET	192.168.2.4	1.1.1.1	0x517	Standard query (0)	www.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.944133043 CET	192.168.2.4	1.1.1.1	0x2359	Standard query (0)	www.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:01.042763948 CET	192.168.2.4	1.1.1.1	0xb2e5	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.043118000 CET	192.168.2.4	1.1.1.1	0x459e	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:01.044076920 CET	192.168.2.4	1.1.1.1	0x1eb7	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.044332981 CET	192.168.2.4	1.1.1.1	0xd96c	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:01.046432972 CET	192.168.2.4	1.1.1.1	0xc1c6	Standard query (0)	privacy.gatekeeperconsent.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.047049999 CET	192.168.2.4	1.1.1.1	0x7757	Standard query (0)	privacy.gatekeeperconsent.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:01.176259041 CET	192.168.2.4	1.1.1.1	0xd101	Standard query (0)	static.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.176917076 CET	192.168.2.4	1.1.1.1	0xea54	Standard query (0)	static.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:01.248754025 CET	192.168.2.4	1.1.1.1	0x2e24	Standard query (0)	g.ezoic.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.249582052 CET	192.168.2.4	1.1.1.1	0x46c6	Standard query (0)	g.ezoic.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:01.259289026 CET	192.168.2.4	1.1.1.1	0xfe54	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.259929895 CET	192.168.2.4	1.1.1.1	0xd394	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:01.839581013 CET	192.168.2.4	1.1.1.1	0x7744	Standard query (0)	ad-delivery.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.840481997 CET	192.168.2.4	1.1.1.1	0x4665	Standard query (0)	ad-delivery.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:01.976216078 CET	192.168.2.4	1.1.1.1	0xdcac	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.976696014 CET	192.168.2.4	1.1.1.1	0x4643	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:02.890727997 CET	192.168.2.4	1.1.1.1	0x9a6	Standard query (0)	go.ezodn.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:02.891128063 CET	192.168.2.4	1.1.1.1	0x5341	Standard query (0)	go.ezodn.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:02.893910885 CET	192.168.2.4	1.1.1.1	0xb004	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:02.895210981 CET	192.168.2.4	1.1.1.1	0x18e8	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:03.069587946 CET	192.168.2.4	1.1.1.1	0x8a15	Standard query (0)	g.ezoic.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.070275068 CET	192.168.2.4	1.1.1.1	0xb7f8	Standard query (0)	g.ezoic.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:03.241358042 CET	192.168.2.4	1.1.1.1	0x6b66	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.241530895 CET	192.168.2.4	1.1.1.1	0xcc77	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:03.282644033 CET	192.168.2.4	1.1.1.1	0xe7a8	Standard query (0)	otnolatrnup.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.283159018 CET	192.168.2.4	1.1.1.1	0x6b83	Standard query (0)	otnolatrnup.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:03.709079981 CET	192.168.2.4	1.1.1.1	0x63c0	Standard query (0)	api.btloader.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.709964991 CET	192.168.2.4	1.1.1.1	0x13e5	Standard query (0)	api.btloader.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:03.767935038 CET	192.168.2.4	1.1.1.1	0x79bd	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.768520117 CET	192.168.2.4	1.1.1.1	0xbd03	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:04.073529959 CET	192.168.2.4	1.1.1.1	0xd991	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.074698925 CET	192.168.2.4	1.1.1.1	0xdfcf	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:04.107170105 CET	192.168.2.4	1.1.1.1	0x7b4	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.108396053 CET	192.168.2.4	1.1.1.1	0x2b4c	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:04.118948936 CET	192.168.2.4	1.1.1.1	0x36dd	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.119972944 CET	192.168.2.4	1.1.1.1	0xca6e	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:04.126378059 CET	192.168.2.4	1.1.1.1	0xfb39	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.164540052 CET	192.168.2.4	1.1.1.1	0x9fe2	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:04.794606924 CET	192.168.2.4	1.1.1.1	0x4a0d	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.795237064 CET	192.168.2.4	1.1.1.1	0x8bfd	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:04.972942114 CET	192.168.2.4	1.1.1.1	0x9e05	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.973855019 CET	192.168.2.4	1.1.1.1	0xd3bb	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:04.980808020 CET	192.168.2.4	1.1.1.1	0xaf9	Standard query (0)	ad.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.981393099 CET	192.168.2.4	1.1.1.1	0x2102	Standard query (0)	ad.crwdcntrl.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:04.982152939 CET	192.168.2.4	1.1.1.1	0x61df	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:04.982152939 CET	192.168.2.4	1.1.1.1	0x860d	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.987358093 CET	192.168.2.4	1.1.1.1	0x3f58	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.987690926 CET	192.168.2.4	1.1.1.1	0x9f5c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:06.013484001 CET	192.168.2.4	1.1.1.1	0x2aed	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:06.014302015 CET	192.168.2.4	1.1.1.1	0xdbed	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:07.456285954 CET	192.168.2.4	1.1.1.1	0x9781	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:07.456931114 CET	192.168.2.4	1.1.1.1	0x1405	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:07.494599104 CET	192.168.2.4	1.1.1.1	0x7a4b	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:07.494880915 CET	192.168.2.4	1.1.1.1	0x5e1a	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:09.793832064 CET	192.168.2.4	1.1.1.1	0xffde	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.794528961 CET	192.168.2.4	1.1.1.1	0xdc4b	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:09.795785904 CET	192.168.2.4	1.1.1.1	0x1cbf	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.796101093 CET	192.168.2.4	1.1.1.1	0xd539	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:09.797557116 CET	192.168.2.4	1.1.1.1	0x70a9	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.797941923 CET	192.168.2.4	1.1.1.1	0x4591	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:09.802902937 CET	192.168.2.4	1.1.1.1	0xbe56	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.803388119 CET	192.168.2.4	1.1.1.1	0x5972	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:09.804996967 CET	192.168.2.4	1.1.1.1	0x65f2	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.805577993 CET	192.168.2.4	1.1.1.1	0x802a	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:09.806417942 CET	192.168.2.4	1.1.1.1	0x1e98	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.806727886 CET	192.168.2.4	1.1.1.1	0x34c0	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:09.807465076 CET	192.168.2.4	1.1.1.1	0x19c5	Standard query (0)	cdn.id5-sync.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.807796001 CET	192.168.2.4	1.1.1.1	0xc6a6	Standard query (0)	cdn.id5-sync.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:09.809506893 CET	192.168.2.4	1.1.1.1	0xe769	Standard query (0)	oa.openxcdn.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.809957981 CET	192.168.2.4	1.1.1.1	0xebd	Standard query (0)	oa.openxcdn.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:09.810678959 CET	192.168.2.4	1.1.1.1	0x8de7	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.811037064 CET	192.168.2.4	1.1.1.1	0x2524	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:09.811897039 CET	192.168.2.4	1.1.1.1	0x6972	Standard query (0)	cdn.prod.uidapi.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.812325001 CET	192.168.2.4	1.1.1.1	0x23c7	Standard query (0)	cdn.prod.uidapi.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:09.814970970 CET	192.168.2.4	1.1.1.1	0xa29d	Standard query (0)	invstatic101.creativecdn.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.815421104 CET	192.168.2.4	1.1.1.1	0xa8ea	Standard query (0)	invstatic101.creativecdn.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:10.467266083 CET	192.168.2.4	1.1.1.1	0x3030	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.467900038 CET	192.168.2.4	1.1.1.1	0xe662	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:10.476263046 CET	192.168.2.4	1.1.1.1	0xda30	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.476511955 CET	192.168.2.4	1.1.1.1	0x49bd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:10.497594118 CET	192.168.2.4	1.1.1.1	0x95ed	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.498066902 CET	192.168.2.4	1.1.1.1	0x497	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:10.552088022 CET	192.168.2.4	1.1.1.1	0xf667	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.552088022 CET	192.168.2.4	1.1.1.1	0x1a56	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:10.637645960 CET	192.168.2.4	1.1.1.1	0x7f9f	Standard query (0)	oajs.openx.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.637989998 CET	192.168.2.4	1.1.1.1	0xa613	Standard query (0)	oajs.openx.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:10.797781944 CET	192.168.2.4	1.1.1.1	0x2aa	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.798795938 CET	192.168.2.4	1.1.1.1	0x1d8b	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:10.838732004 CET	192.168.2.4	1.1.1.1	0x5697	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.838998079 CET	192.168.2.4	1.1.1.1	0xccf1	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.416528940 CET	192.168.2.4	1.1.1.1	0xc3bc	Standard query (0)	cdn.ampproject.org	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.416908026 CET	192.168.2.4	1.1.1.1	0xe9db	Standard query (0)	cdn.ampproject.org	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.418921947 CET	192.168.2.4	1.1.1.1	0x794c	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.419265985 CET	192.168.2.4	1.1.1.1	0xb08	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.421169996 CET	192.168.2.4	1.1.1.1	0x257d	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.421478033 CET	192.168.2.4	1.1.1.1	0xc4db	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.422698021 CET	192.168.2.4	1.1.1.1	0xc15a	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.424179077 CET	192.168.2.4	1.1.1.1	0x4927	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.425637007 CET	192.168.2.4	1.1.1.1	0xe608	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.425921917 CET	192.168.2.4	1.1.1.1	0x680f	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.426847935 CET	192.168.2.4	1.1.1.1	0xa0ad	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.427095890 CET	192.168.2.4	1.1.1.1	0xcb8d	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.427762032 CET	192.168.2.4	1.1.1.1	0xc33e	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.427918911 CET	192.168.2.4	1.1.1.1	0x1337	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.428535938 CET	192.168.2.4	1.1.1.1	0xbc52	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.428535938 CET	192.168.2.4	1.1.1.1	0x62e5	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.468167067 CET	192.168.2.4	1.1.1.1	0xfbc7	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.468427896 CET	192.168.2.4	1.1.1.1	0x99d0	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.633786917 CET	192.168.2.4	1.1.1.1	0x8948	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.634048939 CET	192.168.2.4	1.1.1.1	0xaa7d	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.725478888 CET	192.168.2.4	1.1.1.1	0xbd1c	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.726140022 CET	192.168.2.4	1.1.1.1	0xbf12	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.927530050 CET	192.168.2.4	1.1.1.1	0x1fe	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.928114891 CET	192.168.2.4	1.1.1.1	0x6909	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.931194067 CET	192.168.2.4	1.1.1.1	0x3b93	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.931524992 CET	192.168.2.4	1.1.1.1	0x9ae1	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.943779945 CET	192.168.2.4	1.1.1.1	0x5070	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.944230080 CET	192.168.2.4	1.1.1.1	0x4b91	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.950932026 CET	192.168.2.4	1.1.1.1	0xc2d4	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:11.950932026 CET	192.168.2.4	1.1.1.1	0x6aca	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.538086891 CET	192.168.2.4	1.1.1.1	0x9973	Standard query (0)	google-bidout-d.openx.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.538347006 CET	192.168.2.4	1.1.1.1	0xad2	Standard query (0)	google-bidout-d.openx.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:12.653768063 CET	192.168.2.4	1.1.1.1	0xce45	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.653980970 CET	192.168.2.4	1.1.1.1	0x8633	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:13.009083986 CET	192.168.2.4	1.1.1.1	0x84b	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:13.009449005 CET	192.168.2.4	1.1.1.1	0xa16b	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:13.818172932 CET	192.168.2.4	1.1.1.1	0x2923	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:13.818835974 CET	192.168.2.4	1.1.1.1	0xa8e4	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:15.125380039 CET	192.168.2.4	1.1.1.1	0x237a	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.125926018 CET	192.168.2.4	1.1.1.1	0x2331	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:15.137303114 CET	192.168.2.4	1.1.1.1	0x6c3	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.138051987 CET	192.168.2.4	1.1.1.1	0x15fd	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:15.147896051 CET	192.168.2.4	1.1.1.1	0xea6	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.148631096 CET	192.168.2.4	1.1.1.1	0x365c	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:15.245610952 CET	192.168.2.4	1.1.1.1	0xa2d	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.245987892 CET	192.168.2.4	1.1.1.1	0x2b35	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:15.897099972 CET	192.168.2.4	1.1.1.1	0x4f61	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.897628069 CET	192.168.2.4	1.1.1.1	0x89c1	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:16.806799889 CET	192.168.2.4	1.1.1.1	0xda13	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.808315992 CET	192.168.2.4	1.1.1.1	0xea6c	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:16.810079098 CET	192.168.2.4	1.1.1.1	0x5f29	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.810307980 CET	192.168.2.4	1.1.1.1	0xdf55	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:16.811528921 CET	192.168.2.4	1.1.1.1	0xbb50	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.812022924 CET	192.168.2.4	1.1.1.1	0x6e35	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:16.813271046 CET	192.168.2.4	1.1.1.1	0xdf1	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.813612938 CET	192.168.2.4	1.1.1.1	0x33c6	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:16.815546989 CET	192.168.2.4	1.1.1.1	0xba55	Standard query (0)	oajs.openx.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.815546989 CET	192.168.2.4	1.1.1.1	0x78ab	Standard query (0)	oajs.openx.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:16.816155910 CET	192.168.2.4	1.1.1.1	0xe32	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.816517115 CET	192.168.2.4	1.1.1.1	0x151e	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:16.818262100 CET	192.168.2.4	1.1.1.1	0x569f	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.818262100 CET	192.168.2.4	1.1.1.1	0xdf1	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:16.818927050 CET	192.168.2.4	1.1.1.1	0x5ae5	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.819130898 CET	192.168.2.4	1.1.1.1	0x8da5	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:16.820835114 CET	192.168.2.4	1.1.1.1	0x39e	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.821495056 CET	192.168.2.4	1.1.1.1	0xcfb0	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:16.826570034 CET	192.168.2.4	1.1.1.1	0x69f3	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.826823950 CET	192.168.2.4	1.1.1.1	0xbba7	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:16.865695000 CET	192.168.2.4	1.1.1.1	0x24d6	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.866209030 CET	192.168.2.4	1.1.1.1	0x7fd5	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:17.040879965 CET	192.168.2.4	1.1.1.1	0xc330	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.041143894 CET	192.168.2.4	1.1.1.1	0x8c77	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:17.311119080 CET	192.168.2.4	1.1.1.1	0x39dd	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.312011957 CET	192.168.2.4	1.1.1.1	0xc50d	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:17.339621067 CET	192.168.2.4	1.1.1.1	0x6984	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.340383053 CET	192.168.2.4	1.1.1.1	0x7d55	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:17.351991892 CET	192.168.2.4	1.1.1.1	0x3173	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.352632046 CET	192.168.2.4	1.1.1.1	0x5992	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:17.355398893 CET	192.168.2.4	1.1.1.1	0xeef5	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.355997086 CET	192.168.2.4	1.1.1.1	0xad53	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:17.372657061 CET	192.168.2.4	1.1.1.1	0xed40	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.373538017 CET	192.168.2.4	1.1.1.1	0x36e	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.618237019 CET	192.168.2.4	1.1.1.1	0x7d76	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.621380091 CET	192.168.2.4	1.1.1.1	0x1429	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.625690937 CET	192.168.2.4	1.1.1.1	0x76a7	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.626023054 CET	192.168.2.4	1.1.1.1	0x4a7	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.628736019 CET	192.168.2.4	1.1.1.1	0x74a0	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.630034924 CET	192.168.2.4	1.1.1.1	0x6f43	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.630774975 CET	192.168.2.4	1.1.1.1	0x2470	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.631939888 CET	192.168.2.4	1.1.1.1	0x793	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.631939888 CET	192.168.2.4	1.1.1.1	0x9919	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.632452965 CET	192.168.2.4	1.1.1.1	0x54cc	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.637917042 CET	192.168.2.4	1.1.1.1	0xa810	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.638104916 CET	192.168.2.4	1.1.1.1	0x9e33	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.639053106 CET	192.168.2.4	1.1.1.1	0xf791	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.639373064 CET	192.168.2.4	1.1.1.1	0x6631	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.639904022 CET	192.168.2.4	1.1.1.1	0xdc8e	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.640222073 CET	192.168.2.4	1.1.1.1	0x847a	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.641774893 CET	192.168.2.4	1.1.1.1	0x5b0c	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.641774893 CET	192.168.2.4	1.1.1.1	0xd559	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.644334078 CET	192.168.2.4	1.1.1.1	0xc733	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.644552946 CET	192.168.2.4	1.1.1.1	0x5612	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.645442963 CET	192.168.2.4	1.1.1.1	0x28f2	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.645442963 CET	192.168.2.4	1.1.1.1	0xb06b	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:18.648534060 CET	192.168.2.4	1.1.1.1	0x4095	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.648818016 CET	192.168.2.4	1.1.1.1	0xc5c3	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:19.968910933 CET	192.168.2.4	1.1.1.1	0x2c66	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:19.969373941 CET	192.168.2.4	1.1.1.1	0xd842	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:21.031507015 CET	192.168.2.4	1.1.1.1	0x3e63	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.032186985 CET	192.168.2.4	1.1.1.1	0x8b4b	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:21.035337925 CET	192.168.2.4	1.1.1.1	0x2dd1	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.035787106 CET	192.168.2.4	1.1.1.1	0x1dc7	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:21.060662985 CET	192.168.2.4	1.1.1.1	0xadf3	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.061156988 CET	192.168.2.4	1.1.1.1	0x5f8e	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:21.132591009 CET	192.168.2.4	1.1.1.1	0xfc57	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.132811069 CET	192.168.2.4	1.1.1.1	0xb02d	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:21.607458115 CET	192.168.2.4	1.1.1.1	0x6087	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.607826948 CET	192.168.2.4	1.1.1.1	0x5a25	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:22.280097961 CET	192.168.2.4	1.1.1.1	0x52cc	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:22.280284882 CET	192.168.2.4	1.1.1.1	0xc55f	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:22.622029066 CET	192.168.2.4	1.1.1.1	0x26fc	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:22.622389078 CET	192.168.2.4	1.1.1.1	0xb740	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:23.972358942 CET	192.168.2.4	1.1.1.1	0x95e5	Standard query (0)	pcapp.store	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:23.972655058 CET	192.168.2.4	1.1.1.1	0x6611	Standard query (0)	pcapp.store	65	IN (0x0001)	false
Dec 28, 2023 17:22:26.172075987 CET	192.168.2.4	1.1.1.1	0xfd52	Standard query (0)	pcapp.store	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:26.172348976 CET	192.168.2.4	1.1.1.1	0x77ea	Standard query (0)	pcapp.store	65	IN (0x0001)	false
Dec 28, 2023 17:22:27.149184942 CET	192.168.2.4	1.1.1.1	0x8124	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:27.149564028 CET	192.168.2.4	1.1.1.1	0x696c	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:27.999481916 CET	192.168.2.4	1.1.1.1	0xd1dc	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:27.999727011 CET	192.168.2.4	1.1.1.1	0x62c5	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:28.293375015 CET	192.168.2.4	1.1.1.1	0x1b93	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.293572903 CET	192.168.2.4	1.1.1.1	0x518c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:28.544668913 CET	192.168.2.4	1.1.1.1	0x3bd7	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.544821978 CET	192.168.2.4	1.1.1.1	0xb520	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:28.546634912 CET	192.168.2.4	1.1.1.1	0x6182	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.546983957 CET	192.168.2.4	1.1.1.1	0x2fb2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:28.605396986 CET	192.168.2.4	1.1.1.1	0xf456	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.605647087 CET	192.168.2.4	1.1.1.1	0xc856	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:28.692661047 CET	192.168.2.4	1.1.1.1	0x51b6	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.693182945 CET	192.168.2.4	1.1.1.1	0x8781	Standard query (0)	google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:28.842122078 CET	192.168.2.4	1.1.1.1	0xccf7	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.842329979 CET	192.168.2.4	1.1.1.1	0xa9a	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:28.843197107 CET	192.168.2.4	1.1.1.1	0x2db7	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.843506098 CET	192.168.2.4	1.1.1.1	0x7b14	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:31.114300013 CET	192.168.2.4	1.1.1.1	0xca4b	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:31.114639044 CET	192.168.2.4	1.1.1.1	0xeb69	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:31.435276985 CET	192.168.2.4	1.1.1.1	0x6e98	Standard query (0)	device.maxmind.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:31.435895920 CET	192.168.2.4	1.1.1.1	0x4baa	Standard query (0)	device.maxmind.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:32.793340921 CET	192.168.2.4	1.1.1.1	0x7eac	Standard query (0)	d-ipv6.mmapiws.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:32.793776989 CET	192.168.2.4	1.1.1.1	0x8331	Standard query (0)	d-ipv6.mmapiws.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:33.483211040 CET	192.168.2.4	1.1.1.1	0xe176	Standard query (0)	d-ipv6.mmapiws.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:33.483462095 CET	192.168.2.4	1.1.1.1	0x5e14	Standard query (0)	d-ipv6.mmapiws.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:35.517450094 CET	192.168.2.4	1.1.1.1	0x7177	Standard query (0)	www.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:35.519509077 CET	192.168.2.4	1.1.1.1	0x4de5	Standard query (0)	www.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:41.011162043 CET	192.168.2.4	1.1.1.1	0x4377	Standard query (0)	www.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:41.011512995 CET	192.168.2.4	1.1.1.1	0xf224	Standard query (0)	www.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:41.659930944 CET	192.168.2.4	1.1.1.1	0x24a6	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:41.660279036 CET	192.168.2.4	1.1.1.1	0x6a66	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:49.390677929 CET	192.168.2.4	1.1.1.1	0x9fea	Standard query (0)	btlr.sharethrough.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:49.390831947 CET	192.168.2.4	1.1.1.1	0x681	Standard query (0)	btlr.sharethrough.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:49.514106035 CET	192.168.2.4	1.1.1.1	0xbe1d	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:49.514413118 CET	192.168.2.4	1.1.1.1	0x641c	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:50.797919989 CET	192.168.2.4	1.1.1.1	0x334c	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:50.798115969 CET	192.168.2.4	1.1.1.1	0x7463	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:51.828278065 CET	192.168.2.4	1.1.1.1	0x66be	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.828552008 CET	192.168.2.4	1.1.1.1	0x4e16	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:51.829171896 CET	192.168.2.4	1.1.1.1	0x77e0	Standard query (0)	dmp.truoptik.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.830548048 CET	192.168.2.4	1.1.1.1	0x90dd	Standard query (0)	dmp.truoptik.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:51.835376978 CET	192.168.2.4	1.1.1.1	0xbdb7	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.837671995 CET	192.168.2.4	1.1.1.1	0x469e	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:51.839576960 CET	192.168.2.4	1.1.1.1	0x6d2d	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.840120077 CET	192.168.2.4	1.1.1.1	0xdc19	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:51.842190981 CET	192.168.2.4	1.1.1.1	0x3290	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.842587948 CET	192.168.2.4	1.1.1.1	0x9489	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:52.577110052 CET	192.168.2.4	1.1.1.1	0x9631	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.577387094 CET	192.168.2.4	1.1.1.1	0xe317	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:52.578347921 CET	192.168.2.4	1.1.1.1	0xe631	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.578684092 CET	192.168.2.4	1.1.1.1	0xe57b	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:52.579051018 CET	192.168.2.4	1.1.1.1	0x1e4a	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.579308033 CET	192.168.2.4	1.1.1.1	0x253b	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:52.580400944 CET	192.168.2.4	1.1.1.1	0x7dc8	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.581048012 CET	192.168.2.4	1.1.1.1	0xdedc	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:52.581048012 CET	192.168.2.4	1.1.1.1	0xa5e5	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.581420898 CET	192.168.2.4	1.1.1.1	0xc87e	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:52.581964016 CET	192.168.2.4	1.1.1.1	0x8c4	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.581964016 CET	192.168.2.4	1.1.1.1	0xfed5	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Dec 28, 2023 17:22:52.582482100 CET	192.168.2.4	1.1.1.1	0x7434	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.582673073 CET	192.168.2.4	1.1.1.1	0x1d18	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:52.868613005 CET	192.168.2.4	1.1.1.1	0x2607	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.868902922 CET	192.168.2.4	1.1.1.1	0x44e7	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:53.283623934 CET	192.168.2.4	1.1.1.1	0xcaf3	Standard query (0)	triplelift-match.dotomi.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.284060955 CET	192.168.2.4	1.1.1.1	0x9eda	Standard query (0)	triplelift-match.dotomi.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:53.291932106 CET	192.168.2.4	1.1.1.1	0xedd3	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.292139053 CET	192.168.2.4	1.1.1.1	0x5076	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:53.562669992 CET	192.168.2.4	1.1.1.1	0x42a4	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.562869072 CET	192.168.2.4	1.1.1.1	0x311b	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:53.570025921 CET	192.168.2.4	1.1.1.1	0xc286	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.570583105 CET	192.168.2.4	1.1.1.1	0xb1ea	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Dec 28, 2023 17:22:53.764318943 CET	192.168.2.4	1.1.1.1	0xb1c5	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.764664888 CET	192.168.2.4	1.1.1.1	0x2bd3	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:53.780901909 CET	192.168.2.4	1.1.1.1	0x793c	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.781096935 CET	192.168.2.4	1.1.1.1	0x36b	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:53.919645071 CET	192.168.2.4	1.1.1.1	0xc652	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.919861078 CET	192.168.2.4	1.1.1.1	0x355d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:53.993653059 CET	192.168.2.4	1.1.1.1	0xa1c6	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.994115114 CET	192.168.2.4	1.1.1.1	0x370f	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:54.107580900 CET	192.168.2.4	1.1.1.1	0xccf5	Standard query (0)	cm-supply-web.gammaplatform.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.108007908 CET	192.168.2.4	1.1.1.1	0x5b37	Standard query (0)	cm-supply-web.gammaplatform.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:54.125483036 CET	192.168.2.4	1.1.1.1	0x508c	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.125763893 CET	192.168.2.4	1.1.1.1	0x46e6	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:54.237644911 CET	192.168.2.4	1.1.1.1	0x2ec4	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.237955093 CET	192.168.2.4	1.1.1.1	0x42fc	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:54.352674007 CET	192.168.2.4	1.1.1.1	0x8d5a	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.352874994 CET	192.168.2.4	1.1.1.1	0x689b	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:54.355139971 CET	192.168.2.4	1.1.1.1	0x6064	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.355464935 CET	192.168.2.4	1.1.1.1	0x98ee	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:54.368509054 CET	192.168.2.4	1.1.1.1	0xb9e3	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.368747950 CET	192.168.2.4	1.1.1.1	0x9b2c	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Dec 28, 2023 17:22:54.614561081 CET	192.168.2.4	1.1.1.1	0xc391	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.622137070 CET	192.168.2.4	1.1.1.1	0x8793	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:54.828054905 CET	192.168.2.4	1.1.1.1	0xfc39	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.828402042 CET	192.168.2.4	1.1.1.1	0xda0	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:54.944561958 CET	192.168.2.4	1.1.1.1	0x9598	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.944794893 CET	192.168.2.4	1.1.1.1	0x2e49	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:55.034847975 CET	192.168.2.4	1.1.1.1	0x6d73	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.035175085 CET	192.168.2.4	1.1.1.1	0x88c6	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:56.218900919 CET	192.168.2.4	1.1.1.1	0xa575	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:56.222465992 CET	192.168.2.4	1.1.1.1	0xfd7f	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:56.458777905 CET	192.168.2.4	1.1.1.1	0x8d77	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:56.459247112 CET	192.168.2.4	1.1.1.1	0xbb08	Standard query (0)	pippio.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:57.691718102 CET	192.168.2.4	1.1.1.1	0xd8d9	Standard query (0)	download2433.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:57.692589998 CET	192.168.2.4	1.1.1.1	0x80ed	Standard query (0)	download2433.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:57.710614920 CET	192.168.2.4	1.1.1.1	0x633a	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:57.719893932 CET	192.168.2.4	1.1.1.1	0xc572	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:58.107181072 CET	192.168.2.4	1.1.1.1	0x996f	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:58.107661009 CET	192.168.2.4	1.1.1.1	0x398e	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Dec 28, 2023 17:22:59.156764984 CET	192.168.2.4	1.1.1.1	0x66c1	Standard query (0)	www.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:59.159763098 CET	192.168.2.4	1.1.1.1	0x25da	Standard query (0)	www.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:00.246674061 CET	192.168.2.4	1.1.1.1	0x9d45	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:00.248163939 CET	192.168.2.4	1.1.1.1	0xb07f	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:01.697046995 CET	192.168.2.4	1.1.1.1	0xce8d	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:01.698173046 CET	192.168.2.4	1.1.1.1	0x56b4	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:01.787681103 CET	192.168.2.4	1.1.1.1	0xab19	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:01.788796902 CET	192.168.2.4	1.1.1.1	0xfa71	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:01.892303944 CET	192.168.2.4	1.1.1.1	0x4403	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:01.892863035 CET	192.168.2.4	1.1.1.1	0xa9ba	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:02.537187099 CET	192.168.2.4	1.1.1.1	0xb05b	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.537404060 CET	192.168.2.4	1.1.1.1	0xa5a1	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Dec 28, 2023 17:23:02.539799929 CET	192.168.2.4	1.1.1.1	0x757d	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.539855957 CET	192.168.2.4	1.1.1.1	0xa852	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Dec 28, 2023 17:23:02.540693045 CET	192.168.2.4	1.1.1.1	0x6082	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.541349888 CET	192.168.2.4	1.1.1.1	0x6468	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:02.541909933 CET	192.168.2.4	1.1.1.1	0xdb12	Standard query (0)	gocm.c.appier.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.542316914 CET	192.168.2.4	1.1.1.1	0xde67	Standard query (0)	gocm.c.appier.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:02.547035933 CET	192.168.2.4	1.1.1.1	0xa7fa	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.547432899 CET	192.168.2.4	1.1.1.1	0xb2aa	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:02.550297976 CET	192.168.2.4	1.1.1.1	0xbcc	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.550297976 CET	192.168.2.4	1.1.1.1	0x771	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:05.235086918 CET	192.168.2.4	1.1.1.1	0x2293	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.235495090 CET	192.168.2.4	1.1.1.1	0x37b9	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:05.240593910 CET	192.168.2.4	1.1.1.1	0x6dd7	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.241199970 CET	192.168.2.4	1.1.1.1	0xdc6b	Standard query (0)	ads.betweendigital.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:05.363534927 CET	192.168.2.4	1.1.1.1	0xe4de	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.363971949 CET	192.168.2.4	1.1.1.1	0x1c8f	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:05.477371931 CET	192.168.2.4	1.1.1.1	0xc2d5	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.477725983 CET	192.168.2.4	1.1.1.1	0x50e9	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:05.588090897 CET	192.168.2.4	1.1.1.1	0xfd74	Standard query (0)	io.narrative.io	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.588502884 CET	192.168.2.4	1.1.1.1	0x51cb	Standard query (0)	io.narrative.io	65	IN (0x0001)	false
Dec 28, 2023 17:23:05.592855930 CET	192.168.2.4	1.1.1.1	0x8bbb	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.593446016 CET	192.168.2.4	1.1.1.1	0xd400	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:05.669670105 CET	192.168.2.4	1.1.1.1	0xaf75	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.670231104 CET	192.168.2.4	1.1.1.1	0x3907	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:05.997330904 CET	192.168.2.4	1.1.1.1	0x4a75	Standard query (0)	static.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.997649908 CET	192.168.2.4	1.1.1.1	0xec89	Standard query (0)	static.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:06.336245060 CET	192.168.2.4	1.1.1.1	0x4cc0	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:06.336635113 CET	192.168.2.4	1.1.1.1	0xf5af	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:06.901734114 CET	192.168.2.4	1.1.1.1	0x5d62	Standard query (0)	g.ezoic.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:06.901952028 CET	192.168.2.4	1.1.1.1	0x4b49	Standard query (0)	g.ezoic.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:06.953311920 CET	192.168.2.4	1.1.1.1	0x3565	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:06.954090118 CET	192.168.2.4	1.1.1.1	0x81bf	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:07.133255959 CET	192.168.2.4	1.1.1.1	0xce91	Standard query (0)	api.amplitude.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.133862972 CET	192.168.2.4	1.1.1.1	0xfe93	Standard query (0)	api.amplitude.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:07.164000988 CET	192.168.2.4	1.1.1.1	0x3f50	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.164222956 CET	192.168.2.4	1.1.1.1	0x3099	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:07.476804018 CET	192.168.2.4	1.1.1.1	0xd19f	Standard query (0)	convertwithwave.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.477235079 CET	192.168.2.4	1.1.1.1	0x7865	Standard query (0)	convertwithwave.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:07.912009001 CET	192.168.2.4	1.1.1.1	0xb75c	Standard query (0)	static.mediafire.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.912307024 CET	192.168.2.4	1.1.1.1	0x9a91	Standard query (0)	static.mediafire.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:07.915203094 CET	192.168.2.4	1.1.1.1	0x34d2	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.915518999 CET	192.168.2.4	1.1.1.1	0x1382	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:08.503251076 CET	192.168.2.4	1.1.1.1	0x174f	Standard query (0)	api.wavebrowser.co	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.503901958 CET	192.168.2.4	1.1.1.1	0x6826	Standard query (0)	api.wavebrowser.co	65	IN (0x0001)	false
Dec 28, 2023 17:23:08.691749096 CET	192.168.2.4	1.1.1.1	0x1dd8	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.699781895 CET	192.168.2.4	1.1.1.1	0x9358	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:08.703561068 CET	192.168.2.4	1.1.1.1	0x5dc1	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.703731060 CET	192.168.2.4	1.1.1.1	0x8d64	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:09.300530910 CET	192.168.2.4	1.1.1.1	0xa3d4	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:09.300851107 CET	192.168.2.4	1.1.1.1	0x8c1d	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:10.340528011 CET	192.168.2.4	1.1.1.1	0x2c95	Standard query (0)	app.posthog.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:10.340954065 CET	192.168.2.4	1.1.1.1	0x1261	Standard query (0)	app.posthog.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:11.007210970 CET	192.168.2.4	1.1.1.1	0x1037	Standard query (0)	app.posthog.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.007566929 CET	192.168.2.4	1.1.1.1	0x9945	Standard query (0)	app.posthog.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:11.016290903 CET	192.168.2.4	1.1.1.1	0x131f	Standard query (0)	api.wavebrowser.co	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.016941071 CET	192.168.2.4	1.1.1.1	0x2006	Standard query (0)	api.wavebrowser.co	65	IN (0x0001)	false
Dec 28, 2023 17:23:11.040743113 CET	192.168.2.4	1.1.1.1	0x3ddd	Standard query (0)	api.wavebrowserbase.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.040743113 CET	192.168.2.4	1.1.1.1	0xcc22	Standard query (0)	api.wavebrowserbase.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:12.112127066 CET	192.168.2.4	1.1.1.1	0x2b27	Standard query (0)	api.mywavehome.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.113152981 CET	192.168.2.4	1.1.1.1	0x7541	Standard query (0)	api.mywavehome.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:12.310549021 CET	192.168.2.4	1.1.1.1	0x8171	Standard query (0)	convertwithwave.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.310918093 CET	192.168.2.4	1.1.1.1	0x5d4a	Standard query (0)	convertwithwave.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:12.453188896 CET	192.168.2.4	1.1.1.1	0xdbf2	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.453452110 CET	192.168.2.4	1.1.1.1	0xc466	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:12.457367897 CET	192.168.2.4	1.1.1.1	0xae0f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.457683086 CET	192.168.2.4	1.1.1.1	0x1c79	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:12.512515068 CET	192.168.2.4	1.1.1.1	0xa29a	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.512762070 CET	192.168.2.4	1.1.1.1	0xca05	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:12.677354097 CET	192.168.2.4	1.1.1.1	0xb375	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.678250074 CET	192.168.2.4	1.1.1.1	0x18e7	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:12.681777954 CET	192.168.2.4	1.1.1.1	0xfdf5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.682480097 CET	192.168.2.4	1.1.1.1	0xa54d	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:12.768682957 CET	192.168.2.4	1.1.1.1	0x5bcf	Standard query (0)	api.wavebrowserbase.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.769057035 CET	192.168.2.4	1.1.1.1	0xc24b	Standard query (0)	api.wavebrowserbase.com	65	IN (0x0001)	false
Dec 28, 2023 17:23:12.945411921 CET	192.168.2.4	1.1.1.1	0x5b45	Standard query (0)	api.mywavehome.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.945616961 CET	192.168.2.4	1.1.1.1	0xae58	Standard query (0)	api.mywavehome.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:13.497406960 CET	192.168.2.4	1.1.1.1	0xa2b0	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:13.497560978 CET	192.168.2.4	1.1.1.1	0xec4e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 28, 2023 17:23:15.804862976 CET	192.168.2.4	1.1.1.1	0xeb82	Standard query (0)	app.termly.io	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:15.805042982 CET	192.168.2.4	1.1.1.1	0xa7f1	Standard query (0)	app.termly.io	65	IN (0x0001)	false
Dec 28, 2023 17:23:17.933293104 CET	192.168.2.4	1.1.1.1	0xe25a	Standard query (0)	app.termly.io	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:17.933583975 CET	192.168.2.4	1.1.1.1	0x86c3	Standard query (0)	app.termly.io	65	IN (0x0001)	false
Dec 28, 2023 17:23:25.554104090 CET	192.168.2.4	1.1.1.1	0x4c84	Standard query (0)	clients1.google.com	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:25.554673910 CET	192.168.2.4	1.1.1.1	0xf17c	Standard query (0)	clients1.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 28, 2023 17:21:56.814243078 CET	1.1.1.1	192.168.2.4	0xcb9a	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:21:56.814243078 CET	1.1.1.1	192.168.2.4	0xcb9a	No error (0)	clients.l.google.com		142.250.113.100	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:56.814243078 CET	1.1.1.1	192.168.2.4	0xcb9a	No error (0)	clients.l.google.com		142.250.113.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:56.814243078 CET	1.1.1.1	192.168.2.4	0xcb9a	No error (0)	clients.l.google.com		142.250.113.139	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:56.814243078 CET	1.1.1.1	192.168.2.4	0xcb9a	No error (0)	clients.l.google.com		142.250.113.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:56.814243078 CET	1.1.1.1	192.168.2.4	0xcb9a	No error (0)	clients.l.google.com		142.250.113.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:56.814243078 CET	1.1.1.1	192.168.2.4	0xcb9a	No error (0)	clients.l.google.com		142.250.113.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:56.814680099 CET	1.1.1.1	192.168.2.4	0x8306	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:21:56.814766884 CET	1.1.1.1	192.168.2.4	0x6dff	No error (0)	accounts.google.com		142.250.138.84	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:58.084398985 CET	1.1.1.1	192.168.2.4	0x1b28	No error (0)	classicshell.mediafire.com		104.16.113.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:58.084398985 CET	1.1.1.1	192.168.2.4	0x1b28	No error (0)	classicshell.mediafire.com		104.16.114.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:58.084422112 CET	1.1.1.1	192.168.2.4	0x4cc3	No error (0)	classicshell.mediafire.com			65	IN (0x0001)	false
Dec 28, 2023 17:21:58.209048033 CET	1.1.1.1	192.168.2.4	0x65b2	No error (0)	classicshell.mediafire.com			65	IN (0x0001)	false
Dec 28, 2023 17:21:58.210350037 CET	1.1.1.1	192.168.2.4	0x9a24	No error (0)	classicshell.mediafire.com		104.16.113.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:58.210350037 CET	1.1.1.1	192.168.2.4	0x9a24	No error (0)	classicshell.mediafire.com		104.16.114.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:58.906908035 CET	1.1.1.1	192.168.2.4	0x1b20	No error (0)	www.mediafire.com			65	IN (0x0001)	false
Dec 28, 2023 17:21:58.907108068 CET	1.1.1.1	192.168.2.4	0xb950	No error (0)	www.mediafire.com		104.16.113.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:58.907108068 CET	1.1.1.1	192.168.2.4	0xb950	No error (0)	www.mediafire.com		104.16.114.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:59.778601885 CET	1.1.1.1	192.168.2.4	0xf16a	No error (0)	the.gatekeeperconsent.com			65	IN (0x0001)	false
Dec 28, 2023 17:21:59.779329062 CET	1.1.1.1	192.168.2.4	0xc324	No error (0)	the.gatekeeperconsent.com		104.21.28.48	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:21:59.779329062 CET	1.1.1.1	192.168.2.4	0xc324	No error (0)	the.gatekeeperconsent.com		172.67.144.62	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.456083059 CET	1.1.1.1	192.168.2.4	0x9b56	No error (0)	btloader.com		104.22.75.216	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.456083059 CET	1.1.1.1	192.168.2.4	0x9b56	No error (0)	btloader.com		104.22.74.216	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.456083059 CET	1.1.1.1	192.168.2.4	0x9b56	No error (0)	btloader.com		172.67.41.60	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.456319094 CET	1.1.1.1	192.168.2.4	0xe37c	No error (0)	btloader.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:00.458022118 CET	1.1.1.1	192.168.2.4	0x7af1	No error (0)	privacy.gatekeeperconsent.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:00.458933115 CET	1.1.1.1	192.168.2.4	0x33bf	No error (0)	privacy.gatekeeperconsent.com		104.21.28.48	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.458933115 CET	1.1.1.1	192.168.2.4	0x33bf	No error (0)	privacy.gatekeeperconsent.com		172.67.144.62	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.465939999 CET	1.1.1.1	192.168.2.4	0x74e9	No error (0)	www.ezojs.com	www.ezojs.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:00.466726065 CET	1.1.1.1	192.168.2.4	0x66cb	No error (0)	www.ezojs.com	www.ezojs.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:00.472348928 CET	1.1.1.1	192.168.2.4	0xaad8	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:00.472348928 CET	1.1.1.1	192.168.2.4	0xaad8	No error (0)	www3.l.google.com		142.250.113.139	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.472348928 CET	1.1.1.1	192.168.2.4	0xaad8	No error (0)	www3.l.google.com		142.250.113.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.472348928 CET	1.1.1.1	192.168.2.4	0xaad8	No error (0)	www3.l.google.com		142.250.113.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.472348928 CET	1.1.1.1	192.168.2.4	0xaad8	No error (0)	www3.l.google.com		142.250.113.100	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.472348928 CET	1.1.1.1	192.168.2.4	0xaad8	No error (0)	www3.l.google.com		142.250.113.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.472348928 CET	1.1.1.1	192.168.2.4	0xaad8	No error (0)	www3.l.google.com		142.250.113.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.473134995 CET	1.1.1.1	192.168.2.4	0xf569	No error (0)	static.cloudflareinsights.com		104.16.56.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.473134995 CET	1.1.1.1	192.168.2.4	0xf569	No error (0)	static.cloudflareinsights.com		104.16.57.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.473288059 CET	1.1.1.1	192.168.2.4	0xe5cb	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:00.473433971 CET	1.1.1.1	192.168.2.4	0x2ea2	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:00.476066113 CET	1.1.1.1	192.168.2.4	0x7c7b	No error (0)	cdn.amplitude.com		3.161.239.231	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.476066113 CET	1.1.1.1	192.168.2.4	0x7c7b	No error (0)	cdn.amplitude.com		3.161.239.105	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.476066113 CET	1.1.1.1	192.168.2.4	0x7c7b	No error (0)	cdn.amplitude.com		3.161.239.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.476066113 CET	1.1.1.1	192.168.2.4	0x7c7b	No error (0)	cdn.amplitude.com		3.161.239.88	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.480660915 CET	1.1.1.1	192.168.2.4	0x4143	No error (0)	static.mediafire.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:00.480673075 CET	1.1.1.1	192.168.2.4	0x6a38	No error (0)	static.mediafire.com		104.16.113.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.480673075 CET	1.1.1.1	192.168.2.4	0x6a38	No error (0)	static.mediafire.com		104.16.114.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.666549921 CET	1.1.1.1	192.168.2.4	0x56	No error (0)	www.google.com		142.251.116.106	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.666549921 CET	1.1.1.1	192.168.2.4	0x56	No error (0)	www.google.com		142.251.116.104	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.666549921 CET	1.1.1.1	192.168.2.4	0x56	No error (0)	www.google.com		142.251.116.105	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.666549921 CET	1.1.1.1	192.168.2.4	0x56	No error (0)	www.google.com		142.251.116.147	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.666549921 CET	1.1.1.1	192.168.2.4	0x56	No error (0)	www.google.com		142.251.116.103	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.666549921 CET	1.1.1.1	192.168.2.4	0x56	No error (0)	www.google.com		142.251.116.99	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.666992903 CET	1.1.1.1	192.168.2.4	0x3d7c	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:00.818887949 CET	1.1.1.1	192.168.2.4	0x170a	No error (0)	cdn.otnolatrnup.com		104.19.215.37	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.818887949 CET	1.1.1.1	192.168.2.4	0x170a	No error (0)	cdn.otnolatrnup.com		104.19.214.37	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:00.818939924 CET	1.1.1.1	192.168.2.4	0x4f1e	No error (0)	cdn.otnolatrnup.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:01.070091963 CET	1.1.1.1	192.168.2.4	0x2359	No error (0)	www.mediafire.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:01.070660114 CET	1.1.1.1	192.168.2.4	0x517	No error (0)	www.mediafire.com		104.16.113.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.070660114 CET	1.1.1.1	192.168.2.4	0x517	No error (0)	www.mediafire.com		104.16.114.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.166429043 CET	1.1.1.1	192.168.2.4	0xb2e5	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.167212963 CET	1.1.1.1	192.168.2.4	0x1eb7	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.167212963 CET	1.1.1.1	192.168.2.4	0x1eb7	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.167212963 CET	1.1.1.1	192.168.2.4	0x1eb7	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.167489052 CET	1.1.1.1	192.168.2.4	0xd96c	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Dec 28, 2023 17:22:01.178659916 CET	1.1.1.1	192.168.2.4	0x7757	No error (0)	privacy.gatekeeperconsent.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:01.178675890 CET	1.1.1.1	192.168.2.4	0xc1c6	No error (0)	privacy.gatekeeperconsent.com		172.67.144.62	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.178675890 CET	1.1.1.1	192.168.2.4	0xc1c6	No error (0)	privacy.gatekeeperconsent.com		104.21.28.48	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.298496008 CET	1.1.1.1	192.168.2.4	0xd101	No error (0)	static.mediafire.com		104.16.113.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.298496008 CET	1.1.1.1	192.168.2.4	0xd101	No error (0)	static.mediafire.com		104.16.114.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.298887014 CET	1.1.1.1	192.168.2.4	0xea54	No error (0)	static.mediafire.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:01.371332884 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	g.ezoic.net		18.213.98.197	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.371332884 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	g.ezoic.net		34.230.232.255	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.371332884 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	g.ezoic.net		3.210.81.252	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.371332884 CET	1.1.1.1	192.168.2.4	0x2e24	No error (0)	g.ezoic.net		50.16.223.119	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.380914927 CET	1.1.1.1	192.168.2.4	0xfe54	No error (0)	ad.doubleclick.net		142.250.115.148	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.380914927 CET	1.1.1.1	192.168.2.4	0xfe54	No error (0)	ad.doubleclick.net		142.250.115.149	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.381457090 CET	1.1.1.1	192.168.2.4	0xd394	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 28, 2023 17:22:01.961220980 CET	1.1.1.1	192.168.2.4	0x7744	No error (0)	ad-delivery.net		104.26.2.70	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.961220980 CET	1.1.1.1	192.168.2.4	0x7744	No error (0)	ad-delivery.net		172.67.69.19	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.961220980 CET	1.1.1.1	192.168.2.4	0x7744	No error (0)	ad-delivery.net		104.26.3.70	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:01.961817026 CET	1.1.1.1	192.168.2.4	0x4665	No error (0)	ad-delivery.net			65	IN (0x0001)	false
Dec 28, 2023 17:22:02.097771883 CET	1.1.1.1	192.168.2.4	0xdcac	No error (0)	ad.doubleclick.net		142.250.115.148	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:02.097771883 CET	1.1.1.1	192.168.2.4	0xdcac	No error (0)	ad.doubleclick.net		142.250.115.149	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:02.098263979 CET	1.1.1.1	192.168.2.4	0x4643	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Dec 28, 2023 17:22:03.012830973 CET	1.1.1.1	192.168.2.4	0x9a6	No error (0)	go.ezodn.com		172.64.137.15	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.012830973 CET	1.1.1.1	192.168.2.4	0x9a6	No error (0)	go.ezodn.com		172.64.136.15	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.014174938 CET	1.1.1.1	192.168.2.4	0x5341	No error (0)	go.ezodn.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:03.016340017 CET	1.1.1.1	192.168.2.4	0xb004	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:03.016340017 CET	1.1.1.1	192.168.2.4	0xb004	No error (0)	securepubads46.g.doubleclick.net		142.250.115.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.016340017 CET	1.1.1.1	192.168.2.4	0xb004	No error (0)	securepubads46.g.doubleclick.net		142.250.115.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.016340017 CET	1.1.1.1	192.168.2.4	0xb004	No error (0)	securepubads46.g.doubleclick.net		142.250.115.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.016340017 CET	1.1.1.1	192.168.2.4	0xb004	No error (0)	securepubads46.g.doubleclick.net		142.250.115.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.016658068 CET	1.1.1.1	192.168.2.4	0x18e8	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:03.192830086 CET	1.1.1.1	192.168.2.4	0x8a15	No error (0)	g.ezoic.net		18.213.98.197	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.192830086 CET	1.1.1.1	192.168.2.4	0x8a15	No error (0)	g.ezoic.net		34.230.232.255	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.192830086 CET	1.1.1.1	192.168.2.4	0x8a15	No error (0)	g.ezoic.net		3.210.81.252	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.192830086 CET	1.1.1.1	192.168.2.4	0x8a15	No error (0)	g.ezoic.net		50.16.223.119	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.364434958 CET	1.1.1.1	192.168.2.4	0x6b66	No error (0)	api.amplitude.com		34.218.121.115	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.364434958 CET	1.1.1.1	192.168.2.4	0x6b66	No error (0)	api.amplitude.com		54.186.225.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.364434958 CET	1.1.1.1	192.168.2.4	0x6b66	No error (0)	api.amplitude.com		35.167.19.41	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.364434958 CET	1.1.1.1	192.168.2.4	0x6b66	No error (0)	api.amplitude.com		44.230.63.185	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.364434958 CET	1.1.1.1	192.168.2.4	0x6b66	No error (0)	api.amplitude.com		44.232.238.123	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.364434958 CET	1.1.1.1	192.168.2.4	0x6b66	No error (0)	api.amplitude.com		50.112.119.213	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.364434958 CET	1.1.1.1	192.168.2.4	0x6b66	No error (0)	api.amplitude.com		54.68.127.132	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.364434958 CET	1.1.1.1	192.168.2.4	0x6b66	No error (0)	api.amplitude.com		44.230.163.60	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.404716015 CET	1.1.1.1	192.168.2.4	0xe7a8	No error (0)	otnolatrnup.com		104.19.215.37	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.404716015 CET	1.1.1.1	192.168.2.4	0xe7a8	No error (0)	otnolatrnup.com		104.19.214.37	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.406177044 CET	1.1.1.1	192.168.2.4	0x6b83	No error (0)	otnolatrnup.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:03.830643892 CET	1.1.1.1	192.168.2.4	0x63c0	No error (0)	api.btloader.com		130.211.23.194	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.890532017 CET	1.1.1.1	192.168.2.4	0x79bd	No error (0)	stats.g.doubleclick.net		142.251.116.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.890532017 CET	1.1.1.1	192.168.2.4	0x79bd	No error (0)	stats.g.doubleclick.net		142.251.116.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.890532017 CET	1.1.1.1	192.168.2.4	0x79bd	No error (0)	stats.g.doubleclick.net		142.251.116.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:03.890532017 CET	1.1.1.1	192.168.2.4	0x79bd	No error (0)	stats.g.doubleclick.net		142.251.116.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.195482016 CET	1.1.1.1	192.168.2.4	0xd991	No error (0)	btlr.sharethrough.com	btlr-us-east-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:04.195482016 CET	1.1.1.1	192.168.2.4	0xd991	No error (0)	btlr-us-east-1.sharethrough.com		34.237.83.209	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.196068048 CET	1.1.1.1	192.168.2.4	0xdfcf	No error (0)	btlr.sharethrough.com	btlr-us-east-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:04.228910923 CET	1.1.1.1	192.168.2.4	0x7b4	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:04.228910923 CET	1.1.1.1	192.168.2.4	0x7b4	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:04.228910923 CET	1.1.1.1	192.168.2.4	0x7b4	No error (0)	gob-njr3.pubmnet.com		104.36.115.111	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.230393887 CET	1.1.1.1	192.168.2.4	0x2b4c	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:04.230393887 CET	1.1.1.1	192.168.2.4	0x2b4c	No error (0)	hbprebid-v3.pubmnet.com	gob-njr3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:04.240632057 CET	1.1.1.1	192.168.2.4	0x36dd	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.248466969 CET	1.1.1.1	192.168.2.4	0xfb39	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:04.248466969 CET	1.1.1.1	192.168.2.4	0xfb39	No error (0)	us-east-tlx.3lift.com		3.231.136.235	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.248466969 CET	1.1.1.1	192.168.2.4	0xfb39	No error (0)	us-east-tlx.3lift.com		44.198.70.69	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.248466969 CET	1.1.1.1	192.168.2.4	0xfb39	No error (0)	us-east-tlx.3lift.com		52.22.57.161	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.248466969 CET	1.1.1.1	192.168.2.4	0xfb39	No error (0)	us-east-tlx.3lift.com		52.0.187.21	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.248466969 CET	1.1.1.1	192.168.2.4	0xfb39	No error (0)	us-east-tlx.3lift.com		54.157.36.152	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.248466969 CET	1.1.1.1	192.168.2.4	0xfb39	No error (0)	us-east-tlx.3lift.com		34.192.56.221	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.248466969 CET	1.1.1.1	192.168.2.4	0xfb39	No error (0)	us-east-tlx.3lift.com		44.210.211.240	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.248466969 CET	1.1.1.1	192.168.2.4	0xfb39	No error (0)	us-east-tlx.3lift.com		3.212.108.193	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.286125898 CET	1.1.1.1	192.168.2.4	0x9fe2	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:04.916450024 CET	1.1.1.1	192.168.2.4	0x4a0d	No error (0)	analytics.google.com		142.251.116.100	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.916450024 CET	1.1.1.1	192.168.2.4	0x4a0d	No error (0)	analytics.google.com		142.251.116.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.916450024 CET	1.1.1.1	192.168.2.4	0x4a0d	No error (0)	analytics.google.com		142.251.116.139	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.916450024 CET	1.1.1.1	192.168.2.4	0x4a0d	No error (0)	analytics.google.com		142.251.116.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.916450024 CET	1.1.1.1	192.168.2.4	0x4a0d	No error (0)	analytics.google.com		142.251.116.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:04.916450024 CET	1.1.1.1	192.168.2.4	0x4a0d	No error (0)	analytics.google.com		142.251.116.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.094881058 CET	1.1.1.1	192.168.2.4	0x9e05	No error (0)	tags.crwdcntrl.net		108.156.245.32	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.094881058 CET	1.1.1.1	192.168.2.4	0x9e05	No error (0)	tags.crwdcntrl.net		108.156.245.85	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.094881058 CET	1.1.1.1	192.168.2.4	0x9e05	No error (0)	tags.crwdcntrl.net		108.156.245.34	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.094881058 CET	1.1.1.1	192.168.2.4	0x9e05	No error (0)	tags.crwdcntrl.net		108.156.245.91	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.102809906 CET	1.1.1.1	192.168.2.4	0xaf9	No error (0)	ad.crwdcntrl.net		3.208.124.249	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.102809906 CET	1.1.1.1	192.168.2.4	0xaf9	No error (0)	ad.crwdcntrl.net		44.208.253.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.102809906 CET	1.1.1.1	192.168.2.4	0xaf9	No error (0)	ad.crwdcntrl.net		44.220.113.151	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.102809906 CET	1.1.1.1	192.168.2.4	0xaf9	No error (0)	ad.crwdcntrl.net		34.225.234.246	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.102809906 CET	1.1.1.1	192.168.2.4	0xaf9	No error (0)	ad.crwdcntrl.net		3.215.169.119	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.102809906 CET	1.1.1.1	192.168.2.4	0xaf9	No error (0)	ad.crwdcntrl.net		44.211.9.18	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.102809906 CET	1.1.1.1	192.168.2.4	0xaf9	No error (0)	ad.crwdcntrl.net		54.209.94.68	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.102809906 CET	1.1.1.1	192.168.2.4	0xaf9	No error (0)	ad.crwdcntrl.net		52.204.77.239	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.103684902 CET	1.1.1.1	192.168.2.4	0x860d	No error (0)	bcp.crwdcntrl.net		3.208.124.249	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.103684902 CET	1.1.1.1	192.168.2.4	0x860d	No error (0)	bcp.crwdcntrl.net		52.206.155.140	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.103684902 CET	1.1.1.1	192.168.2.4	0x860d	No error (0)	bcp.crwdcntrl.net		52.204.77.239	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.103684902 CET	1.1.1.1	192.168.2.4	0x860d	No error (0)	bcp.crwdcntrl.net		54.209.94.68	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.103684902 CET	1.1.1.1	192.168.2.4	0x860d	No error (0)	bcp.crwdcntrl.net		44.220.113.151	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.103684902 CET	1.1.1.1	192.168.2.4	0x860d	No error (0)	bcp.crwdcntrl.net		44.208.253.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.103684902 CET	1.1.1.1	192.168.2.4	0x860d	No error (0)	bcp.crwdcntrl.net		3.215.169.119	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.103684902 CET	1.1.1.1	192.168.2.4	0x860d	No error (0)	bcp.crwdcntrl.net		44.211.9.18	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.109122038 CET	1.1.1.1	192.168.2.4	0x3f58	No error (0)	www.google.com		142.251.116.104	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.109122038 CET	1.1.1.1	192.168.2.4	0x3f58	No error (0)	www.google.com		142.251.116.99	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.109122038 CET	1.1.1.1	192.168.2.4	0x3f58	No error (0)	www.google.com		142.251.116.106	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.109122038 CET	1.1.1.1	192.168.2.4	0x3f58	No error (0)	www.google.com		142.251.116.103	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.109122038 CET	1.1.1.1	192.168.2.4	0x3f58	No error (0)	www.google.com		142.251.116.105	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.109122038 CET	1.1.1.1	192.168.2.4	0x3f58	No error (0)	www.google.com		142.251.116.147	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:05.109241962 CET	1.1.1.1	192.168.2.4	0x9f5c	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:06.135441065 CET	1.1.1.1	192.168.2.4	0x2aed	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:06.136478901 CET	1.1.1.1	192.168.2.4	0xdbed	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:07.577991962 CET	1.1.1.1	192.168.2.4	0x9781	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:07.578447104 CET	1.1.1.1	192.168.2.4	0x1405	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:07.615982056 CET	1.1.1.1	192.168.2.4	0x7a4b	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:07.615982056 CET	1.1.1.1	192.168.2.4	0x7a4b	No error (0)	www3.l.google.com		142.251.116.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:07.615982056 CET	1.1.1.1	192.168.2.4	0x7a4b	No error (0)	www3.l.google.com		142.251.116.100	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:07.615982056 CET	1.1.1.1	192.168.2.4	0x7a4b	No error (0)	www3.l.google.com		142.251.116.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:07.615982056 CET	1.1.1.1	192.168.2.4	0x7a4b	No error (0)	www3.l.google.com		142.251.116.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:07.615982056 CET	1.1.1.1	192.168.2.4	0x7a4b	No error (0)	www3.l.google.com		142.251.116.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:07.615982056 CET	1.1.1.1	192.168.2.4	0x7a4b	No error (0)	www3.l.google.com		142.251.116.139	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:07.616945028 CET	1.1.1.1	192.168.2.4	0x5e1a	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.915306091 CET	1.1.1.1	192.168.2.4	0xffde	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.915306091 CET	1.1.1.1	192.168.2.4	0xffde	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.915306091 CET	1.1.1.1	192.168.2.4	0xffde	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.915306091 CET	1.1.1.1	192.168.2.4	0xffde	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.917222977 CET	1.1.1.1	192.168.2.4	0x1cbf	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.917568922 CET	1.1.1.1	192.168.2.4	0xd539	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.918890953 CET	1.1.1.1	192.168.2.4	0x70a9	No error (0)	api.amplitude.com		35.166.142.103	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.918890953 CET	1.1.1.1	192.168.2.4	0x70a9	No error (0)	api.amplitude.com		54.214.102.229	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.918890953 CET	1.1.1.1	192.168.2.4	0x70a9	No error (0)	api.amplitude.com		52.33.188.110	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.918890953 CET	1.1.1.1	192.168.2.4	0x70a9	No error (0)	api.amplitude.com		44.225.138.63	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.918890953 CET	1.1.1.1	192.168.2.4	0x70a9	No error (0)	api.amplitude.com		100.20.204.53	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.918890953 CET	1.1.1.1	192.168.2.4	0x70a9	No error (0)	api.amplitude.com		44.229.24.195	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.918890953 CET	1.1.1.1	192.168.2.4	0x70a9	No error (0)	api.amplitude.com		54.245.119.49	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.918890953 CET	1.1.1.1	192.168.2.4	0x70a9	No error (0)	api.amplitude.com		35.162.142.12	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.919353008 CET	1.1.1.1	192.168.2.4	0xdc4b	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.919353008 CET	1.1.1.1	192.168.2.4	0xdc4b	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.924370050 CET	1.1.1.1	192.168.2.4	0xbe56	No error (0)	stats.g.doubleclick.net		142.250.113.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.924370050 CET	1.1.1.1	192.168.2.4	0xbe56	No error (0)	stats.g.doubleclick.net		142.250.113.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.924370050 CET	1.1.1.1	192.168.2.4	0xbe56	No error (0)	stats.g.doubleclick.net		142.250.113.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.924370050 CET	1.1.1.1	192.168.2.4	0xbe56	No error (0)	stats.g.doubleclick.net		142.250.113.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.926253080 CET	1.1.1.1	192.168.2.4	0x65f2	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.926253080 CET	1.1.1.1	192.168.2.4	0x65f2	No error (0)	securepubads46.g.doubleclick.net		142.250.138.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.926253080 CET	1.1.1.1	192.168.2.4	0x65f2	No error (0)	securepubads46.g.doubleclick.net		142.250.138.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.926253080 CET	1.1.1.1	192.168.2.4	0x65f2	No error (0)	securepubads46.g.doubleclick.net		142.250.138.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.926253080 CET	1.1.1.1	192.168.2.4	0x65f2	No error (0)	securepubads46.g.doubleclick.net		142.250.138.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.926692009 CET	1.1.1.1	192.168.2.4	0x802a	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.928081036 CET	1.1.1.1	192.168.2.4	0x1e98	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.928081036 CET	1.1.1.1	192.168.2.4	0x1e98	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.928081036 CET	1.1.1.1	192.168.2.4	0x1e98	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.928081036 CET	1.1.1.1	192.168.2.4	0x1e98	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.928081036 CET	1.1.1.1	192.168.2.4	0x1e98	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.928500891 CET	1.1.1.1	192.168.2.4	0x34c0	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.928780079 CET	1.1.1.1	192.168.2.4	0x19c5	No error (0)	cdn.id5-sync.com		104.22.52.86	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.928780079 CET	1.1.1.1	192.168.2.4	0x19c5	No error (0)	cdn.id5-sync.com		172.67.38.106	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.928780079 CET	1.1.1.1	192.168.2.4	0x19c5	No error (0)	cdn.id5-sync.com		104.22.53.86	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.929488897 CET	1.1.1.1	192.168.2.4	0xc6a6	No error (0)	cdn.id5-sync.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:09.931137085 CET	1.1.1.1	192.168.2.4	0xe769	No error (0)	oa.openxcdn.net		34.102.146.192	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.931896925 CET	1.1.1.1	192.168.2.4	0x8de7	No error (0)	static.criteo.net	static.da1.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.931896925 CET	1.1.1.1	192.168.2.4	0x8de7	No error (0)	static.da1.vip.prod.criteo.net		74.119.118.134	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.932579994 CET	1.1.1.1	192.168.2.4	0x2524	No error (0)	static.criteo.net	static.da1.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.933626890 CET	1.1.1.1	192.168.2.4	0x6972	No error (0)	cdn.prod.uidapi.com	d2avimlm6gq3h9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.933626890 CET	1.1.1.1	192.168.2.4	0x6972	No error (0)	d2avimlm6gq3h9.cloudfront.net		18.245.110.16	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:09.934392929 CET	1.1.1.1	192.168.2.4	0x23c7	No error (0)	cdn.prod.uidapi.com	d2avimlm6gq3h9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:09.936909914 CET	1.1.1.1	192.168.2.4	0xa29d	No error (0)	invstatic101.creativecdn.com		34.96.70.87	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.105596066 CET	1.1.1.1	192.168.2.4	0x89c1	No error (0)	pagead-googlehosted.l.google.com		142.250.138.132	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.589097977 CET	1.1.1.1	192.168.2.4	0x3030	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.597776890 CET	1.1.1.1	192.168.2.4	0xda30	No error (0)	www.google.com		142.251.116.99	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.597776890 CET	1.1.1.1	192.168.2.4	0xda30	No error (0)	www.google.com		142.251.116.103	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.597776890 CET	1.1.1.1	192.168.2.4	0xda30	No error (0)	www.google.com		142.251.116.106	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.597776890 CET	1.1.1.1	192.168.2.4	0xda30	No error (0)	www.google.com		142.251.116.104	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.597776890 CET	1.1.1.1	192.168.2.4	0xda30	No error (0)	www.google.com		142.251.116.147	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.597776890 CET	1.1.1.1	192.168.2.4	0xda30	No error (0)	www.google.com		142.251.116.105	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.597861052 CET	1.1.1.1	192.168.2.4	0x49bd	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:10.619383097 CET	1.1.1.1	192.168.2.4	0x497	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:10.619465113 CET	1.1.1.1	192.168.2.4	0x95ed	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:10.673716068 CET	1.1.1.1	192.168.2.4	0xf667	No error (0)	bcp.crwdcntrl.net		44.220.113.151	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.673716068 CET	1.1.1.1	192.168.2.4	0xf667	No error (0)	bcp.crwdcntrl.net		44.208.253.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.673716068 CET	1.1.1.1	192.168.2.4	0xf667	No error (0)	bcp.crwdcntrl.net		174.129.88.64	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.673716068 CET	1.1.1.1	192.168.2.4	0xf667	No error (0)	bcp.crwdcntrl.net		3.215.169.119	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.673716068 CET	1.1.1.1	192.168.2.4	0xf667	No error (0)	bcp.crwdcntrl.net		52.204.77.239	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.673716068 CET	1.1.1.1	192.168.2.4	0xf667	No error (0)	bcp.crwdcntrl.net		52.206.155.140	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.673716068 CET	1.1.1.1	192.168.2.4	0xf667	No error (0)	bcp.crwdcntrl.net		54.209.94.68	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.673716068 CET	1.1.1.1	192.168.2.4	0xf667	No error (0)	bcp.crwdcntrl.net		3.208.124.249	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.759111881 CET	1.1.1.1	192.168.2.4	0x7f9f	No error (0)	oajs.openx.net		34.120.107.143	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.759111881 CET	1.1.1.1	192.168.2.4	0x7f9f	No error (0)	oajs.openx.net		34.120.135.53	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.919960976 CET	1.1.1.1	192.168.2.4	0x2aa	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:10.919960976 CET	1.1.1.1	192.168.2.4	0x2aa	No error (0)	image6v2.pubmnet.com	pugm33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:10.919960976 CET	1.1.1.1	192.168.2.4	0x2aa	No error (0)	pugm33000-fpb.pubmnet.com		104.36.113.112	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.920358896 CET	1.1.1.1	192.168.2.4	0x1d8b	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:10.920358896 CET	1.1.1.1	192.168.2.4	0x1d8b	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:10.960043907 CET	1.1.1.1	192.168.2.4	0x5697	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.960043907 CET	1.1.1.1	192.168.2.4	0x5697	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.960043907 CET	1.1.1.1	192.168.2.4	0x5697	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.960043907 CET	1.1.1.1	192.168.2.4	0x5697	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.960043907 CET	1.1.1.1	192.168.2.4	0x5697	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.960043907 CET	1.1.1.1	192.168.2.4	0x5697	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.960043907 CET	1.1.1.1	192.168.2.4	0x5697	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.960043907 CET	1.1.1.1	192.168.2.4	0x5697	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.960043907 CET	1.1.1.1	192.168.2.4	0x5697	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:10.960043907 CET	1.1.1.1	192.168.2.4	0x5697	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.537885904 CET	1.1.1.1	192.168.2.4	0xc3bc	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.537885904 CET	1.1.1.1	192.168.2.4	0xc3bc	No error (0)	cdn-content.ampproject.org		142.251.116.132	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.538463116 CET	1.1.1.1	192.168.2.4	0xe9db	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.540369987 CET	1.1.1.1	192.168.2.4	0x794c	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.540369987 CET	1.1.1.1	192.168.2.4	0x794c	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.540369987 CET	1.1.1.1	192.168.2.4	0x794c	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.540369987 CET	1.1.1.1	192.168.2.4	0x794c	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.542762995 CET	1.1.1.1	192.168.2.4	0x257d	No error (0)	cm.g.doubleclick.net		142.250.115.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.542762995 CET	1.1.1.1	192.168.2.4	0x257d	No error (0)	cm.g.doubleclick.net		142.250.115.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.542762995 CET	1.1.1.1	192.168.2.4	0x257d	No error (0)	cm.g.doubleclick.net		142.250.115.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.542762995 CET	1.1.1.1	192.168.2.4	0x257d	No error (0)	cm.g.doubleclick.net		142.250.115.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.544327021 CET	1.1.1.1	192.168.2.4	0xc15a	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.544327021 CET	1.1.1.1	192.168.2.4	0xc15a	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.545509100 CET	1.1.1.1	192.168.2.4	0x4927	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.545509100 CET	1.1.1.1	192.168.2.4	0x4927	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.547226906 CET	1.1.1.1	192.168.2.4	0x680f	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.547375917 CET	1.1.1.1	192.168.2.4	0xe608	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.547375917 CET	1.1.1.1	192.168.2.4	0xe608	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.197.142.67	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.547375917 CET	1.1.1.1	192.168.2.4	0xe608	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.85.196.91	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.547375917 CET	1.1.1.1	192.168.2.4	0xe608	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		18.235.113.16	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.547375917 CET	1.1.1.1	192.168.2.4	0xe608	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.194.162.111	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.548712969 CET	1.1.1.1	192.168.2.4	0xa0ad	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.548712969 CET	1.1.1.1	192.168.2.4	0xa0ad	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.548780918 CET	1.1.1.1	192.168.2.4	0xcb8d	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.549048901 CET	1.1.1.1	192.168.2.4	0xc33e	No error (0)	dis.criteo.com	widget.da1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.549048901 CET	1.1.1.1	192.168.2.4	0xc33e	No error (0)	widget.da1.vip.prod.criteo.com		74.119.118.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.549622059 CET	1.1.1.1	192.168.2.4	0x1337	No error (0)	dis.criteo.com	widget.da1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.550510883 CET	1.1.1.1	192.168.2.4	0xbc52	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.550510883 CET	1.1.1.1	192.168.2.4	0xbc52	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.550510883 CET	1.1.1.1	192.168.2.4	0xbc52	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.550510883 CET	1.1.1.1	192.168.2.4	0xbc52	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.550510883 CET	1.1.1.1	192.168.2.4	0xbc52	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.550510883 CET	1.1.1.1	192.168.2.4	0xbc52	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.550510883 CET	1.1.1.1	192.168.2.4	0xbc52	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.550510883 CET	1.1.1.1	192.168.2.4	0xbc52	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.550510883 CET	1.1.1.1	192.168.2.4	0xbc52	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.589715958 CET	1.1.1.1	192.168.2.4	0xfbc7	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.589715958 CET	1.1.1.1	192.168.2.4	0xfbc7	No error (0)	securepubads46.g.doubleclick.net		142.250.138.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.589715958 CET	1.1.1.1	192.168.2.4	0xfbc7	No error (0)	securepubads46.g.doubleclick.net		142.250.138.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.589715958 CET	1.1.1.1	192.168.2.4	0xfbc7	No error (0)	securepubads46.g.doubleclick.net		142.250.138.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.589715958 CET	1.1.1.1	192.168.2.4	0xfbc7	No error (0)	securepubads46.g.doubleclick.net		142.250.138.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.589752913 CET	1.1.1.1	192.168.2.4	0x99d0	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:11.755861998 CET	1.1.1.1	192.168.2.4	0x8948	No error (0)	s.amazon-adsystem.com		52.46.128.147	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.847136974 CET	1.1.1.1	192.168.2.4	0xbd1c	No error (0)	match.prod.bidr.io		54.160.195.52	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.847136974 CET	1.1.1.1	192.168.2.4	0xbd1c	No error (0)	match.prod.bidr.io		54.159.9.42	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.847136974 CET	1.1.1.1	192.168.2.4	0xbd1c	No error (0)	match.prod.bidr.io		54.157.204.230	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.847136974 CET	1.1.1.1	192.168.2.4	0xbd1c	No error (0)	match.prod.bidr.io		54.158.193.40	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.847136974 CET	1.1.1.1	192.168.2.4	0xbd1c	No error (0)	match.prod.bidr.io		52.72.206.170	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.847136974 CET	1.1.1.1	192.168.2.4	0xbd1c	No error (0)	match.prod.bidr.io		54.146.98.73	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.847136974 CET	1.1.1.1	192.168.2.4	0xbd1c	No error (0)	match.prod.bidr.io		52.73.206.246	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:11.847136974 CET	1.1.1.1	192.168.2.4	0xbd1c	No error (0)	match.prod.bidr.io		52.7.200.174	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.049451113 CET	1.1.1.1	192.168.2.4	0x1fe	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.053396940 CET	1.1.1.1	192.168.2.4	0x3b93	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.065654993 CET	1.1.1.1	192.168.2.4	0x5070	No error (0)	um.simpli.fi		34.170.123.2	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.065654993 CET	1.1.1.1	192.168.2.4	0x5070	No error (0)	um.simpli.fi		34.171.234.26	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.065654993 CET	1.1.1.1	192.168.2.4	0x5070	No error (0)	um.simpli.fi		34.133.71.175	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.072438955 CET	1.1.1.1	192.168.2.4	0xc2d4	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:12.072438955 CET	1.1.1.1	192.168.2.4	0xc2d4	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:12.072438955 CET	1.1.1.1	192.168.2.4	0xc2d4	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:12.072658062 CET	1.1.1.1	192.168.2.4	0x6aca	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:12.072658062 CET	1.1.1.1	192.168.2.4	0x6aca	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:12.072658062 CET	1.1.1.1	192.168.2.4	0x6aca	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:12.072658062 CET	1.1.1.1	192.168.2.4	0x6aca	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.072658062 CET	1.1.1.1	192.168.2.4	0x6aca	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.666203022 CET	1.1.1.1	192.168.2.4	0x9973	No error (0)	google-bidout-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.666203022 CET	1.1.1.1	192.168.2.4	0x9973	No error (0)	google-bidout-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.775729895 CET	1.1.1.1	192.168.2.4	0xce45	No error (0)	sync.ipredictive.com		52.45.111.235	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.775729895 CET	1.1.1.1	192.168.2.4	0xce45	No error (0)	sync.ipredictive.com		54.146.218.6	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.775729895 CET	1.1.1.1	192.168.2.4	0xce45	No error (0)	sync.ipredictive.com		54.147.179.34	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.775729895 CET	1.1.1.1	192.168.2.4	0xce45	No error (0)	sync.ipredictive.com		52.7.115.38	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.775729895 CET	1.1.1.1	192.168.2.4	0xce45	No error (0)	sync.ipredictive.com		52.86.74.151	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.775729895 CET	1.1.1.1	192.168.2.4	0xce45	No error (0)	sync.ipredictive.com		54.157.90.217	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.775729895 CET	1.1.1.1	192.168.2.4	0xce45	No error (0)	sync.ipredictive.com		52.54.170.5	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:12.775729895 CET	1.1.1.1	192.168.2.4	0xce45	No error (0)	sync.ipredictive.com		52.22.22.238	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:13.130451918 CET	1.1.1.1	192.168.2.4	0x84b	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:13.131046057 CET	1.1.1.1	192.168.2.4	0xa16b	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:13.939651966 CET	1.1.1.1	192.168.2.4	0x2923	No error (0)	googleads.g.doubleclick.net		142.250.113.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:13.939651966 CET	1.1.1.1	192.168.2.4	0x2923	No error (0)	googleads.g.doubleclick.net		142.250.113.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:13.939651966 CET	1.1.1.1	192.168.2.4	0x2923	No error (0)	googleads.g.doubleclick.net		142.250.113.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:13.939651966 CET	1.1.1.1	192.168.2.4	0x2923	No error (0)	googleads.g.doubleclick.net		142.250.113.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:13.940201998 CET	1.1.1.1	192.168.2.4	0xa8e4	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 28, 2023 17:22:15.247164011 CET	1.1.1.1	192.168.2.4	0x237a	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.247164011 CET	1.1.1.1	192.168.2.4	0x237a	No error (0)	image2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.247164011 CET	1.1.1.1	192.168.2.4	0x237a	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.247682095 CET	1.1.1.1	192.168.2.4	0x2331	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.247682095 CET	1.1.1.1	192.168.2.4	0x2331	No error (0)	image2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.258651972 CET	1.1.1.1	192.168.2.4	0x6c3	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.258651972 CET	1.1.1.1	192.168.2.4	0x6c3	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.258651972 CET	1.1.1.1	192.168.2.4	0x6c3	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.259403944 CET	1.1.1.1	192.168.2.4	0x15fd	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.259403944 CET	1.1.1.1	192.168.2.4	0x15fd	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.269531012 CET	1.1.1.1	192.168.2.4	0xea6	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.269531012 CET	1.1.1.1	192.168.2.4	0xea6	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.269531012 CET	1.1.1.1	192.168.2.4	0xea6	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.271049976 CET	1.1.1.1	192.168.2.4	0x365c	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.271049976 CET	1.1.1.1	192.168.2.4	0x365c	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.367289066 CET	1.1.1.1	192.168.2.4	0xa2d	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:15.367289066 CET	1.1.1.1	192.168.2.4	0xa2d	No error (0)	rtb-csync-use2.smartadserver.com		147.135.94.220	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.367289066 CET	1.1.1.1	192.168.2.4	0xa2d	No error (0)	rtb-csync-use2.smartadserver.com		135.148.2.56	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.367289066 CET	1.1.1.1	192.168.2.4	0xa2d	No error (0)	rtb-csync-use2.smartadserver.com		147.135.94.221	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.367289066 CET	1.1.1.1	192.168.2.4	0xa2d	No error (0)	rtb-csync-use2.smartadserver.com		135.148.2.57	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:15.367624998 CET	1.1.1.1	192.168.2.4	0x2b35	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.018496037 CET	1.1.1.1	192.168.2.4	0x4f61	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.018496037 CET	1.1.1.1	192.168.2.4	0x4f61	No error (0)	image4-v2.pubmnet.com	spug33000-fpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.018496037 CET	1.1.1.1	192.168.2.4	0x4f61	No error (0)	spug33000-fpb.pubmnet.com		104.36.113.111	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.020039082 CET	1.1.1.1	192.168.2.4	0x89c1	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.020039082 CET	1.1.1.1	192.168.2.4	0x89c1	No error (0)	image4-v2.pubmnet.com	spug-njrpb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.332375050 CET	1.1.1.1	192.168.2.4	0x77a2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.332375050 CET	1.1.1.1	192.168.2.4	0x77a2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.928864002 CET	1.1.1.1	192.168.2.4	0xda13	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.928864002 CET	1.1.1.1	192.168.2.4	0xda13	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		44.199.51.202	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.928864002 CET	1.1.1.1	192.168.2.4	0xda13	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		3.232.179.229	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.928864002 CET	1.1.1.1	192.168.2.4	0xda13	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		18.215.90.210	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.928864002 CET	1.1.1.1	192.168.2.4	0xda13	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		3.89.188.37	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.930408001 CET	1.1.1.1	192.168.2.4	0xea6c	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.931687117 CET	1.1.1.1	192.168.2.4	0x5f29	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.931687117 CET	1.1.1.1	192.168.2.4	0x5f29	No error (0)	www3.l.google.com		142.250.115.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.931687117 CET	1.1.1.1	192.168.2.4	0x5f29	No error (0)	www3.l.google.com		142.250.115.139	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.931687117 CET	1.1.1.1	192.168.2.4	0x5f29	No error (0)	www3.l.google.com		142.250.115.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.931687117 CET	1.1.1.1	192.168.2.4	0x5f29	No error (0)	www3.l.google.com		142.250.115.100	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.931687117 CET	1.1.1.1	192.168.2.4	0x5f29	No error (0)	www3.l.google.com		142.250.115.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.931687117 CET	1.1.1.1	192.168.2.4	0x5f29	No error (0)	www3.l.google.com		142.250.115.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.932172060 CET	1.1.1.1	192.168.2.4	0xdf55	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.933092117 CET	1.1.1.1	192.168.2.4	0xbb50	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.933092117 CET	1.1.1.1	192.168.2.4	0xbb50	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.934870958 CET	1.1.1.1	192.168.2.4	0xdf1	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.934870958 CET	1.1.1.1	192.168.2.4	0xdf1	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.935039043 CET	1.1.1.1	192.168.2.4	0x33c6	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.935039043 CET	1.1.1.1	192.168.2.4	0x33c6	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.937068939 CET	1.1.1.1	192.168.2.4	0xba55	No error (0)	oajs.openx.net		34.120.107.143	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.937068939 CET	1.1.1.1	192.168.2.4	0xba55	No error (0)	oajs.openx.net		34.120.135.53	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.937876940 CET	1.1.1.1	192.168.2.4	0xe32	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.937876940 CET	1.1.1.1	192.168.2.4	0xe32	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.938220978 CET	1.1.1.1	192.168.2.4	0x151e	No error (0)	dis.criteo.com	widget.da1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.939907074 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.939907074 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.939907074 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.939907074 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.939907074 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.939907074 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.939907074 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.939907074 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.939907074 CET	1.1.1.1	192.168.2.4	0x569f	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.940218925 CET	1.1.1.1	192.168.2.4	0x5ae5	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.940218925 CET	1.1.1.1	192.168.2.4	0x5ae5	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.940218925 CET	1.1.1.1	192.168.2.4	0x5ae5	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.940218925 CET	1.1.1.1	192.168.2.4	0x5ae5	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.940787077 CET	1.1.1.1	192.168.2.4	0x8da5	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.940787077 CET	1.1.1.1	192.168.2.4	0x8da5	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.942148924 CET	1.1.1.1	192.168.2.4	0x39e	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.942148924 CET	1.1.1.1	192.168.2.4	0x39e	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		3.234.129.75	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.942148924 CET	1.1.1.1	192.168.2.4	0x39e	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.204.221.65	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.942148924 CET	1.1.1.1	192.168.2.4	0x39e	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		50.17.250.107	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.942148924 CET	1.1.1.1	192.168.2.4	0x39e	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		18.235.113.16	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.942854881 CET	1.1.1.1	192.168.2.4	0xcfb0	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.948040962 CET	1.1.1.1	192.168.2.4	0x69f3	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.948040962 CET	1.1.1.1	192.168.2.4	0x69f3	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.948040962 CET	1.1.1.1	192.168.2.4	0x69f3	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.948184013 CET	1.1.1.1	192.168.2.4	0xbba7	No error (0)	bh.contextweb.com	sjc-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.948184013 CET	1.1.1.1	192.168.2.4	0xbba7	No error (0)	sjc-bh.contextweb.com	sjc-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:16.987173080 CET	1.1.1.1	192.168.2.4	0x24d6	No error (0)	googleads.g.doubleclick.net		142.250.138.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.987173080 CET	1.1.1.1	192.168.2.4	0x24d6	No error (0)	googleads.g.doubleclick.net		142.250.138.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.987173080 CET	1.1.1.1	192.168.2.4	0x24d6	No error (0)	googleads.g.doubleclick.net		142.250.138.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.987173080 CET	1.1.1.1	192.168.2.4	0x24d6	No error (0)	googleads.g.doubleclick.net		142.250.138.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:16.987791061 CET	1.1.1.1	192.168.2.4	0x7fd5	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 28, 2023 17:22:17.162559986 CET	1.1.1.1	192.168.2.4	0x8c77	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:17.162632942 CET	1.1.1.1	192.168.2.4	0xc330	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:17.162632942 CET	1.1.1.1	192.168.2.4	0xc330	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.162632942 CET	1.1.1.1	192.168.2.4	0xc330	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.162632942 CET	1.1.1.1	192.168.2.4	0xc330	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.162632942 CET	1.1.1.1	192.168.2.4	0xc330	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.432975054 CET	1.1.1.1	192.168.2.4	0x39dd	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:17.433538914 CET	1.1.1.1	192.168.2.4	0xc50d	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:17.461127043 CET	1.1.1.1	192.168.2.4	0x6984	No error (0)	cm.g.doubleclick.net		142.250.113.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.461127043 CET	1.1.1.1	192.168.2.4	0x6984	No error (0)	cm.g.doubleclick.net		142.250.113.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.461127043 CET	1.1.1.1	192.168.2.4	0x6984	No error (0)	cm.g.doubleclick.net		142.250.113.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.461127043 CET	1.1.1.1	192.168.2.4	0x6984	No error (0)	cm.g.doubleclick.net		142.250.113.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.473443985 CET	1.1.1.1	192.168.2.4	0x3173	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:17.473443985 CET	1.1.1.1	192.168.2.4	0x3173	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:17.473443985 CET	1.1.1.1	192.168.2.4	0x3173	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.474164009 CET	1.1.1.1	192.168.2.4	0x5992	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:17.474164009 CET	1.1.1.1	192.168.2.4	0x5992	No error (0)	image2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:17.477020025 CET	1.1.1.1	192.168.2.4	0xeef5	No error (0)	s.amazon-adsystem.com		209.54.182.161	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.494730949 CET	1.1.1.1	192.168.2.4	0xed40	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:17.494730949 CET	1.1.1.1	192.168.2.4	0xed40	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:17.494730949 CET	1.1.1.1	192.168.2.4	0xed40	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:17.494843006 CET	1.1.1.1	192.168.2.4	0x36e	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:17.494843006 CET	1.1.1.1	192.168.2.4	0x36e	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.741476059 CET	1.1.1.1	192.168.2.4	0x7d76	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.741476059 CET	1.1.1.1	192.168.2.4	0x7d76	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.741476059 CET	1.1.1.1	192.168.2.4	0x7d76	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.743418932 CET	1.1.1.1	192.168.2.4	0x1429	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.743418932 CET	1.1.1.1	192.168.2.4	0x1429	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.743418932 CET	1.1.1.1	192.168.2.4	0x1429	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.747239113 CET	1.1.1.1	192.168.2.4	0x76a7	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.747239113 CET	1.1.1.1	192.168.2.4	0x76a7	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.747503042 CET	1.1.1.1	192.168.2.4	0x4a7	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.747503042 CET	1.1.1.1	192.168.2.4	0x4a7	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.750138044 CET	1.1.1.1	192.168.2.4	0x74a0	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.750138044 CET	1.1.1.1	192.168.2.4	0x74a0	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.750138044 CET	1.1.1.1	192.168.2.4	0x74a0	No error (0)	global.px.quantserve.com		192.184.69.239	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.750138044 CET	1.1.1.1	192.168.2.4	0x74a0	No error (0)	global.px.quantserve.com		192.184.69.252	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.750138044 CET	1.1.1.1	192.168.2.4	0x74a0	No error (0)	global.px.quantserve.com		192.184.69.167	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.750138044 CET	1.1.1.1	192.168.2.4	0x74a0	No error (0)	global.px.quantserve.com		192.184.69.215	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.750138044 CET	1.1.1.1	192.168.2.4	0x74a0	No error (0)	global.px.quantserve.com		192.184.69.201	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.752975941 CET	1.1.1.1	192.168.2.4	0x6f43	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.752975941 CET	1.1.1.1	192.168.2.4	0x6f43	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.752994061 CET	1.1.1.1	192.168.2.4	0x2470	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.752994061 CET	1.1.1.1	192.168.2.4	0x2470	No error (0)	rtb.adgrx.com		173.231.178.81	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.752994061 CET	1.1.1.1	192.168.2.4	0x2470	No error (0)	rtb.adgrx.com		72.251.229.176	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.752994061 CET	1.1.1.1	192.168.2.4	0x2470	No error (0)	rtb.adgrx.com		173.231.178.116	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.752994061 CET	1.1.1.1	192.168.2.4	0x2470	No error (0)	rtb.adgrx.com		173.231.178.77	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.752994061 CET	1.1.1.1	192.168.2.4	0x2470	No error (0)	rtb.adgrx.com		173.231.178.83	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.752994061 CET	1.1.1.1	192.168.2.4	0x2470	No error (0)	rtb.adgrx.com		173.231.178.85	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.752994061 CET	1.1.1.1	192.168.2.4	0x2470	No error (0)	rtb.adgrx.com		173.231.184.20	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.752994061 CET	1.1.1.1	192.168.2.4	0x2470	No error (0)	rtb.adgrx.com		173.231.178.115	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.753191948 CET	1.1.1.1	192.168.2.4	0x9919	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.753191948 CET	1.1.1.1	192.168.2.4	0x9919	No error (0)	cdn.w55c.net		54.147.24.55	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.753191948 CET	1.1.1.1	192.168.2.4	0x9919	No error (0)	cdn.w55c.net		54.166.148.14	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.753191948 CET	1.1.1.1	192.168.2.4	0x9919	No error (0)	cdn.w55c.net		52.5.75.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.753191948 CET	1.1.1.1	192.168.2.4	0x9919	No error (0)	cdn.w55c.net		52.54.58.184	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.753191948 CET	1.1.1.1	192.168.2.4	0x9919	No error (0)	cdn.w55c.net		54.209.20.238	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.753191948 CET	1.1.1.1	192.168.2.4	0x9919	No error (0)	cdn.w55c.net		54.198.122.161	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.753191948 CET	1.1.1.1	192.168.2.4	0x9919	No error (0)	cdn.w55c.net		54.156.159.24	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.753191948 CET	1.1.1.1	192.168.2.4	0x9919	No error (0)	cdn.w55c.net		52.5.138.9	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.753393888 CET	1.1.1.1	192.168.2.4	0x793	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.753957033 CET	1.1.1.1	192.168.2.4	0x54cc	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.759567022 CET	1.1.1.1	192.168.2.4	0xa810	No error (0)	thrtle.com		54.158.15.169	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.759567022 CET	1.1.1.1	192.168.2.4	0xa810	No error (0)	thrtle.com		204.236.210.31	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.759567022 CET	1.1.1.1	192.168.2.4	0xa810	No error (0)	thrtle.com		34.235.53.166	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.759567022 CET	1.1.1.1	192.168.2.4	0xa810	No error (0)	thrtle.com		54.156.62.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.759567022 CET	1.1.1.1	192.168.2.4	0xa810	No error (0)	thrtle.com		35.175.29.179	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.759567022 CET	1.1.1.1	192.168.2.4	0xa810	No error (0)	thrtle.com		50.19.110.14	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.759567022 CET	1.1.1.1	192.168.2.4	0xa810	No error (0)	thrtle.com		52.200.3.94	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.759567022 CET	1.1.1.1	192.168.2.4	0xa810	No error (0)	thrtle.com		52.71.16.59	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.760689020 CET	1.1.1.1	192.168.2.4	0xf791	No error (0)	crb.kargo.com		34.230.139.192	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.760689020 CET	1.1.1.1	192.168.2.4	0xf791	No error (0)	crb.kargo.com		34.234.144.3	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.760689020 CET	1.1.1.1	192.168.2.4	0xf791	No error (0)	crb.kargo.com		52.1.240.135	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.760689020 CET	1.1.1.1	192.168.2.4	0xf791	No error (0)	crb.kargo.com		34.199.50.181	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.760689020 CET	1.1.1.1	192.168.2.4	0xf791	No error (0)	crb.kargo.com		34.195.28.76	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.760689020 CET	1.1.1.1	192.168.2.4	0xf791	No error (0)	crb.kargo.com		34.224.103.168	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.761751890 CET	1.1.1.1	192.168.2.4	0x847a	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.762347937 CET	1.1.1.1	192.168.2.4	0xdc8e	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.762347937 CET	1.1.1.1	192.168.2.4	0xdc8e	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.3.7.191	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.762347937 CET	1.1.1.1	192.168.2.4	0xdc8e	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.6.102.233	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.762347937 CET	1.1.1.1	192.168.2.4	0xdc8e	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.21.185.227	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.762347937 CET	1.1.1.1	192.168.2.4	0xdc8e	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.4.146.202	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.762347937 CET	1.1.1.1	192.168.2.4	0xdc8e	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.21.25.82	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.762347937 CET	1.1.1.1	192.168.2.4	0xdc8e	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.4.1.221	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.762347937 CET	1.1.1.1	192.168.2.4	0xdc8e	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.70.181.24	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.762347937 CET	1.1.1.1	192.168.2.4	0xdc8e	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.23.26.141	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.763881922 CET	1.1.1.1	192.168.2.4	0x5b0c	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.764271975 CET	1.1.1.1	192.168.2.4	0xd559	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.765768051 CET	1.1.1.1	192.168.2.4	0xc733	No error (0)	pixel-sync.sitescout.com	pixel-a.sitescout.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.765768051 CET	1.1.1.1	192.168.2.4	0xc733	No error (0)	pixel-a.sitescout.com		207.198.113.204	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.765851974 CET	1.1.1.1	192.168.2.4	0x5612	No error (0)	pixel-sync.sitescout.com	pixel-a.sitescout.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.767781019 CET	1.1.1.1	192.168.2.4	0x28f2	No error (0)	pmp.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.770143032 CET	1.1.1.1	192.168.2.4	0x4095	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:18.770143032 CET	1.1.1.1	192.168.2.4	0x4095	No error (0)	adserver.technoratimedia.com		150.136.156.92	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:18.770176888 CET	1.1.1.1	192.168.2.4	0xc5c3	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:20.090399027 CET	1.1.1.1	192.168.2.4	0x2c66	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:20.090399027 CET	1.1.1.1	192.168.2.4	0x2c66	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:20.090838909 CET	1.1.1.1	192.168.2.4	0xd842	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:21.152832985 CET	1.1.1.1	192.168.2.4	0x3e63	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:21.152832985 CET	1.1.1.1	192.168.2.4	0x3e63	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:21.152832985 CET	1.1.1.1	192.168.2.4	0x3e63	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.154212952 CET	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:21.154212952 CET	1.1.1.1	192.168.2.4	0x8b4b	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:21.156699896 CET	1.1.1.1	192.168.2.4	0x2dd1	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.181965113 CET	1.1.1.1	192.168.2.4	0xadf3	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.181965113 CET	1.1.1.1	192.168.2.4	0xadf3	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.253854990 CET	1.1.1.1	192.168.2.4	0xfc57	No error (0)	crb.kargo.com		34.230.139.192	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.253854990 CET	1.1.1.1	192.168.2.4	0xfc57	No error (0)	crb.kargo.com		34.234.144.3	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.253854990 CET	1.1.1.1	192.168.2.4	0xfc57	No error (0)	crb.kargo.com		34.195.28.76	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.253854990 CET	1.1.1.1	192.168.2.4	0xfc57	No error (0)	crb.kargo.com		34.224.103.168	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.253854990 CET	1.1.1.1	192.168.2.4	0xfc57	No error (0)	crb.kargo.com		52.1.240.135	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.253854990 CET	1.1.1.1	192.168.2.4	0xfc57	No error (0)	crb.kargo.com		34.199.50.181	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.728728056 CET	1.1.1.1	192.168.2.4	0x6087	No error (0)	thrtle.com		52.200.3.94	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.728728056 CET	1.1.1.1	192.168.2.4	0x6087	No error (0)	thrtle.com		204.236.210.31	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.728728056 CET	1.1.1.1	192.168.2.4	0x6087	No error (0)	thrtle.com		52.71.16.59	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.728728056 CET	1.1.1.1	192.168.2.4	0x6087	No error (0)	thrtle.com		54.156.62.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.728728056 CET	1.1.1.1	192.168.2.4	0x6087	No error (0)	thrtle.com		54.158.15.169	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.728728056 CET	1.1.1.1	192.168.2.4	0x6087	No error (0)	thrtle.com		50.19.110.14	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.728728056 CET	1.1.1.1	192.168.2.4	0x6087	No error (0)	thrtle.com		35.175.29.179	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:21.728728056 CET	1.1.1.1	192.168.2.4	0x6087	No error (0)	thrtle.com		34.235.53.166	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:22.401988983 CET	1.1.1.1	192.168.2.4	0x52cc	No error (0)	pmp.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:22.743406057 CET	1.1.1.1	192.168.2.4	0x26fc	No error (0)	googleads.g.doubleclick.net		142.250.114.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:22.743406057 CET	1.1.1.1	192.168.2.4	0x26fc	No error (0)	googleads.g.doubleclick.net		142.250.114.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:22.743406057 CET	1.1.1.1	192.168.2.4	0x26fc	No error (0)	googleads.g.doubleclick.net		142.250.114.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:22.743406057 CET	1.1.1.1	192.168.2.4	0x26fc	No error (0)	googleads.g.doubleclick.net		142.250.114.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:22.744124889 CET	1.1.1.1	192.168.2.4	0xb740	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 28, 2023 17:22:24.094240904 CET	1.1.1.1	192.168.2.4	0x95e5	No error (0)	pcapp.store		167.99.235.203	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:24.094240904 CET	1.1.1.1	192.168.2.4	0x95e5	No error (0)	pcapp.store		45.32.1.23	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:24.094240904 CET	1.1.1.1	192.168.2.4	0x95e5	No error (0)	pcapp.store		104.248.126.225	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:24.094240904 CET	1.1.1.1	192.168.2.4	0x95e5	No error (0)	pcapp.store		159.223.126.41	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:24.094240904 CET	1.1.1.1	192.168.2.4	0x95e5	No error (0)	pcapp.store		209.222.21.115	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:26.294286966 CET	1.1.1.1	192.168.2.4	0xfd52	No error (0)	pcapp.store		167.99.235.203	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:26.294286966 CET	1.1.1.1	192.168.2.4	0xfd52	No error (0)	pcapp.store		45.32.1.23	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:26.294286966 CET	1.1.1.1	192.168.2.4	0xfd52	No error (0)	pcapp.store		104.248.126.225	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:26.294286966 CET	1.1.1.1	192.168.2.4	0xfd52	No error (0)	pcapp.store		159.223.126.41	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:26.294286966 CET	1.1.1.1	192.168.2.4	0xfd52	No error (0)	pcapp.store		209.222.21.115	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:27.270818949 CET	1.1.1.1	192.168.2.4	0x8124	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:27.270818949 CET	1.1.1.1	192.168.2.4	0x8124	No error (0)	static-cdn.hotjar.com		18.160.41.58	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:27.270818949 CET	1.1.1.1	192.168.2.4	0x8124	No error (0)	static-cdn.hotjar.com		18.160.41.112	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:27.270818949 CET	1.1.1.1	192.168.2.4	0x8124	No error (0)	static-cdn.hotjar.com		18.160.41.53	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:27.270818949 CET	1.1.1.1	192.168.2.4	0x8124	No error (0)	static-cdn.hotjar.com		18.160.41.49	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:27.271027088 CET	1.1.1.1	192.168.2.4	0x696c	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:28.121090889 CET	1.1.1.1	192.168.2.4	0xd1dc	No error (0)	script.hotjar.com		18.160.156.99	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.121090889 CET	1.1.1.1	192.168.2.4	0xd1dc	No error (0)	script.hotjar.com		18.160.156.27	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.121090889 CET	1.1.1.1	192.168.2.4	0xd1dc	No error (0)	script.hotjar.com		18.160.156.4	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.121090889 CET	1.1.1.1	192.168.2.4	0xd1dc	No error (0)	script.hotjar.com		18.160.156.16	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.414912939 CET	1.1.1.1	192.168.2.4	0x1b93	No error (0)	www.google.com		142.250.138.103	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.414912939 CET	1.1.1.1	192.168.2.4	0x1b93	No error (0)	www.google.com		142.250.138.106	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.414912939 CET	1.1.1.1	192.168.2.4	0x1b93	No error (0)	www.google.com		142.250.138.147	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.414912939 CET	1.1.1.1	192.168.2.4	0x1b93	No error (0)	www.google.com		142.250.138.104	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.414912939 CET	1.1.1.1	192.168.2.4	0x1b93	No error (0)	www.google.com		142.250.138.105	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.414912939 CET	1.1.1.1	192.168.2.4	0x1b93	No error (0)	www.google.com		142.250.138.99	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.415189028 CET	1.1.1.1	192.168.2.4	0x518c	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:28.666085958 CET	1.1.1.1	192.168.2.4	0x3bd7	No error (0)	adservice.google.com		142.251.116.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.666085958 CET	1.1.1.1	192.168.2.4	0x3bd7	No error (0)	adservice.google.com		142.251.116.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.666085958 CET	1.1.1.1	192.168.2.4	0x3bd7	No error (0)	adservice.google.com		142.251.116.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.666085958 CET	1.1.1.1	192.168.2.4	0x3bd7	No error (0)	adservice.google.com		142.251.116.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.666100025 CET	1.1.1.1	192.168.2.4	0xb520	No error (0)	adservice.google.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:28.668020964 CET	1.1.1.1	192.168.2.4	0x6182	No error (0)	www.google.com		142.250.115.147	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.668020964 CET	1.1.1.1	192.168.2.4	0x6182	No error (0)	www.google.com		142.250.115.106	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.668020964 CET	1.1.1.1	192.168.2.4	0x6182	No error (0)	www.google.com		142.250.115.99	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.668020964 CET	1.1.1.1	192.168.2.4	0x6182	No error (0)	www.google.com		142.250.115.104	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.668020964 CET	1.1.1.1	192.168.2.4	0x6182	No error (0)	www.google.com		142.250.115.103	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.668020964 CET	1.1.1.1	192.168.2.4	0x6182	No error (0)	www.google.com		142.250.115.105	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.668600082 CET	1.1.1.1	192.168.2.4	0x2fb2	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:28.726775885 CET	1.1.1.1	192.168.2.4	0xf456	No error (0)	td.doubleclick.net		142.250.114.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.726775885 CET	1.1.1.1	192.168.2.4	0xf456	No error (0)	td.doubleclick.net		142.250.114.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.726775885 CET	1.1.1.1	192.168.2.4	0xf456	No error (0)	td.doubleclick.net		142.250.114.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.726775885 CET	1.1.1.1	192.168.2.4	0xf456	No error (0)	td.doubleclick.net		142.250.114.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.814136028 CET	1.1.1.1	192.168.2.4	0x51b6	No error (0)	google.com		142.250.114.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.814136028 CET	1.1.1.1	192.168.2.4	0x51b6	No error (0)	google.com		142.250.114.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.814136028 CET	1.1.1.1	192.168.2.4	0x51b6	No error (0)	google.com		142.250.114.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.814136028 CET	1.1.1.1	192.168.2.4	0x51b6	No error (0)	google.com		142.250.114.100	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.814136028 CET	1.1.1.1	192.168.2.4	0x51b6	No error (0)	google.com		142.250.114.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.814136028 CET	1.1.1.1	192.168.2.4	0x51b6	No error (0)	google.com		142.250.114.139	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.814652920 CET	1.1.1.1	192.168.2.4	0x8781	No error (0)	google.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:28.963517904 CET	1.1.1.1	192.168.2.4	0xccf7	No error (0)	analytics.google.com		142.250.138.100	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.963517904 CET	1.1.1.1	192.168.2.4	0xccf7	No error (0)	analytics.google.com		142.250.138.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.963517904 CET	1.1.1.1	192.168.2.4	0xccf7	No error (0)	analytics.google.com		142.250.138.139	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.963517904 CET	1.1.1.1	192.168.2.4	0xccf7	No error (0)	analytics.google.com		142.250.138.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.963517904 CET	1.1.1.1	192.168.2.4	0xccf7	No error (0)	analytics.google.com		142.250.138.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.963517904 CET	1.1.1.1	192.168.2.4	0xccf7	No error (0)	analytics.google.com		142.250.138.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.963845015 CET	1.1.1.1	192.168.2.4	0xa9a	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:28.964762926 CET	1.1.1.1	192.168.2.4	0x2db7	No error (0)	stats.g.doubleclick.net		142.250.113.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.964762926 CET	1.1.1.1	192.168.2.4	0x2db7	No error (0)	stats.g.doubleclick.net		142.250.113.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.964762926 CET	1.1.1.1	192.168.2.4	0x2db7	No error (0)	stats.g.doubleclick.net		142.250.113.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:28.964762926 CET	1.1.1.1	192.168.2.4	0x2db7	No error (0)	stats.g.doubleclick.net		142.250.113.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:31.235665083 CET	1.1.1.1	192.168.2.4	0xca4b	No error (0)	googleads.g.doubleclick.net		142.251.116.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:31.235665083 CET	1.1.1.1	192.168.2.4	0xca4b	No error (0)	googleads.g.doubleclick.net		142.251.116.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:31.235665083 CET	1.1.1.1	192.168.2.4	0xca4b	No error (0)	googleads.g.doubleclick.net		142.251.116.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:31.235665083 CET	1.1.1.1	192.168.2.4	0xca4b	No error (0)	googleads.g.doubleclick.net		142.251.116.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:31.236063957 CET	1.1.1.1	192.168.2.4	0xeb69	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 28, 2023 17:22:31.557404995 CET	1.1.1.1	192.168.2.4	0x6e98	No error (0)	device.maxmind.com		162.159.135.22	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:31.557404995 CET	1.1.1.1	192.168.2.4	0x6e98	No error (0)	device.maxmind.com		162.159.134.22	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:31.558303118 CET	1.1.1.1	192.168.2.4	0x4baa	No error (0)	device.maxmind.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:31.597012043 CET	1.1.1.1	192.168.2.4	0xa2fa	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:31.597012043 CET	1.1.1.1	192.168.2.4	0xa2fa	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:32.915199995 CET	1.1.1.1	192.168.2.4	0x7eac	No error (0)	d-ipv6.mmapiws.com		104.18.42.177	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:32.915199995 CET	1.1.1.1	192.168.2.4	0x7eac	No error (0)	d-ipv6.mmapiws.com		172.64.145.79	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:32.915863991 CET	1.1.1.1	192.168.2.4	0x8331	No error (0)	d-ipv6.mmapiws.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:33.605067968 CET	1.1.1.1	192.168.2.4	0xe176	No error (0)	d-ipv6.mmapiws.com		104.18.42.177	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:33.605067968 CET	1.1.1.1	192.168.2.4	0xe176	No error (0)	d-ipv6.mmapiws.com		172.64.145.79	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:33.605806112 CET	1.1.1.1	192.168.2.4	0x5e14	No error (0)	d-ipv6.mmapiws.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:35.639767885 CET	1.1.1.1	192.168.2.4	0x7177	No error (0)	www.mediafire.com		104.16.114.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:35.639767885 CET	1.1.1.1	192.168.2.4	0x7177	No error (0)	www.mediafire.com		104.16.113.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:35.641532898 CET	1.1.1.1	192.168.2.4	0x4de5	No error (0)	www.mediafire.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:41.133527040 CET	1.1.1.1	192.168.2.4	0x4377	No error (0)	www.mediafire.com		104.16.113.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:41.133527040 CET	1.1.1.1	192.168.2.4	0x4377	No error (0)	www.mediafire.com		104.16.114.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:41.133712053 CET	1.1.1.1	192.168.2.4	0xf224	No error (0)	www.mediafire.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:41.781611919 CET	1.1.1.1	192.168.2.4	0x24a6	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:41.781611919 CET	1.1.1.1	192.168.2.4	0x24a6	No error (0)	scontent.xx.fbcdn.net		157.240.25.13	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:41.781752110 CET	1.1.1.1	192.168.2.4	0x6a66	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:49.512022018 CET	1.1.1.1	192.168.2.4	0x9fea	No error (0)	btlr.sharethrough.com	btlr-us-east-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:49.512022018 CET	1.1.1.1	192.168.2.4	0x9fea	No error (0)	btlr-us-east-1.sharethrough.com		34.237.83.209	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:49.512193918 CET	1.1.1.1	192.168.2.4	0x681	No error (0)	btlr.sharethrough.com	btlr-us-east-1.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:49.635612011 CET	1.1.1.1	192.168.2.4	0xbe1d	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:49.635612011 CET	1.1.1.1	192.168.2.4	0xbe1d	No error (0)	us-east-tlx.3lift.com		3.210.180.48	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:49.635612011 CET	1.1.1.1	192.168.2.4	0xbe1d	No error (0)	us-east-tlx.3lift.com		44.217.68.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:49.635612011 CET	1.1.1.1	192.168.2.4	0xbe1d	No error (0)	us-east-tlx.3lift.com		3.217.238.173	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:49.635612011 CET	1.1.1.1	192.168.2.4	0xbe1d	No error (0)	us-east-tlx.3lift.com		3.219.53.177	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:49.635612011 CET	1.1.1.1	192.168.2.4	0xbe1d	No error (0)	us-east-tlx.3lift.com		34.192.126.3	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:49.635612011 CET	1.1.1.1	192.168.2.4	0xbe1d	No error (0)	us-east-tlx.3lift.com		34.205.99.45	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:49.635612011 CET	1.1.1.1	192.168.2.4	0xbe1d	No error (0)	us-east-tlx.3lift.com		54.243.181.170	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:49.635612011 CET	1.1.1.1	192.168.2.4	0xbe1d	No error (0)	us-east-tlx.3lift.com		54.157.36.152	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:49.635668039 CET	1.1.1.1	192.168.2.4	0x641c	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:50.205353975 CET	1.1.1.1	192.168.2.4	0xf937	No error (0)	pagead-googlehosted.l.google.com		142.250.113.132	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:50.396171093 CET	1.1.1.1	192.168.2.4	0x741b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:50.396171093 CET	1.1.1.1	192.168.2.4	0x741b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:50.919827938 CET	1.1.1.1	192.168.2.4	0x334c	No error (0)	bcp.crwdcntrl.net		174.129.88.64	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:50.919827938 CET	1.1.1.1	192.168.2.4	0x334c	No error (0)	bcp.crwdcntrl.net		44.220.113.151	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:50.919827938 CET	1.1.1.1	192.168.2.4	0x334c	No error (0)	bcp.crwdcntrl.net		44.211.9.18	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:50.919827938 CET	1.1.1.1	192.168.2.4	0x334c	No error (0)	bcp.crwdcntrl.net		3.215.169.119	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:50.919827938 CET	1.1.1.1	192.168.2.4	0x334c	No error (0)	bcp.crwdcntrl.net		52.206.155.140	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:50.919827938 CET	1.1.1.1	192.168.2.4	0x334c	No error (0)	bcp.crwdcntrl.net		52.204.77.239	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:50.919827938 CET	1.1.1.1	192.168.2.4	0x334c	No error (0)	bcp.crwdcntrl.net		3.208.124.249	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:50.919827938 CET	1.1.1.1	192.168.2.4	0x334c	No error (0)	bcp.crwdcntrl.net		34.225.234.246	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.951968908 CET	1.1.1.1	192.168.2.4	0x66be	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:51.951968908 CET	1.1.1.1	192.168.2.4	0x66be	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:51.951968908 CET	1.1.1.1	192.168.2.4	0x66be	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.951968908 CET	1.1.1.1	192.168.2.4	0x66be	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.951968908 CET	1.1.1.1	192.168.2.4	0x66be	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.951968908 CET	1.1.1.1	192.168.2.4	0x66be	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.951968908 CET	1.1.1.1	192.168.2.4	0x66be	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.951968908 CET	1.1.1.1	192.168.2.4	0x66be	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.951968908 CET	1.1.1.1	192.168.2.4	0x66be	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.952430964 CET	1.1.1.1	192.168.2.4	0x77e0	No error (0)	dmp.truoptik.com		104.17.219.204	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.952430964 CET	1.1.1.1	192.168.2.4	0x77e0	No error (0)	dmp.truoptik.com		104.17.218.204	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.952430964 CET	1.1.1.1	192.168.2.4	0x77e0	No error (0)	dmp.truoptik.com		104.17.216.204	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.952430964 CET	1.1.1.1	192.168.2.4	0x77e0	No error (0)	dmp.truoptik.com		104.17.217.204	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.952430964 CET	1.1.1.1	192.168.2.4	0x77e0	No error (0)	dmp.truoptik.com		104.17.215.204	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.954672098 CET	1.1.1.1	192.168.2.4	0x90dd	No error (0)	dmp.truoptik.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:51.958619118 CET	1.1.1.1	192.168.2.4	0xbdb7	No error (0)	sync.srv.stackadapt.com		54.196.33.224	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.958619118 CET	1.1.1.1	192.168.2.4	0xbdb7	No error (0)	sync.srv.stackadapt.com		54.165.166.176	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.958619118 CET	1.1.1.1	192.168.2.4	0xbdb7	No error (0)	sync.srv.stackadapt.com		54.210.107.216	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.958619118 CET	1.1.1.1	192.168.2.4	0xbdb7	No error (0)	sync.srv.stackadapt.com		54.146.92.239	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.958619118 CET	1.1.1.1	192.168.2.4	0xbdb7	No error (0)	sync.srv.stackadapt.com		54.146.46.22	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.958619118 CET	1.1.1.1	192.168.2.4	0xbdb7	No error (0)	sync.srv.stackadapt.com		54.225.192.239	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.958619118 CET	1.1.1.1	192.168.2.4	0xbdb7	No error (0)	sync.srv.stackadapt.com		54.196.247.2	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.958619118 CET	1.1.1.1	192.168.2.4	0xbdb7	No error (0)	sync.srv.stackadapt.com		54.198.173.106	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.963211060 CET	1.1.1.1	192.168.2.4	0x6d2d	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:51.963500023 CET	1.1.1.1	192.168.2.4	0xdc19	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:51.965513945 CET	1.1.1.1	192.168.2.4	0x3290	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:51.965513945 CET	1.1.1.1	192.168.2.4	0x3290	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:51.965513945 CET	1.1.1.1	192.168.2.4	0x3290	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:51.965513945 CET	1.1.1.1	192.168.2.4	0x3290	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.965513945 CET	1.1.1.1	192.168.2.4	0x3290	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:51.966126919 CET	1.1.1.1	192.168.2.4	0x9489	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:51.966126919 CET	1.1.1.1	192.168.2.4	0x9489	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:51.966126919 CET	1.1.1.1	192.168.2.4	0x9489	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:52.698683977 CET	1.1.1.1	192.168.2.4	0x9631	No error (0)	contextual.media.net		96.7.168.23	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700437069 CET	1.1.1.1	192.168.2.4	0xe631	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700437069 CET	1.1.1.1	192.168.2.4	0xe631	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700437069 CET	1.1.1.1	192.168.2.4	0xe631	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700437069 CET	1.1.1.1	192.168.2.4	0xe631	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700437069 CET	1.1.1.1	192.168.2.4	0xe631	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700437069 CET	1.1.1.1	192.168.2.4	0xe631	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700437069 CET	1.1.1.1	192.168.2.4	0xe631	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700437069 CET	1.1.1.1	192.168.2.4	0xe631	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700437069 CET	1.1.1.1	192.168.2.4	0xe631	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700701952 CET	1.1.1.1	192.168.2.4	0x1e4a	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700701952 CET	1.1.1.1	192.168.2.4	0x1e4a	No error (0)	pixel.33across.com		67.202.105.24	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.700701952 CET	1.1.1.1	192.168.2.4	0x1e4a	No error (0)	pixel.33across.com		67.202.105.21	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.701870918 CET	1.1.1.1	192.168.2.4	0x7dc8	No error (0)	cm.g.doubleclick.net		142.251.116.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.701870918 CET	1.1.1.1	192.168.2.4	0x7dc8	No error (0)	cm.g.doubleclick.net		142.251.116.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.701870918 CET	1.1.1.1	192.168.2.4	0x7dc8	No error (0)	cm.g.doubleclick.net		142.251.116.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.701870918 CET	1.1.1.1	192.168.2.4	0x7dc8	No error (0)	cm.g.doubleclick.net		142.251.116.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.702101946 CET	1.1.1.1	192.168.2.4	0x253b	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:52.702511072 CET	1.1.1.1	192.168.2.4	0xa5e5	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:52.702511072 CET	1.1.1.1	192.168.2.4	0xa5e5	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.236.175.55	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.702511072 CET	1.1.1.1	192.168.2.4	0xa5e5	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.225.0.62	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.702511072 CET	1.1.1.1	192.168.2.4	0xa5e5	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.202.71.208	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.702511072 CET	1.1.1.1	192.168.2.4	0xa5e5	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		18.206.101.37	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.702511072 CET	1.1.1.1	192.168.2.4	0xa5e5	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		44.213.182.94	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.702511072 CET	1.1.1.1	192.168.2.4	0xa5e5	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		3.222.88.193	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.702511072 CET	1.1.1.1	192.168.2.4	0xa5e5	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		44.216.110.139	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.702511072 CET	1.1.1.1	192.168.2.4	0xa5e5	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		44.194.97.47	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.703078985 CET	1.1.1.1	192.168.2.4	0xc87e	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:52.703675032 CET	1.1.1.1	192.168.2.4	0x8c4	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.703675032 CET	1.1.1.1	192.168.2.4	0x8c4	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.703675032 CET	1.1.1.1	192.168.2.4	0x8c4	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.703675032 CET	1.1.1.1	192.168.2.4	0x8c4	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.704323053 CET	1.1.1.1	192.168.2.4	0x7434	No error (0)	sync.crwdcntrl.net		44.208.253.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.704323053 CET	1.1.1.1	192.168.2.4	0x7434	No error (0)	sync.crwdcntrl.net		54.209.94.68	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.704323053 CET	1.1.1.1	192.168.2.4	0x7434	No error (0)	sync.crwdcntrl.net		44.220.113.151	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.704323053 CET	1.1.1.1	192.168.2.4	0x7434	No error (0)	sync.crwdcntrl.net		44.211.9.18	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.704323053 CET	1.1.1.1	192.168.2.4	0x7434	No error (0)	sync.crwdcntrl.net		174.129.88.64	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.704323053 CET	1.1.1.1	192.168.2.4	0x7434	No error (0)	sync.crwdcntrl.net		34.225.234.246	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.704323053 CET	1.1.1.1	192.168.2.4	0x7434	No error (0)	sync.crwdcntrl.net		52.206.155.140	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.704323053 CET	1.1.1.1	192.168.2.4	0x7434	No error (0)	sync.crwdcntrl.net		3.208.124.249	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:52.990643024 CET	1.1.1.1	192.168.2.4	0x2607	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:52.991247892 CET	1.1.1.1	192.168.2.4	0x44e7	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:53.405699968 CET	1.1.1.1	192.168.2.4	0x9eda	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:53.406317949 CET	1.1.1.1	192.168.2.4	0xcaf3	No error (0)	triplelift-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:53.413393974 CET	1.1.1.1	192.168.2.4	0xedd3	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:53.413393974 CET	1.1.1.1	192.168.2.4	0xedd3	No error (0)	match-us-east-1-ecs.sharethrough.com		34.231.181.97	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.413393974 CET	1.1.1.1	192.168.2.4	0xedd3	No error (0)	match-us-east-1-ecs.sharethrough.com		34.227.128.134	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.413393974 CET	1.1.1.1	192.168.2.4	0xedd3	No error (0)	match-us-east-1-ecs.sharethrough.com		54.86.60.193	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.413393974 CET	1.1.1.1	192.168.2.4	0xedd3	No error (0)	match-us-east-1-ecs.sharethrough.com		34.239.34.1	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.413393974 CET	1.1.1.1	192.168.2.4	0xedd3	No error (0)	match-us-east-1-ecs.sharethrough.com		107.23.135.200	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.413393974 CET	1.1.1.1	192.168.2.4	0xedd3	No error (0)	match-us-east-1-ecs.sharethrough.com		52.70.20.227	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.413393974 CET	1.1.1.1	192.168.2.4	0xedd3	No error (0)	match-us-east-1-ecs.sharethrough.com		3.213.124.140	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.413393974 CET	1.1.1.1	192.168.2.4	0xedd3	No error (0)	match-us-east-1-ecs.sharethrough.com		34.198.29.92	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.413536072 CET	1.1.1.1	192.168.2.4	0x5076	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:53.684139967 CET	1.1.1.1	192.168.2.4	0x42a4	No error (0)	sync.crwdcntrl.net		3.208.124.249	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.684139967 CET	1.1.1.1	192.168.2.4	0x42a4	No error (0)	sync.crwdcntrl.net		174.129.88.64	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.684139967 CET	1.1.1.1	192.168.2.4	0x42a4	No error (0)	sync.crwdcntrl.net		52.206.155.140	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.684139967 CET	1.1.1.1	192.168.2.4	0x42a4	No error (0)	sync.crwdcntrl.net		34.225.234.246	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.684139967 CET	1.1.1.1	192.168.2.4	0x42a4	No error (0)	sync.crwdcntrl.net		44.220.113.151	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.684139967 CET	1.1.1.1	192.168.2.4	0x42a4	No error (0)	sync.crwdcntrl.net		54.209.94.68	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.684139967 CET	1.1.1.1	192.168.2.4	0x42a4	No error (0)	sync.crwdcntrl.net		44.208.253.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.684139967 CET	1.1.1.1	192.168.2.4	0x42a4	No error (0)	sync.crwdcntrl.net		44.211.9.18	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.691621065 CET	1.1.1.1	192.168.2.4	0xc286	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.886336088 CET	1.1.1.1	192.168.2.4	0xb1c5	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.902420998 CET	1.1.1.1	192.168.2.4	0x793c	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.902420998 CET	1.1.1.1	192.168.2.4	0x793c	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:53.902472019 CET	1.1.1.1	192.168.2.4	0x36b	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:54.041044950 CET	1.1.1.1	192.168.2.4	0xc652	No error (0)	googleads.g.doubleclick.net		142.250.114.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.041044950 CET	1.1.1.1	192.168.2.4	0xc652	No error (0)	googleads.g.doubleclick.net		142.250.114.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.041044950 CET	1.1.1.1	192.168.2.4	0xc652	No error (0)	googleads.g.doubleclick.net		142.250.114.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.041044950 CET	1.1.1.1	192.168.2.4	0xc652	No error (0)	googleads.g.doubleclick.net		142.250.114.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.041359901 CET	1.1.1.1	192.168.2.4	0x355d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 28, 2023 17:22:54.115586042 CET	1.1.1.1	192.168.2.4	0xa1c6	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.230104923 CET	1.1.1.1	192.168.2.4	0xccf5	No error (0)	cm-supply-web.gammaplatform.com		35.186.154.107	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.248045921 CET	1.1.1.1	192.168.2.4	0x46e6	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:54.248259068 CET	1.1.1.1	192.168.2.4	0x508c	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:54.248259068 CET	1.1.1.1	192.168.2.4	0x508c	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.359195948 CET	1.1.1.1	192.168.2.4	0x2ec4	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:54.359195948 CET	1.1.1.1	192.168.2.4	0x2ec4	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.359195948 CET	1.1.1.1	192.168.2.4	0x2ec4	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.359195948 CET	1.1.1.1	192.168.2.4	0x2ec4	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.359463930 CET	1.1.1.1	192.168.2.4	0x42fc	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:54.475056887 CET	1.1.1.1	192.168.2.4	0x8d5a	No error (0)	synchroscript.deliveryengine.adswizz.com		18.245.124.65	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.475056887 CET	1.1.1.1	192.168.2.4	0x8d5a	No error (0)	synchroscript.deliveryengine.adswizz.com		18.245.124.59	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.475056887 CET	1.1.1.1	192.168.2.4	0x8d5a	No error (0)	synchroscript.deliveryengine.adswizz.com		18.245.124.125	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.475056887 CET	1.1.1.1	192.168.2.4	0x8d5a	No error (0)	synchroscript.deliveryengine.adswizz.com		18.245.124.44	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.476438046 CET	1.1.1.1	192.168.2.4	0x6064	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.489824057 CET	1.1.1.1	192.168.2.4	0xb9e3	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:54.490849018 CET	1.1.1.1	192.168.2.4	0x9b2c	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:54.736587048 CET	1.1.1.1	192.168.2.4	0xc391	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:54.736587048 CET	1.1.1.1	192.168.2.4	0xc391	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:54.736587048 CET	1.1.1.1	192.168.2.4	0xc391	No error (0)	dorpat.geo.iponweb.net		35.207.24.140	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.743525982 CET	1.1.1.1	192.168.2.4	0x8793	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:54.743525982 CET	1.1.1.1	192.168.2.4	0x8793	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:54.949480057 CET	1.1.1.1	192.168.2.4	0xfc39	No error (0)	sync.srv.stackadapt.com		54.163.253.130	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.949480057 CET	1.1.1.1	192.168.2.4	0xfc39	No error (0)	sync.srv.stackadapt.com		52.73.244.49	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.949480057 CET	1.1.1.1	192.168.2.4	0xfc39	No error (0)	sync.srv.stackadapt.com		54.146.92.239	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.949480057 CET	1.1.1.1	192.168.2.4	0xfc39	No error (0)	sync.srv.stackadapt.com		54.165.166.176	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.949480057 CET	1.1.1.1	192.168.2.4	0xfc39	No error (0)	sync.srv.stackadapt.com		54.196.247.2	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.949480057 CET	1.1.1.1	192.168.2.4	0xfc39	No error (0)	sync.srv.stackadapt.com		54.198.173.106	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.949480057 CET	1.1.1.1	192.168.2.4	0xfc39	No error (0)	sync.srv.stackadapt.com		54.174.90.242	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:54.949480057 CET	1.1.1.1	192.168.2.4	0xfc39	No error (0)	sync.srv.stackadapt.com		54.146.46.22	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.066303968 CET	1.1.1.1	192.168.2.4	0x9598	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:55.066303968 CET	1.1.1.1	192.168.2.4	0x9598	No error (0)	match-us-east-1-ecs.sharethrough.com		52.70.20.227	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.066303968 CET	1.1.1.1	192.168.2.4	0x9598	No error (0)	match-us-east-1-ecs.sharethrough.com		34.239.34.1	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.066303968 CET	1.1.1.1	192.168.2.4	0x9598	No error (0)	match-us-east-1-ecs.sharethrough.com		18.211.138.72	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.066303968 CET	1.1.1.1	192.168.2.4	0x9598	No error (0)	match-us-east-1-ecs.sharethrough.com		34.235.75.11	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.066303968 CET	1.1.1.1	192.168.2.4	0x9598	No error (0)	match-us-east-1-ecs.sharethrough.com		34.231.181.97	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.066303968 CET	1.1.1.1	192.168.2.4	0x9598	No error (0)	match-us-east-1-ecs.sharethrough.com		54.86.60.193	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.066303968 CET	1.1.1.1	192.168.2.4	0x9598	No error (0)	match-us-east-1-ecs.sharethrough.com		3.213.124.140	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.066303968 CET	1.1.1.1	192.168.2.4	0x9598	No error (0)	match-us-east-1-ecs.sharethrough.com		3.231.183.8	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.066435099 CET	1.1.1.1	192.168.2.4	0x2e49	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:55.156188965 CET	1.1.1.1	192.168.2.4	0x6d73	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.156188965 CET	1.1.1.1	192.168.2.4	0x6d73	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:55.157464027 CET	1.1.1.1	192.168.2.4	0x88c6	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Dec 28, 2023 17:22:56.340691090 CET	1.1.1.1	192.168.2.4	0xa575	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:56.343678951 CET	1.1.1.1	192.168.2.4	0xfd7f	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:56.581208944 CET	1.1.1.1	192.168.2.4	0x8d77	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:57.815670013 CET	1.1.1.1	192.168.2.4	0xd8d9	No error (0)	download2433.mediafire.com		199.91.155.174	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:57.833229065 CET	1.1.1.1	192.168.2.4	0x633a	No error (0)	synchroscript.deliveryengine.adswizz.com		99.86.102.53	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:57.833229065 CET	1.1.1.1	192.168.2.4	0x633a	No error (0)	synchroscript.deliveryengine.adswizz.com		99.86.102.117	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:57.833229065 CET	1.1.1.1	192.168.2.4	0x633a	No error (0)	synchroscript.deliveryengine.adswizz.com		99.86.102.11	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:57.833229065 CET	1.1.1.1	192.168.2.4	0x633a	No error (0)	synchroscript.deliveryengine.adswizz.com		99.86.102.13	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:58.229001999 CET	1.1.1.1	192.168.2.4	0x996f	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:58.229001999 CET	1.1.1.1	192.168.2.4	0x996f	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:58.229334116 CET	1.1.1.1	192.168.2.4	0x398e	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:22:59.278752089 CET	1.1.1.1	192.168.2.4	0x66c1	No error (0)	www.mediafire.com		104.16.113.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:59.278752089 CET	1.1.1.1	192.168.2.4	0x66c1	No error (0)	www.mediafire.com		104.16.114.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:22:59.281552076 CET	1.1.1.1	192.168.2.4	0x25da	No error (0)	www.mediafire.com			65	IN (0x0001)	false
Dec 28, 2023 17:23:00.368020058 CET	1.1.1.1	192.168.2.4	0x9d45	No error (0)	gum.criteo.com	gum.da1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:00.368020058 CET	1.1.1.1	192.168.2.4	0x9d45	No error (0)	gum.da1.vip.prod.criteo.com		74.119.118.149	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:00.369633913 CET	1.1.1.1	192.168.2.4	0xb07f	No error (0)	gum.criteo.com	gum.da1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:01.818660975 CET	1.1.1.1	192.168.2.4	0xce8d	No error (0)	sync.go.sonobi.com	lax-1-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:01.818660975 CET	1.1.1.1	192.168.2.4	0xce8d	No error (0)	lax-1-sync.go.sonobi.com		72.34.250.75	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:01.819766045 CET	1.1.1.1	192.168.2.4	0x56b4	No error (0)	sync.go.sonobi.com	lax-1-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.014132023 CET	1.1.1.1	192.168.2.4	0x4403	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.014132023 CET	1.1.1.1	192.168.2.4	0x4403	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.014132023 CET	1.1.1.1	192.168.2.4	0x4403	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.014175892 CET	1.1.1.1	192.168.2.4	0xa9ba	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.014175892 CET	1.1.1.1	192.168.2.4	0xa9ba	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658909082 CET	1.1.1.1	192.168.2.4	0xa5a1	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658926010 CET	1.1.1.1	192.168.2.4	0xb05b	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658926010 CET	1.1.1.1	192.168.2.4	0xb05b	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.228.23	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658926010 CET	1.1.1.1	192.168.2.4	0xb05b	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.184.48	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658926010 CET	1.1.1.1	192.168.2.4	0xb05b	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.187.199	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658926010 CET	1.1.1.1	192.168.2.4	0xb05b	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.172.115	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658926010 CET	1.1.1.1	192.168.2.4	0xb05b	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.242.163	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658926010 CET	1.1.1.1	192.168.2.4	0xb05b	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.165.29	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658926010 CET	1.1.1.1	192.168.2.4	0xb05b	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.229.175	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658926010 CET	1.1.1.1	192.168.2.4	0xb05b	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.203.123	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658926010 CET	1.1.1.1	192.168.2.4	0xb05b	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.136.251	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.658926010 CET	1.1.1.1	192.168.2.4	0xb05b	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.242.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.661238909 CET	1.1.1.1	192.168.2.4	0x757d	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.662939072 CET	1.1.1.1	192.168.2.4	0x6082	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.663100958 CET	1.1.1.1	192.168.2.4	0x6468	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.663810968 CET	1.1.1.1	192.168.2.4	0xdb12	No error (0)	gocm.c.appier.net	cm128.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.663810968 CET	1.1.1.1	192.168.2.4	0xdb12	No error (0)	cm128.appier.org		172.104.105.5	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.663822889 CET	1.1.1.1	192.168.2.4	0xde67	No error (0)	gocm.c.appier.net	cm120.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.668879032 CET	1.1.1.1	192.168.2.4	0xa7fa	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.668879032 CET	1.1.1.1	192.168.2.4	0xa7fa	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		44.210.41.244	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.668879032 CET	1.1.1.1	192.168.2.4	0xa7fa	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		44.193.120.159	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.668879032 CET	1.1.1.1	192.168.2.4	0xa7fa	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.93.251.5	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.668879032 CET	1.1.1.1	192.168.2.4	0xa7fa	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.197.216.192	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.669312954 CET	1.1.1.1	192.168.2.4	0xb2aa	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.671823978 CET	1.1.1.1	192.168.2.4	0xbcc	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:02.671823978 CET	1.1.1.1	192.168.2.4	0xbcc	No error (0)	idaas-ext.cph.liveintent.com		52.22.32.84	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.671823978 CET	1.1.1.1	192.168.2.4	0xbcc	No error (0)	idaas-ext.cph.liveintent.com		3.232.79.232	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.671823978 CET	1.1.1.1	192.168.2.4	0xbcc	No error (0)	idaas-ext.cph.liveintent.com		34.207.26.241	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.671823978 CET	1.1.1.1	192.168.2.4	0xbcc	No error (0)	idaas-ext.cph.liveintent.com		3.212.146.122	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.671823978 CET	1.1.1.1	192.168.2.4	0xbcc	No error (0)	idaas-ext.cph.liveintent.com		3.222.179.146	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.671823978 CET	1.1.1.1	192.168.2.4	0xbcc	No error (0)	idaas-ext.cph.liveintent.com		3.222.98.107	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.671823978 CET	1.1.1.1	192.168.2.4	0xbcc	No error (0)	idaas-ext.cph.liveintent.com		35.153.26.252	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.671823978 CET	1.1.1.1	192.168.2.4	0xbcc	No error (0)	idaas-ext.cph.liveintent.com		34.232.121.20	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:02.672024012 CET	1.1.1.1	192.168.2.4	0x771	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:05.356739044 CET	1.1.1.1	192.168.2.4	0x2293	No error (0)	cs.media.net		173.222.52.23	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.361896038 CET	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:05.361896038 CET	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ssp.ads.betweendigital.com		172.240.127.129	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.361896038 CET	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ssp.ads.betweendigital.com		172.240.127.128	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.361896038 CET	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ssp.ads.betweendigital.com		96.46.186.59	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.361896038 CET	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ssp.ads.betweendigital.com		172.240.127.131	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.361896038 CET	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ssp.ads.betweendigital.com		96.46.186.57	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.361896038 CET	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ssp.ads.betweendigital.com		96.46.186.61	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.361896038 CET	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ssp.ads.betweendigital.com		172.240.127.130	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.361896038 CET	1.1.1.1	192.168.2.4	0x6dd7	No error (0)	ssp.ads.betweendigital.com		96.46.186.63	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.362544060 CET	1.1.1.1	192.168.2.4	0xdc6b	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:05.485030890 CET	1.1.1.1	192.168.2.4	0xe4de	No error (0)	analytics.google.com		142.250.138.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.485030890 CET	1.1.1.1	192.168.2.4	0xe4de	No error (0)	analytics.google.com		142.250.138.100	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.485030890 CET	1.1.1.1	192.168.2.4	0xe4de	No error (0)	analytics.google.com		142.250.138.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.485030890 CET	1.1.1.1	192.168.2.4	0xe4de	No error (0)	analytics.google.com		142.250.138.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.485030890 CET	1.1.1.1	192.168.2.4	0xe4de	No error (0)	analytics.google.com		142.250.138.139	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.485030890 CET	1.1.1.1	192.168.2.4	0xe4de	No error (0)	analytics.google.com		142.250.138.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.599055052 CET	1.1.1.1	192.168.2.4	0xc2d5	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:05.599055052 CET	1.1.1.1	192.168.2.4	0xc2d5	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		3.93.251.5	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.599055052 CET	1.1.1.1	192.168.2.4	0xc2d5	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		44.193.120.159	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.599055052 CET	1.1.1.1	192.168.2.4	0xc2d5	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		44.210.41.244	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.599055052 CET	1.1.1.1	192.168.2.4	0xc2d5	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.197.216.192	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.600028038 CET	1.1.1.1	192.168.2.4	0x50e9	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:05.709695101 CET	1.1.1.1	192.168.2.4	0xfd74	No error (0)	io.narrative.io		54.227.167.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.709695101 CET	1.1.1.1	192.168.2.4	0xfd74	No error (0)	io.narrative.io		35.171.255.91	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.709695101 CET	1.1.1.1	192.168.2.4	0xfd74	No error (0)	io.narrative.io		52.54.3.24	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.709695101 CET	1.1.1.1	192.168.2.4	0xfd74	No error (0)	io.narrative.io		54.144.244.8	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.714292049 CET	1.1.1.1	192.168.2.4	0x8bbb	No error (0)	rtb.adentifi.com		107.23.145.95	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.714292049 CET	1.1.1.1	192.168.2.4	0x8bbb	No error (0)	rtb.adentifi.com		3.223.16.170	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.714292049 CET	1.1.1.1	192.168.2.4	0x8bbb	No error (0)	rtb.adentifi.com		3.225.59.1	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.714292049 CET	1.1.1.1	192.168.2.4	0x8bbb	No error (0)	rtb.adentifi.com		52.203.70.213	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.714292049 CET	1.1.1.1	192.168.2.4	0x8bbb	No error (0)	rtb.adentifi.com		34.201.225.79	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.714292049 CET	1.1.1.1	192.168.2.4	0x8bbb	No error (0)	rtb.adentifi.com		72.44.44.12	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.714292049 CET	1.1.1.1	192.168.2.4	0x8bbb	No error (0)	rtb.adentifi.com		3.217.69.99	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.714292049 CET	1.1.1.1	192.168.2.4	0x8bbb	No error (0)	rtb.adentifi.com		34.198.133.245	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.790992975 CET	1.1.1.1	192.168.2.4	0xaf75	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:05.790992975 CET	1.1.1.1	192.168.2.4	0xaf75	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:05.792102098 CET	1.1.1.1	192.168.2.4	0x3907	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:06.119591951 CET	1.1.1.1	192.168.2.4	0xec89	No error (0)	static.mediafire.com			65	IN (0x0001)	false
Dec 28, 2023 17:23:06.121431112 CET	1.1.1.1	192.168.2.4	0x4a75	No error (0)	static.mediafire.com		104.16.113.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:06.121431112 CET	1.1.1.1	192.168.2.4	0x4a75	No error (0)	static.mediafire.com		104.16.114.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:06.458012104 CET	1.1.1.1	192.168.2.4	0x4cc0	No error (0)	cs.media.net		173.222.52.23	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.023880959 CET	1.1.1.1	192.168.2.4	0x5d62	No error (0)	g.ezoic.net		3.210.81.252	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.023880959 CET	1.1.1.1	192.168.2.4	0x5d62	No error (0)	g.ezoic.net		50.16.223.119	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.023880959 CET	1.1.1.1	192.168.2.4	0x5d62	No error (0)	g.ezoic.net		34.230.232.255	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.023880959 CET	1.1.1.1	192.168.2.4	0x5d62	No error (0)	g.ezoic.net		18.213.98.197	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.075131893 CET	1.1.1.1	192.168.2.4	0x3565	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:07.075131893 CET	1.1.1.1	192.168.2.4	0x3565	No error (0)	idaas6.cph.liveintent.com		34.205.128.181	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.075131893 CET	1.1.1.1	192.168.2.4	0x3565	No error (0)	idaas6.cph.liveintent.com		3.223.167.169	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.075131893 CET	1.1.1.1	192.168.2.4	0x3565	No error (0)	idaas6.cph.liveintent.com		3.231.106.238	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.075376034 CET	1.1.1.1	192.168.2.4	0x81bf	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:07.254847050 CET	1.1.1.1	192.168.2.4	0xce91	No error (0)	api.amplitude.com		54.200.104.216	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.254847050 CET	1.1.1.1	192.168.2.4	0xce91	No error (0)	api.amplitude.com		54.245.119.49	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.254847050 CET	1.1.1.1	192.168.2.4	0xce91	No error (0)	api.amplitude.com		52.42.194.45	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.254847050 CET	1.1.1.1	192.168.2.4	0xce91	No error (0)	api.amplitude.com		44.230.163.60	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.254847050 CET	1.1.1.1	192.168.2.4	0xce91	No error (0)	api.amplitude.com		54.69.244.166	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.254847050 CET	1.1.1.1	192.168.2.4	0xce91	No error (0)	api.amplitude.com		34.216.127.37	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.254847050 CET	1.1.1.1	192.168.2.4	0xce91	No error (0)	api.amplitude.com		54.201.2.233	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.254847050 CET	1.1.1.1	192.168.2.4	0xce91	No error (0)	api.amplitude.com		54.188.10.32	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.286273003 CET	1.1.1.1	192.168.2.4	0x3f50	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:07.286273003 CET	1.1.1.1	192.168.2.4	0x3f50	No error (0)	www3.l.google.com		142.250.113.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.286273003 CET	1.1.1.1	192.168.2.4	0x3f50	No error (0)	www3.l.google.com		142.250.113.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.286273003 CET	1.1.1.1	192.168.2.4	0x3f50	No error (0)	www3.l.google.com		142.250.113.100	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.286273003 CET	1.1.1.1	192.168.2.4	0x3f50	No error (0)	www3.l.google.com		142.250.113.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.286273003 CET	1.1.1.1	192.168.2.4	0x3f50	No error (0)	www3.l.google.com		142.250.113.139	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.286273003 CET	1.1.1.1	192.168.2.4	0x3f50	No error (0)	www3.l.google.com		142.250.113.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.286595106 CET	1.1.1.1	192.168.2.4	0x3099	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:07.601670027 CET	1.1.1.1	192.168.2.4	0xd19f	No error (0)	convertwithwave.com		3.210.148.248	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.601670027 CET	1.1.1.1	192.168.2.4	0xd19f	No error (0)	convertwithwave.com		54.243.57.60	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.601670027 CET	1.1.1.1	192.168.2.4	0xd19f	No error (0)	convertwithwave.com		3.218.35.121	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.601670027 CET	1.1.1.1	192.168.2.4	0xd19f	No error (0)	convertwithwave.com		3.94.63.35	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.601670027 CET	1.1.1.1	192.168.2.4	0xd19f	No error (0)	convertwithwave.com		52.71.206.190	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:07.601670027 CET	1.1.1.1	192.168.2.4	0xd19f	No error (0)	convertwithwave.com		3.208.197.70	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.033900976 CET	1.1.1.1	192.168.2.4	0xb75c	No error (0)	static.mediafire.com		104.16.114.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.033900976 CET	1.1.1.1	192.168.2.4	0xb75c	No error (0)	static.mediafire.com		104.16.113.74	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.034478903 CET	1.1.1.1	192.168.2.4	0x9a91	No error (0)	static.mediafire.com			65	IN (0x0001)	false
Dec 28, 2023 17:23:08.036674976 CET	1.1.1.1	192.168.2.4	0x34d2	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:08.036674976 CET	1.1.1.1	192.168.2.4	0x34d2	No error (0)	idaas6.cph.liveintent.com		34.205.128.181	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.036674976 CET	1.1.1.1	192.168.2.4	0x34d2	No error (0)	idaas6.cph.liveintent.com		3.231.106.238	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.036674976 CET	1.1.1.1	192.168.2.4	0x34d2	No error (0)	idaas6.cph.liveintent.com		3.223.167.169	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.036868095 CET	1.1.1.1	192.168.2.4	0x1382	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:08.627650023 CET	1.1.1.1	192.168.2.4	0x174f	No error (0)	api.wavebrowser.co		3.210.52.109	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.627650023 CET	1.1.1.1	192.168.2.4	0x174f	No error (0)	api.wavebrowser.co		34.205.245.225	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.627650023 CET	1.1.1.1	192.168.2.4	0x174f	No error (0)	api.wavebrowser.co		35.174.30.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.627650023 CET	1.1.1.1	192.168.2.4	0x174f	No error (0)	api.wavebrowser.co		3.228.69.56	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.627650023 CET	1.1.1.1	192.168.2.4	0x174f	No error (0)	api.wavebrowser.co		3.222.67.5	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.627650023 CET	1.1.1.1	192.168.2.4	0x174f	No error (0)	api.wavebrowser.co		3.219.198.197	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:08.813247919 CET	1.1.1.1	192.168.2.4	0x1dd8	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:08.821680069 CET	1.1.1.1	192.168.2.4	0x9358	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:08.825190067 CET	1.1.1.1	192.168.2.4	0x8d64	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:08.825279951 CET	1.1.1.1	192.168.2.4	0x5dc1	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:09.422005892 CET	1.1.1.1	192.168.2.4	0xa3d4	No error (0)	stats.g.doubleclick.net		142.251.116.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:09.422005892 CET	1.1.1.1	192.168.2.4	0xa3d4	No error (0)	stats.g.doubleclick.net		142.251.116.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:09.422005892 CET	1.1.1.1	192.168.2.4	0xa3d4	No error (0)	stats.g.doubleclick.net		142.251.116.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:09.422005892 CET	1.1.1.1	192.168.2.4	0xa3d4	No error (0)	stats.g.doubleclick.net		142.251.116.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:09.469374895 CET	1.1.1.1	192.168.2.4	0xff0c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:09.469374895 CET	1.1.1.1	192.168.2.4	0xff0c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:10.462637901 CET	1.1.1.1	192.168.2.4	0x2c95	No error (0)	app.posthog.com	d34gxaszg70o4u.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:10.462637901 CET	1.1.1.1	192.168.2.4	0x2c95	No error (0)	d34gxaszg70o4u.cloudfront.net		143.204.165.57	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:10.462637901 CET	1.1.1.1	192.168.2.4	0x2c95	No error (0)	d34gxaszg70o4u.cloudfront.net		143.204.165.16	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:10.462637901 CET	1.1.1.1	192.168.2.4	0x2c95	No error (0)	d34gxaszg70o4u.cloudfront.net		143.204.165.47	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:10.462637901 CET	1.1.1.1	192.168.2.4	0x2c95	No error (0)	d34gxaszg70o4u.cloudfront.net		143.204.165.15	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:10.462881088 CET	1.1.1.1	192.168.2.4	0x1261	No error (0)	app.posthog.com	d34gxaszg70o4u.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:11.129030943 CET	1.1.1.1	192.168.2.4	0x1037	No error (0)	app.posthog.com	d34gxaszg70o4u.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:11.129030943 CET	1.1.1.1	192.168.2.4	0x1037	No error (0)	d34gxaszg70o4u.cloudfront.net		143.204.165.47	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.129030943 CET	1.1.1.1	192.168.2.4	0x1037	No error (0)	d34gxaszg70o4u.cloudfront.net		143.204.165.15	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.129030943 CET	1.1.1.1	192.168.2.4	0x1037	No error (0)	d34gxaszg70o4u.cloudfront.net		143.204.165.57	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.129030943 CET	1.1.1.1	192.168.2.4	0x1037	No error (0)	d34gxaszg70o4u.cloudfront.net		143.204.165.16	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.129698992 CET	1.1.1.1	192.168.2.4	0x9945	No error (0)	app.posthog.com	d34gxaszg70o4u.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:11.141720057 CET	1.1.1.1	192.168.2.4	0x131f	No error (0)	api.wavebrowser.co		3.210.52.109	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.141720057 CET	1.1.1.1	192.168.2.4	0x131f	No error (0)	api.wavebrowser.co		3.228.69.56	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.141720057 CET	1.1.1.1	192.168.2.4	0x131f	No error (0)	api.wavebrowser.co		34.205.245.225	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.141720057 CET	1.1.1.1	192.168.2.4	0x131f	No error (0)	api.wavebrowser.co		3.219.198.197	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.141720057 CET	1.1.1.1	192.168.2.4	0x131f	No error (0)	api.wavebrowser.co		3.222.67.5	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.141720057 CET	1.1.1.1	192.168.2.4	0x131f	No error (0)	api.wavebrowser.co		35.174.30.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.165888071 CET	1.1.1.1	192.168.2.4	0x3ddd	No error (0)	api.wavebrowserbase.com		3.219.198.197	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.165888071 CET	1.1.1.1	192.168.2.4	0x3ddd	No error (0)	api.wavebrowserbase.com		3.222.67.5	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.165888071 CET	1.1.1.1	192.168.2.4	0x3ddd	No error (0)	api.wavebrowserbase.com		3.210.52.109	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.165888071 CET	1.1.1.1	192.168.2.4	0x3ddd	No error (0)	api.wavebrowserbase.com		3.228.69.56	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.165888071 CET	1.1.1.1	192.168.2.4	0x3ddd	No error (0)	api.wavebrowserbase.com		34.205.245.225	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:11.165888071 CET	1.1.1.1	192.168.2.4	0x3ddd	No error (0)	api.wavebrowserbase.com		35.174.30.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.256390095 CET	1.1.1.1	192.168.2.4	0x2b27	No error (0)	api.mywavehome.net		3.210.52.109	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.256390095 CET	1.1.1.1	192.168.2.4	0x2b27	No error (0)	api.mywavehome.net		35.174.30.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.256390095 CET	1.1.1.1	192.168.2.4	0x2b27	No error (0)	api.mywavehome.net		3.219.198.197	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.256390095 CET	1.1.1.1	192.168.2.4	0x2b27	No error (0)	api.mywavehome.net		3.228.69.56	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.256390095 CET	1.1.1.1	192.168.2.4	0x2b27	No error (0)	api.mywavehome.net		34.205.245.225	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.256390095 CET	1.1.1.1	192.168.2.4	0x2b27	No error (0)	api.mywavehome.net		3.222.67.5	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.435050011 CET	1.1.1.1	192.168.2.4	0x8171	No error (0)	convertwithwave.com		3.210.148.248	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.435050011 CET	1.1.1.1	192.168.2.4	0x8171	No error (0)	convertwithwave.com		3.94.63.35	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.435050011 CET	1.1.1.1	192.168.2.4	0x8171	No error (0)	convertwithwave.com		54.243.57.60	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.435050011 CET	1.1.1.1	192.168.2.4	0x8171	No error (0)	convertwithwave.com		3.208.197.70	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.435050011 CET	1.1.1.1	192.168.2.4	0x8171	No error (0)	convertwithwave.com		52.71.206.190	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.435050011 CET	1.1.1.1	192.168.2.4	0x8171	No error (0)	convertwithwave.com		3.218.35.121	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.574475050 CET	1.1.1.1	192.168.2.4	0xdbf2	No error (0)	adservice.google.com		142.251.116.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.574475050 CET	1.1.1.1	192.168.2.4	0xdbf2	No error (0)	adservice.google.com		142.251.116.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.574475050 CET	1.1.1.1	192.168.2.4	0xdbf2	No error (0)	adservice.google.com		142.251.116.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.574475050 CET	1.1.1.1	192.168.2.4	0xdbf2	No error (0)	adservice.google.com		142.251.116.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.575536013 CET	1.1.1.1	192.168.2.4	0xc466	No error (0)	adservice.google.com			65	IN (0x0001)	false
Dec 28, 2023 17:23:12.578947067 CET	1.1.1.1	192.168.2.4	0x1c79	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 28, 2023 17:23:12.578959942 CET	1.1.1.1	192.168.2.4	0xae0f	No error (0)	www.google.com		142.250.115.147	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.578959942 CET	1.1.1.1	192.168.2.4	0xae0f	No error (0)	www.google.com		142.250.115.105	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.578959942 CET	1.1.1.1	192.168.2.4	0xae0f	No error (0)	www.google.com		142.250.115.106	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.578959942 CET	1.1.1.1	192.168.2.4	0xae0f	No error (0)	www.google.com		142.250.115.104	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.578959942 CET	1.1.1.1	192.168.2.4	0xae0f	No error (0)	www.google.com		142.250.115.99	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.578959942 CET	1.1.1.1	192.168.2.4	0xae0f	No error (0)	www.google.com		142.250.115.103	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.634140015 CET	1.1.1.1	192.168.2.4	0xa29a	No error (0)	td.doubleclick.net		142.250.138.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.634140015 CET	1.1.1.1	192.168.2.4	0xa29a	No error (0)	td.doubleclick.net		142.250.138.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.634140015 CET	1.1.1.1	192.168.2.4	0xa29a	No error (0)	td.doubleclick.net		142.250.138.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.634140015 CET	1.1.1.1	192.168.2.4	0xa29a	No error (0)	td.doubleclick.net		142.250.138.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.799078941 CET	1.1.1.1	192.168.2.4	0xb375	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:12.799078941 CET	1.1.1.1	192.168.2.4	0xb375	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.799078941 CET	1.1.1.1	192.168.2.4	0xb375	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.799078941 CET	1.1.1.1	192.168.2.4	0xb375	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.799078941 CET	1.1.1.1	192.168.2.4	0xb375	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.799866915 CET	1.1.1.1	192.168.2.4	0x18e7	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:12.803468943 CET	1.1.1.1	192.168.2.4	0xfdf5	No error (0)	stats.g.doubleclick.net		142.250.114.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.803468943 CET	1.1.1.1	192.168.2.4	0xfdf5	No error (0)	stats.g.doubleclick.net		142.250.114.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.803468943 CET	1.1.1.1	192.168.2.4	0xfdf5	No error (0)	stats.g.doubleclick.net		142.250.114.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.803468943 CET	1.1.1.1	192.168.2.4	0xfdf5	No error (0)	stats.g.doubleclick.net		142.250.114.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.893599033 CET	1.1.1.1	192.168.2.4	0x5bcf	No error (0)	api.wavebrowserbase.com		3.228.69.56	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.893599033 CET	1.1.1.1	192.168.2.4	0x5bcf	No error (0)	api.wavebrowserbase.com		34.205.245.225	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.893599033 CET	1.1.1.1	192.168.2.4	0x5bcf	No error (0)	api.wavebrowserbase.com		3.219.198.197	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.893599033 CET	1.1.1.1	192.168.2.4	0x5bcf	No error (0)	api.wavebrowserbase.com		35.174.30.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.893599033 CET	1.1.1.1	192.168.2.4	0x5bcf	No error (0)	api.wavebrowserbase.com		3.222.67.5	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:12.893599033 CET	1.1.1.1	192.168.2.4	0x5bcf	No error (0)	api.wavebrowserbase.com		3.210.52.109	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:13.090557098 CET	1.1.1.1	192.168.2.4	0x5b45	No error (0)	api.mywavehome.net		3.222.67.5	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:13.090557098 CET	1.1.1.1	192.168.2.4	0x5b45	No error (0)	api.mywavehome.net		3.210.52.109	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:13.090557098 CET	1.1.1.1	192.168.2.4	0x5b45	No error (0)	api.mywavehome.net		34.205.245.225	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:13.090557098 CET	1.1.1.1	192.168.2.4	0x5b45	No error (0)	api.mywavehome.net		35.174.30.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:13.090557098 CET	1.1.1.1	192.168.2.4	0x5b45	No error (0)	api.mywavehome.net		3.228.69.56	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:13.090557098 CET	1.1.1.1	192.168.2.4	0x5b45	No error (0)	api.mywavehome.net		3.219.198.197	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:13.618815899 CET	1.1.1.1	192.168.2.4	0xec4e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Dec 28, 2023 17:23:13.619319916 CET	1.1.1.1	192.168.2.4	0xa2b0	No error (0)	googleads.g.doubleclick.net		142.251.116.154	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:13.619319916 CET	1.1.1.1	192.168.2.4	0xa2b0	No error (0)	googleads.g.doubleclick.net		142.251.116.156	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:13.619319916 CET	1.1.1.1	192.168.2.4	0xa2b0	No error (0)	googleads.g.doubleclick.net		142.251.116.155	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:13.619319916 CET	1.1.1.1	192.168.2.4	0xa2b0	No error (0)	googleads.g.doubleclick.net		142.251.116.157	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:15.927084923 CET	1.1.1.1	192.168.2.4	0xa7f1	No error (0)	app.termly.io			65	IN (0x0001)	false
Dec 28, 2023 17:23:15.927129030 CET	1.1.1.1	192.168.2.4	0xeb82	No error (0)	app.termly.io		104.18.31.234	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:15.927129030 CET	1.1.1.1	192.168.2.4	0xeb82	No error (0)	app.termly.io		104.18.30.234	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:18.055401087 CET	1.1.1.1	192.168.2.4	0xe25a	No error (0)	app.termly.io		104.18.30.234	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:18.055401087 CET	1.1.1.1	192.168.2.4	0xe25a	No error (0)	app.termly.io		104.18.31.234	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:18.056441069 CET	1.1.1.1	192.168.2.4	0x86c3	No error (0)	app.termly.io			65	IN (0x0001)	false
Dec 28, 2023 17:23:25.675870895 CET	1.1.1.1	192.168.2.4	0x4c84	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:25.675870895 CET	1.1.1.1	192.168.2.4	0x4c84	No error (0)	clients.l.google.com		142.250.115.101	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:25.675870895 CET	1.1.1.1	192.168.2.4	0x4c84	No error (0)	clients.l.google.com		142.250.115.113	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:25.675870895 CET	1.1.1.1	192.168.2.4	0x4c84	No error (0)	clients.l.google.com		142.250.115.100	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:25.675870895 CET	1.1.1.1	192.168.2.4	0x4c84	No error (0)	clients.l.google.com		142.250.115.102	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:25.675870895 CET	1.1.1.1	192.168.2.4	0x4c84	No error (0)	clients.l.google.com		142.250.115.139	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:25.675870895 CET	1.1.1.1	192.168.2.4	0x4c84	No error (0)	clients.l.google.com		142.250.115.138	A (IP address)	IN (0x0001)	false
Dec 28, 2023 17:23:25.677028894 CET	1.1.1.1	192.168.2.4	0xf17c	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:38.613315105 CET	1.1.1.1	192.168.2.4	0x142c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 28, 2023 17:23:38.613315105 CET	1.1.1.1	192.168.2.4	0x142c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	142.250.113.100	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:21:57 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:21:57 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-qRQ7ew63oN2gb1SX1UjX_g' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 28 Dec 2023 16:21:57 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6205 X-Daystart: 30117 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:21:57 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 30 35 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 30 31 31 37 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6205" elapsed_seconds="30117"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-12-28 16:21:57 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-12-28 16:21:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	142.250.138.84	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:21:57 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:21:57 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-12-28 16:21:57 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 28 Dec 2023 16:21:57 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-d59BLErqc2ueeLoBgsxjWA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:21:57 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-12-28 16:21:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49734	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:21:58 UTC	717	OUT	GET /file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe HTTP/1.1 Host: classicshell.mediafire.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:21:58 UTC	796	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:21:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; expires=Mon, 28-Dec-2043 16:21:58 GMT; Max-Age=631152000; path=/; domain=.mediafire.com; HttpOnly Strict-Transport-Security: max-age=0 Location: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; path=/; expires=Thu, 28-Dec-23 16:51:58 GMT; domain=.mediafire.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 83cb23b19f2f699c-DFW
2023-12-28 16:21:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49735	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:21:59 UTC	910	OUT	GET /file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe HTTP/1.1 Host: www.mediafire.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=
2023-12-28 16:21:59 UTC	984	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:21:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb23b5ed942cae-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0 Expires: 0 Set-Cookie: d5v3=1; expires=Sun, 31-Dec-2023 16:21:59 GMT; Max-Age=259200; path=/; domain=.mediafire.com; HttpOnly Strict-Transport-Security: max-age=0 Vary: Accept-Encoding Pragma: no-cache Set-Cookie: conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; expires=Sat, 27-Jan-2024 16:21:59 GMT; Max-Age=2592000; path=/; domain=.mediafire.com X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow Server: cloudflare
2023-12-28 16:21:59 UTC	385	IN	Data Raw: 31 65 39 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 Data Ascii: 1e9d<!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8"/> <meta http-equiv="x-ua-compatible" content="ie=edge"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>ClassicShellSetu
2023-12-28 16:21:59 UTC	1369	IN	Data Raw: 2c 20 73 68 61 72 65 20 46 69 6c 65 73 2c 20 70 68 6f 74 6f 20 62 61 63 6b 75 70 2c 20 70 68 6f 74 6f 20 73 68 61 72 69 6e 67 2c 20 66 74 70 20 72 65 70 6c 61 63 65 6d 65 6e 74 2c 20 63 72 6f 73 73 20 70 6c 61 74 66 6f 72 6d 2c 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 2c 20 6d 6f 62 69 6c 65 20 61 63 63 65 73 73 2c 20 73 65 6e 64 20 6c 61 72 67 65 20 66 69 6c 65 73 2c 20 72 65 63 6f 76 65 72 20 66 69 6c 65 73 2c 20 66 69 6c 65 20 76 65 72 73 69 6f 6e 69 6e 67 2c 20 75 6e 64 65 6c 65 74 65 2c 20 57 69 6e 64 6f 77 73 2c 20 50 43 2c 20 4d 61 63 2c 20 4f 53 20 58 2c 20 4c 69 6e 75 78 2c 20 69 50 68 6f 6e 65 2c 20 69 50 61 64 2c 20 41 6e 64 72 6f 69 64 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e Data Ascii: , share Files, photo backup, photo sharing, ftp replacement, cross platform, remote access, mobile access, send large files, recover files, file versioning, undelete, Windows, PC, Mac, OS X, Linux, iPhone, iPad, Android"/> <meta name="description" con
2023-12-28 16:21:59 UTC	1369	IN	Data Raw: 5f 69 6d 61 67 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 4d 65 64 69 61 46 69 72 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 2f 66 69 6c 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 Data Ascii: _image"/> <meta name="twitter:site" content="@MediaFire"/> <meta name="twitter:url" content="https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file"/> <meta name="twitter:title" content="ClassicShellSetup_4
2023-12-28 16:21:59 UTC	1369	IN	Data Raw: 37 3b 2d 2d 6d 66 2d 62 6c 61 63 6b 3a 23 30 45 31 31 31 36 3b 2d 2d 6d 66 2d 67 72 61 79 31 3a 23 31 41 31 45 32 38 3b 2d 2d 6d 66 2d 67 72 61 79 32 3a 23 32 32 32 38 33 35 3b 2d 2d 6d 66 2d 67 72 61 79 33 3a 23 33 44 34 32 34 45 3b 2d 2d 6d 66 2d 67 72 61 79 34 3a 23 35 37 35 42 36 35 3b 2d 2d 6d 66 2d 67 72 61 79 35 3a 23 37 32 37 36 37 45 3b 2d 2d 6d 66 2d 67 72 61 79 36 3a 23 38 43 38 46 39 36 3b 2d 2d 6d 66 2d 67 72 61 79 37 3a 23 41 37 41 39 41 45 3b 2d 2d 6d 66 2d 67 72 61 79 38 3a 23 43 31 43 33 43 37 3b 2d 2d 6d 66 2d 67 72 61 79 39 3a 23 44 41 44 45 45 30 3b 2d 2d 6d 66 2d 67 72 61 79 31 30 3a 23 45 39 45 41 45 42 3b 2d 2d 6d 66 2d 67 72 61 79 31 31 3a 23 46 34 46 34 46 35 3b 2d 2d 6d 66 2d 67 72 61 79 31 32 3a 23 46 36 46 36 46 37 3b 2d 2d 6d Data Ascii: 7;--mf-black:#0E1116;--mf-gray1:#1A1E28;--mf-gray2:#222835;--mf-gray3:#3D424E;--mf-gray4:#575B65;--mf-gray5:#72767E;--mf-gray6:#8C8F96;--mf-gray7:#A7A9AE;--mf-gray8:#C1C3C7;--mf-gray9:#DADEE0;--mf-gray10:#E9EAEB;--mf-gray11:#F4F4F5;--mf-gray12:#F6F6F7;--m
2023-12-28 16:21:59 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d Data Ascii: transform:none}[type=reset],[type=submit],button,html [type=button]{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]
2023-12-28 16:21:59 UTC	1369	IN	Data Raw: 67 68 74 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 77 65 69 67 68 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 21 69 6d 70 6f 72 74 61 6e 74 7d 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 30 30 37 30 46 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 66 2d 62 6c 75 65 34 29 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 32 33 36 39 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 66 2d 62 6c 75 65 32 29 7d 75 6c 2c 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 70 2c 66 6f 72 6d 7b 6d 61 72 67 69 6e 3a 30 7d 74 65 78 74 61 72 65 61 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a Data Ascii: ght:normal!important}.font-weight-bold{font-weight:bold!important}a{text-decoration:none;color:#0070F0;color:var(--mf-blue4)}a:hover{color:#002369;color:var(--mf-blue2)}ul,ol{list-style:none;padding:0}p,form{margin:0}textarea{line-height:1.6;border-width:
2023-12-28 16:21:59 UTC	615	IN	Data Raw: 30 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 Data Ascii: 05),rgba(0,0,0,.05));background-image:-moz-linear-gradient(top,rgba(0,0,0,.05),rgba(0,0,0,.05));background-image:-ms-linear-gradient(top,rgba(0,0,0,.05),rgba(0,0,0,.05));background-image:-o-linear-gradient(top,rgba(0,0,0,.05),rgba(0,0,0,.05));background-i
2023-12-28 16:21:59 UTC	1369	IN	Data Raw: 36 31 32 38 0d 0a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 30 38 29 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 30 38 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 30 38 29 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 30 38 29 29 7d 61 2e 67 2d 42 74 6e 2d 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 61 2e 67 2d 42 74 6e 2d 2d 74 65 72 74 69 61 72 79 3a 68 6f 76 65 72 2c 61 2e 67 2d 42 74 6e 2d 2d 61 6c 74 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 61 2e 67 2d 42 74 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 Data Ascii: 6128-linear-gradient(top,rgba(255,255,255,.08),rgba(255,255,255,.08));background-image:linear-gradient(top,rgba(255,255,255,.08),rgba(255,255,255,.08))}a.g-Btn--primary:hover,a.g-Btn--tertiary:hover,a.g-Btn--alt:hover{color:#fff}a.g-Btn--secondary:hover
2023-12-28 16:21:59 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 33 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 23 45 38 45 39 45 43 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 30 20 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 20 75 72 6c 28 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 73 76 67 5f 64 61 72 6b 2f 61 72 72 6f 77 5f 64 72 6f 70 64 6f 77 6e 2e 73 76 67 29 20 72 69 67 68 74 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 63 6f 6c 6f 72 3a 23 32 38 32 46 33 44 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 20 30 20 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 Data Ascii: height:30px;border-radius:0;border:0 solid #E8E9EC;border-width:0 0 1px;background:#fff url(/images/icons/svg_dark/arrow_dropdown.svg) right center no-repeat;color:#282F3D;margin:0;padding:0 20px 0 0;box-sizing:border-box;-webkit-appearance:none;-moz-appe
2023-12-28 16:21:59 UTC	1369	IN	Data Raw: 64 3a 23 66 66 66 3b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 2c 30 70 78 20 31 70 78 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 2c 69 6e 73 65 74 20 30 20 31 70 78 20 30 20 30 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 32 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 2c 30 70 78 20 31 70 78 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 2c 69 6e 73 65 74 20 30 20 31 70 78 Data Ascii: d:#fff;width:12px;height:12px;position:absolute;-moz-box-shadow:0px 0px 0px 1px rgba(0,0,0,.05),0px 1px 5px 0 rgba(0,0,0,0.2),inset 0 1px 0 0 rgba(255,255,255,.2);-webkit-box-shadow:0px 0px 0px 1px rgba(0,0,0,.05),0px 1px 5px 0 rgba(0,0,0,0.2),inset 0 1px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49738	104.21.28.48	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:00 UTC	536	OUT	GET /cmp.min.js HTTP/1.1 Host: the.gatekeeperconsent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:00 UTC	759	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:00 GMT Content-Type: application/javascript Content-Length: 1109 Connection: close Cache-Control: public, max-age=14400 Vary: Accept-Encoding X-Middleton-Display: sol-js X-Robots-Tag: noindex Last-Modified: Thu, 28 Dec 2023 16:15:28 GMT CF-Cache-Status: HIT Age: 202 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SLkB7HF9zNw6AYnlJQSNmLRlhBoPDGNbhxoenDvxsG5p24jmo3Uw8KlDzahudiclgB1iQ2VQw%2FVJcRcu6LVDj8KRF0aX5QnnLSRl8ho3D7B1epCuIrvtzrkiOLr3GCmbgEyNzmd6zT3XH57W"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23bb9935316b-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:00 UTC	610	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 65 74 55 72 6c 50 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 61 72 61 6d 3d 22 3f 66 6f 72 63 65 5f 72 65 67 75 6c 61 74 69 6f 6e 73 22 3b 76 61 72 20 75 72 6c 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 76 61 72 20 72 65 73 75 6c 74 73 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 70 61 72 61 6d 2b 22 3d 28 5b 5e 26 23 5d 2a 29 22 29 2e 65 78 65 63 28 75 72 6c 29 3b 69 66 28 72 65 73 75 6c 74 73 3d 3d 6e 75 6c 6c 29 7b 72 65 74 75 72 6e 20 22 22 3b 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 28 72 65 73 75 6c 74 73 5b 30 5d 29 7c 7c 22 22 3b 7d 7d 3b 76 61 72 20 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 Data Ascii: (function(){var getUrlParam=function(){var param="?force_regulations";var url=document.location.href;var results=new RegExp("[?&]"+param+"=([^&#]*)").exec(url);if(results==null){return "";}else{return decodeURI(results[0])\|\|"";}};var xhr=new XMLHttpReques
2023-12-28 16:22:00 UTC	499	IN	Data Raw: 61 64 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 3b 65 7a 48 65 61 64 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 7a 43 6d 70 53 63 72 69 70 74 2c 65 7a 48 65 61 64 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 7d 7d 7d 65 6c 73 65 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 3a 20 22 2b 78 68 72 2e 73 74 61 74 75 73 29 3b 7d 7d 3b 78 68 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 3a 20 63 6f 6e 73 65 6e 74 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 3a 22 2c 65 72 72 6f 72 29 3b 7d 3b 78 68 72 2e 73 65 6e 64 28 29 3b 7d 29 28 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 73 65 74 43 4d 50 76 Data Ascii: ad=document.getElementsByTagName("head")[0];ezHead.insertBefore(ezCmpScript,ezHead.firstChild);}}}else{console.error("Error: "+xhr.status);}};xhr.onerror=function(){console.error("Error: consent request failed:",error);};xhr.send();})();function __setCMPv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:00 UTC	1128	OUT	GET /images/icons/svg_dark/arrow_dropdown.svg HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:00 UTC	353	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:00 GMT Content-Type: image/svg+xml Content-Length: 315 Connection: close CF-Ray: 83cb23bf2a24eac5-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 9430 ETag: "62deda56-13b" Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT Vary: Accept-Encoding Server: cloudflare
2023-12-28 16:22:00 UTC	315	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	104.22.75.216	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:00 UTC	546	OUT	GET /tag?o=5678961798414336&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:01 UTC	447	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:00 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: W/"6beabecd088580e4d3efbe461e2527e2" Last-Modified: Thu, 28 Dec 2023 15:50:06 GMT Vary: Origin Via: 1.1 google CF-Cache-Status: HIT Age: 1818 Server: cloudflare CF-RAY: 83cb23bfda38e813-DFW
2023-12-28 16:22:01 UTC	922	IN	Data Raw: 37 64 65 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 73 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 Data Ascii: 7de0!function(){"use strict";var e=function(){return e=Object.assign\|\|function(e){for(var t,n=1,s=arguments.length;n<s;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e},e.apply(this,arguments)};function t(e
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 6f 77 7c 7c 28 28 72 3d 73 2e 72 65 74 75 72 6e 29 26 26 72 2e 63 61 6c 6c 28 73 29 2c 30 29 3a 73 2e 6e 65 78 74 29 26 26 21 28 72 3d 72 2e 63 61 6c 6c 28 73 2c 69 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 72 3b 73 77 69 74 63 68 28 73 3d 30 2c 72 26 26 28 69 3d 5b 32 26 69 5b 30 5d 2c 72 2e 76 61 6c 75 65 5d 29 2c 69 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 72 3d 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6f 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 69 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 6f 2e 6c 61 62 65 6c 2b 2b 2c 73 3d 69 5b 31 5d 2c 69 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 69 3d 6f 2e 6f 70 73 2e 70 6f 70 28 29 2c 6f 2e 74 72 79 73 2e 70 6f 70 Data Ascii: ow\|\|((r=s.return)&&r.call(s),0):s.next)&&!(r=r.call(s,i[1])).done)return r;switch(s=0,r&&(i=[2&i[0],r.value]),i[0]){case 0:case 1:r=i;break;case 4:return o.label++,{value:i[1],done:!1};case 5:o.label++,s=i[1],i=[0];continue;case 7:i=o.ops.pop(),o.trys.pop
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 61 2c 63 3b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 2e 74 72 79 73 2e 70 75 73 68 28 5b 30 2c 33 2c 2c 34 5d 29 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 3d 77 69 6e 64 6f 77 2e 5f 5f 62 74 7c 7c 7b 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 3f 5b 33 2c 32 5d 3a 5b 34 2c 77 69 6e 64 6f 77 2e 5f 5f 62 74 2e 63 75 73 74 6f 6d 44 65 74 65 63 74 41 64 42 6c 6f 63 6b 28 29 5d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 5b 32 2c 6e 2e 73 65 Data Ascii: void 0,(function(){var e,t,i,a,c;return n(this,(function(n){switch(n.label){case 0:return n.trys.push([0,3,,4]),window.__bt=window.__bt\|\|{},"function"!=typeof window.__bt.customDetectAdBlock?[3,2]:[4,window.__bt.customDetectAdBlock()];case 1:return[2,n.se
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 3b 74 72 79 7b 69 66 28 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 6f 70 7d 63 61 74 63 68 28 65 29 7b 7d 74 72 79 7b 66 6f 72 28 3b 65 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 3b 29 65 3d 65 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 22 22 21 3d 3d Data Ascii: ))}))}function l(e){(window.document.body\|\|window.document.documentElement).removeChild(e)}var u=function(){var e=window;try{if(top.document)return top}catch(e){}try{for(;e.parent.document;)e=e.parent}catch(e){}return e}();var d=function(){try{return""!==
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 6f 72 3b 66 6f 72 28 76 61 72 20 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 6e 2b 31 2d 74 29 29 2b 74 2c 72 3d 22 22 2c 69 3d 30 3b 69 3c 73 3b 69 2b 2b 29 72 2b 3d 65 2e 63 68 61 72 41 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 65 2e 6c 65 6e 67 74 68 29 29 3b 72 65 74 75 72 6e 20 72 7d 28 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 22 2c 65 2c 74 29 7d 79 3d 22 35 36 37 38 39 36 31 37 39 38 34 31 34 33 33 36 22 2c 49 3d 22 62 74 6c 6f 61 64 65 72 2e 63 6f 6d 22 2c 5f 3d 22 61 70 69 2e 62 74 6c 6f 61 64 65 72 2e 63 6f 6d 22 2c 45 3d Data Ascii: or;for(var s=Math.floor(Math.random()(n+1-t))+t,r="",i=0;i<s;i++)r+=e.charAt(Math.floor(Math.random()e.length));return r}("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",e,t)}y="5678961798414336",I="btloader.com",_="api.btloader.com",E=
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 6c 6f 67 28 22 45 72 72 6f 72 20 69 6e 20 63 75 73 74 6f 6d 44 65 74 65 63 74 44 6f 6d 61 69 6e 3a 22 2c 65 29 7d 7d 28 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 70 2e 68 6f 73 74 6e 61 6d 65 3b 74 72 79 7b 69 66 28 22 64 69 73 71 75 73 73 65 72 76 69 63 65 2e 63 6f 6d 22 3d 3d 3d 74 29 7b 76 61 72 20 6e 3d 75 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 74 3d 28 6e 75 6c 6c 21 3d 28 65 3d 68 28 22 73 6f 75 72 63 65 55 72 6c 22 2c 6e 29 2e 6d 61 74 63 68 28 2f 3a 5c 2f 5c 2f 28 77 77 77 5b 30 2d 39 5d 3f 5c 2e 29 3f 28 2e 5b 5e 2f 3a 5d 2b 29 2f 69 29 29 26 26 65 2e 6c 65 6e 67 74 68 3e 32 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 5b 32 5d 26 26 65 5b 32 5d 2e 6c 65 6e 67 74 68 3e 30 3f 65 5b 32 5d 3a 6e 75 6c 6c Data Ascii: log("Error in customDetectDomain:",e)}}()\|\|function(){var e,t=p.hostname;try{if("disqusservice.com"===t){var n=u.location.href;t=(null!=(e=h("sourceUrl",n).match(/:\/\/(www[0-9]?\.)?(.[^/:]+)/i))&&e.length>2&&"string"==typeof e[2]&&e[2].length>0?e[2]:null
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 21 3d 3d 28 63 3d 53 2e 63 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 63 3f 63 3a 53 2e 63 6f 6e 74 65 6e 74 5f 65 6e 61 62 6c 65 64 2c 74 2e 6d 6f 62 69 6c 65 43 6f 6e 74 65 6e 74 45 6e 61 62 6c 65 64 3d 6e 75 6c 6c 21 3d 3d 28 6c 3d 53 2e 6d 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6c 3f 6c 3a 53 2e 6d 6f 62 69 6c 65 5f 63 6f 6e 74 65 6e 74 5f 65 6e 61 62 6c 65 64 2c 74 2e 77 69 64 67 65 74 3d 6e 75 6c 6c 21 3d 3d 28 64 3d 53 2e 77 69 64 67 65 74 29 26 26 76 6f 69 64 20 30 21 3d 3d 64 26 26 64 29 3b 69 66 28 6d 29 72 65 74 75 72 6e 5b 32 2c 7b 73 69 74 65 49 6e 66 6f 3a 74 7d 5d 3b 69 66 28 62 28 31 29 29 7b 69 66 28 43 3d 7b 64 6f 6d 61 69 6e 3a 67 2c 6f 72 67 49 44 3a 70 61 72 73 65 49 6e 74 28 79 29 7d 2c 41 3d 76 6f 69 64 20 30 2c 77 69 6e 64 6f 77 2e 54 Data Ascii: !==(c=S.ce)&&void 0!==c?c:S.content_enabled,t.mobileContentEnabled=null!==(l=S.me)&&void 0!==l?l:S.mobile_content_enabled,t.widget=null!==(d=S.widget)&&void 0!==d&&d);if(m)return[2,{siteInfo:t}];if(b(1)){if(C={domain:g,orgID:parseInt(y)},A=void 0,window.T
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2d 5f 22 3b 73 74 61 74 69 63 20 52 45 56 45 52 53 45 5f 44 49 43 54 3d 6e 65 77 20 4d 61 70 28 5b 5b 22 41 22 2c 30 5d 2c 5b 22 42 22 2c 31 5d 2c 5b 22 43 22 2c 32 5d 2c 5b 22 44 22 2c 33 5d 2c 5b 22 45 22 2c 34 5d 2c 5b 22 46 22 2c 35 5d 2c 5b 22 47 22 2c 36 5d 2c 5b 22 48 22 2c 37 5d 2c 5b 22 49 22 2c 38 5d 2c 5b 22 4a 22 2c 39 5d 2c 5b 22 4b 22 2c 31 30 5d 2c 5b 22 4c 22 2c 31 31 5d 2c 5b 22 4d 22 2c 31 32 5d 2c 5b 22 4e 22 2c 31 33 5d 2c 5b 22 4f 22 2c 31 34 5d 2c 5b 22 50 22 2c 31 35 5d 2c 5b 22 51 22 2c 31 36 5d 2c 5b 22 52 22 2c 31 37 5d 2c 5b 22 53 22 2c 31 38 5d 2c 5b 22 54 22 2c 31 39 5d 2c 5b 22 55 22 2c 32 30 Data Ascii: RSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";static REVERSE_DICT=new Map([["A",0],["B",1],["C",2],["D",3],["E",4],["F",5],["G",6],["H",7],["I",8],["J",9],["K",10],["L",11],["M",12],["N",13],["O",14],["P",15],["Q",16],["R",17],["S",18],["T",19],["U",20
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 6c 6c 21 3d 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6c 6f 6e 65 29 72 65 74 75 72 6e 20 65 2e 63 6c 6f 6e 65 28 29 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 29 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 65 2e 67 65 74 54 69 6d 65 28 29 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 7b 63 6f 6e 73 74 20 74 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 65 29 74 2e 70 75 73 68 28 74 68 69 73 2e 64 65 65 70 43 6c 6f 6e 65 28 6e 29 29 3b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 74 3a 6e 65 77 20 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7d 7b Data Ascii: ll!==e&&"object"===t){if("function"==typeof e.clone)return e.clone();if(e instanceof Date)return new Date(e.getTime());if(void 0!==e[Symbol.iterator]){const t=[];for(const n of e)t.push(this.deepClone(n));return e instanceof Array?t:new e.constructor(t)}{
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 2e 76 61 6c 75 65 29 6e 3d 74 2c 74 3d 74 2e 6c 65 66 74 2c 73 3d 22 6c 65 66 74 22 3b 65 6c 73 65 20 69 66 28 65 3e 74 2e 76 61 6c 75 65 29 6e 3d 74 2c 74 3d 74 2e 72 69 67 68 74 2c 73 3d 22 72 69 67 68 74 22 3b 65 6c 73 65 7b 69 66 28 74 2e 6c 65 66 74 7c 7c 74 2e 72 69 67 68 74 29 69 66 28 74 2e 6c 65 66 74 29 69 66 28 74 2e 72 69 67 68 74 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 6d 69 6e 28 74 2e 72 69 67 68 74 29 3b 74 68 69 73 2e 72 65 6d 6f 76 65 28 65 2c 74 2e 72 69 67 68 74 29 2c 74 2e 76 61 6c 75 65 3d 65 7d 65 6c 73 65 20 6e 3f 6e 5b 73 5d 3d 74 2e 6c 65 66 74 3a 74 68 69 73 2e 72 6f 6f 74 3d 74 2e 6c 65 66 74 3b 65 6c 73 65 20 6e 3f 6e 5b 73 5d 3d 74 2e 72 69 67 68 74 3a 74 68 69 73 2e 72 6f 6f 74 3d 74 2e 72 69 67 68 74 3b 65 6c 73 65 20 Data Ascii: .value)n=t,t=t.left,s="left";else if(e>t.value)n=t,t=t.right,s="right";else{if(t.left\|\|t.right)if(t.left)if(t.right){const e=this.min(t.right);this.remove(e,t.right),t.value=e}else n?n[s]=t.left:this.root=t.left;else n?n[s]=t.right:this.root=t.right;else

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	104.21.28.48	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:00 UTC	581	OUT	GET /consent_modules.json HTTP/1.1 Host: privacy.gatekeeperconsent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:01 UTC	644	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:00 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=15780000, public Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RX91o5V%2BIemkMEeuaEqrWkXrbG9w2ajjfw428l3%2Bv4ucgO%2FM7GiLZoyj%2BM2A5x4fj1icVOvlSEQvAz41ejN8hRVuJC9gZn79E47McEH5OjHLuWHbtMyA9YPxHbIt5RQr%2B87g43Xi4v1HvSkZSGUB6g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23bfdb1fe853-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:01 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	104.16.56.101	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:00 UTC	622	OUT	GET /beacon.min.js/v84a3a4012de94ce1a686ba8c167c359c1696973893317 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mediafire.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:01 UTC	374	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19986 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2023.10.0" Last-Modified: Tue, 10 Oct 2023 21:38:13 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 83cb23c03884477c-DFW
2023-12-28 16:22:01 UTC	995	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 29 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 Data Ascii: );if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=ar
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 3b 69 66 28 67 29 74 72 79 7b 6d 3d 72 28 72 28 7b 7d 2c 6d 29 2c 4a 53 4f 4e 2e 70 61 72 73 65 28 67 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 65 6c 73 65 7b 76 61 72 20 79 3d 6c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3b 69 66 28 79 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 68 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 79 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 54 3d 68 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 54 26 26 28 6d 2e 74 6f 6b 65 6e 3d 54 29 3b 76 61 72 20 77 3d 68 2e 67 65 74 28 22 73 70 61 22 29 3b 6d 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 77 7c 7c 22 74 72 75 65 22 3d 3d 3d 77 7d 7d Data Ascii: ;if(g)try{m=r(r({},m),JSON.parse(g))}catch(e){}else{var y=l.getAttribute("src");if(y&&"function"==typeof URLSearchParams){var h=new URLSearchParams(y.replace(/^[^\?]+\??/,"")),T=h.get("token");T&&(m.token=T);var w=h.get("spa");m.spa=null===w\|\|"true"===w}}
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 65 72 72 65 72 3a 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 22 22 2c 63 3d 70 5b 70 2e 6c 65 6e 67 74 68 2d 31 5d 2c 4c 26 26 53 26 26 63 3f 63 2e 75 72 6c 3a 61 29 2c 65 76 65 6e 74 54 79 70 65 3a 69 2e 45 76 65 6e 74 54 79 70 65 2e 4c 6f 61 64 2c 66 69 72 73 74 50 61 69 6e 74 3a 30 2c 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3a 30 2c 73 74 61 72 74 54 69 6d 65 3a 78 28 29 2c 76 65 72 73 69 6f 6e 73 3a 7b 66 6c 3a 6d 3f 6d 2e 76 65 72 73 69 6f 6e 3a 22 22 2c 6a 73 3a 22 32 30 32 33 2e 31 30 2e 30 22 2c 74 69 6d 69 6e 67 73 3a 31 7d 2c 70 61 67 65 6c 6f 61 64 49 64 3a 76 2c 6c 6f 63 61 74 69 6f 6e 3a 6c 7d 3b 69 66 28 6e 75 6c 6c 3d 3d 75 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 Data Ascii: errer:(a=document.referrer\|\|"",c=p[p.length-1],L&&S&&c?c.url:a),eventType:i.EventType.Load,firstPaint:0,firstContentfulPaint:0,startTime:x(),versions:{fl:m?m.version:"",js:"2023.10.0",timings:1},pageloadId:v,location:l};if(null==u){if("function"==typeof f
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 4e 2e 73 74 72 69 6e 67 69 66 79 28 67 29 2e 6c 65 6e 67 74 68 3e 3d 36 34 65 33 26 26 28 67 2e 72 65 73 6f 75 72 63 65 73 3d 5b 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 75 26 26 28 64 65 6c 65 74 65 20 67 2e 74 69 6d 69 6e 67 73 2c 64 65 6c 65 74 65 20 67 2e 6d 65 6d 6f 72 79 29 2c 67 7d 28 72 29 3b 69 66 28 63 26 26 6d 29 7b 76 61 72 20 73 3d 63 2e 74 65 6d 70 52 65 73 6f 75 72 63 65 73 3b 69 66 28 64 65 6c 65 74 65 20 63 2e 74 65 6d 70 52 65 73 6f 75 72 63 65 73 2c 4c 26 26 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 61 28 5b 5d 2c 30 29 2c 21 73 29 72 65 74 75 72 6e 3b 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 28 65 2c 74 29 7d 29 29 7d 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 Data Ascii: N.stringify(g).length>=64e3&&(g.resources=[]),void 0!==u&&(delete g.timings,delete g.memory),g}(r);if(c&&m){var s=c.tempResources;if(delete c.tempResources,L&&s&&0===s.length&&a([],0),!s)return;s.forEach((function(e,t){a(e,t)}))}},R=function(){var t=funct
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 67 74 68 3e 33 26 26 70 2e 73 68 69 66 74 28 29 7d 3b 4c 26 26 28 73 3d 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 70 75 73 68 53 74 61 74 65 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 3d 63 28 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 26 26 66 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 28 29 7d 3b 74 2e 70 75 73 68 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 2c 61 29 7b 75 3d 65 28 61 29 3b 76 61 72 20 63 3d 65 28 29 2c 73 3d 21 30 3b 72 65 74 75 72 6e 20 75 3d 3d 63 26 26 28 73 3d 21 31 29 2c 73 26 26 28 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 53 3f 76 6f 69 64 20 30 3a 53 2e 75 Data Ascii: gth>3&&p.shift()};L&&(s=e(),function(t){var n=t.pushState;if(n){var r=function(){v=c(),"function"==typeof f.clearResourceTimings&&f.clearResourceTimings()};t.pushState=function(i,o,a){u=e(a);var c=e(),s=!0;return u==c&&(s=!1),s&&(A()&&((null==S?void 0:S.u
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 3a 28 6e 75 6c 6c 3d 3d 62 2e 69 6e 70 7c 7c 4e 75 6d 62 65 72 28 62 2e 69 6e 70 2e 76 61 6c 75 65 29 3c 4e 75 6d 62 65 72 28 65 2e 76 61 6c 75 65 29 29 26 26 28 62 2e 69 6e 70 3d 7b 76 61 6c 75 65 3a 4e 75 6d 62 65 72 28 65 2e 76 61 6c 75 65 29 2c 70 61 74 68 3a 75 7d 2c 28 63 3d 65 2e 61 74 74 72 69 62 75 74 69 6f 6e 29 26 26 62 2e 69 6e 70 26 26 28 62 2e 69 6e 70 2e 65 6c 65 6d 65 6e 74 3d 63 2e 65 76 65 6e 74 54 61 72 67 65 74 2c 62 2e 69 6e 70 2e 6e 61 6d 65 3d 63 2e 65 76 65 6e 74 54 79 70 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 72 65 74 75 72 6e 20 66 2e 74 69 6d 65 4f 72 69 67 69 6e 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 69 66 Data Ascii: ("fetchpriority"));break;case"INP":(null==b.inp\|\|Number(b.inp.value)<Number(e.value))&&(b.inp={value:Number(e.value),path:u},(c=e.attribution)&&b.inp&&(b.inp.element=c.eventTarget,b.inp.name=c.eventType))}}function x(){return f.timeOrigin}function k(e){if
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 3d 3d 73 7c 7c 73 28 6f 2c 6e 65 77 20 42 6c 6f 62 28 5b 75 5d 2c 7b 74 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 29 29 7d 65 6c 73 65 7b 74 2e 73 74 3d 32 2c 75 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 3b 76 61 72 20 66 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 6e 26 26 28 66 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 32 30 34 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 26 26 6e 28 29 7d 29 2c 66 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 6f 2c 21 30 29 2c 66 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a Data Ascii: ==s\|\|s(o,new Blob([u],{type:"application/json"}))}else{t.st=2,u=JSON.stringify(t);var f=new XMLHttpRequest;n&&(f.onreadystatechange=function(){4==this.readyState&&204==this.status&&n()}),f.open("POST",o,!0),f.setRequestHeader("content-type","application/j
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 74 4e 6f 64 65 7d 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 7d 2c 66 3d 2d 31 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 65 72 73 69 73 74 65 64 26 26 28 66 3d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 74 29 29 7d 29 2c 21 30 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 28 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 61 63 74 69 76 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 61 28 29 2c 72 3d 22 6e 61 76 69 67 61 74 65 22 3b 72 65 74 75 72 6e 20 64 28 29 Data Ascii: tNode}}catch(e){}return n},f=-1,d=function(){return f},l=function(e){addEventListener("pageshow",(function(t){t.persisted&&(f=t.timeStamp,e(t))}),!0)},v=function(){var e=a();return e&&e.activationStart\|\|0},p=function(e,t){var n=a(),r="navigate";return d()
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 3d 2d 31 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f 31 2f 30 3a 30 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 68 69 64 64 65 6e 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 77 3e 2d 31 26 26 28 77 3d 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3d 3d 3d 65 2e 74 79 70 65 3f 65 2e 74 69 6d 65 53 74 61 6d 70 3a 30 2c 4c 28 29 29 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 45 2c 21 30 29 2c 61 64 64 Data Ascii: =-1,S=function(){return"hidden"!==document.visibilityState\|\|document.prerendering?1/0:0},E=function(e){"hidden"===document.visibilityState&&w>-1&&(w="visibilitychange"===e.type?e.timeStamp:0,L())},b=function(){addEventListener("visibilitychange",E,!0),add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49745	142.250.113.139	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:00 UTC	852	OUT	GET /translate_a/element.js?cb=googFooterTranslate HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:01 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 28 Dec 2023 16:22:00 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:01 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2023-12-28 16:22:01 UTC	1252	IN	Data Raw: 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e Data Ascii: (Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;},0)};_.ca=function(a){a&&"function"==typeof a.
2023-12-28 16:22:01 UTC	1252	IN	Data Raw: 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b 5f 2e 44 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 43 61 28 29 3f 21 31 3a 5f 2e 76 28 22 4f 70 65 72 61 22 29 7d 3b Data Ascii: \|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};_.Da=function(){return _.Ca()?!1:_.v("Opera")};
2023-12-28 16:22:01 UTC	1252	IN	Data Raw: 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 55 61 2e 61 70 70 6c 79 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 30 3d 3d 3d 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 5f 2e 56 61 28 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 61 5b 30 5d 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2b 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 64 5d 29 2b 61 5b 64 2b 31 5d 3b 72 65 74 75 72 6e 20 5f 2e 56 61 28 63 29 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 72 65 74 75 72 6e 28 61 3d 6e 75 6c 6c 3d 3d 28 63 3d 28 62 3d 61 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 Data Ascii: toLowerCase()===a+":"})};_.Wa=function(a){var b=_.Ua.apply(1,arguments);if(0===b.length)return _.Va(a[0]);for(var c=a[0],d=0;d<b.length;d++)c+=encodeURIComponent(b[d])+a[d+1];return _.Va(c)};_.Xa=function(a){var b,c;return(a=null==(c=(b=a.document).queryS
2023-12-28 16:22:01 UTC	1252	IN	Data Raw: 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 66 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 74 68 69 73 2e 67 3d 66 3b 66 62 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 Data Ascii: {var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&fb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;fb(this,"description",{configurable:!0,writable:!0,valu
2023-12-28 16:22:01 UTC	1252	IN	Data Raw: 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6d 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 6e 65 77 20 63 3b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 63 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 7d 69 66 28 22 75 6e 64 65 Data Ascii: h(b.value);a=c}return a};lb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.mb=function(){function a(){function c(){}new c;Reflect.construct(c,[],function(){});return new c instanceof c}if("unde
2023-12-28 16:22:01 UTC	1252	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 72 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 Data Ascii: ion(){return _.mb});w("Reflect.setPrototypeOf",function(a){return a?a:rb?function(b,c){try{return rb(b,c),!0}catch(d){return!1}}:null});w("Promise",function(a){function b(){this.g=null}function c(g){return g instanceof e?g:new e(function(h){h(g)})}if(a)
2023-12-28 16:22:01 UTC	1252	IN	Data Raw: 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 22 2b 74 68 69 73 2e 67 29 3b 74 68 69 73 2e 67 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 67 26 26 74 68 69 73 2e 4d 28 29 3b 74 68 69 73 2e 44 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 64 28 66 Data Ascii: this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`"+this.g);this.g=g;this.j=h;2===this.g&&this.M();this.D()};e.prototype.M=function(){var g=this;d(f
2023-12-28 16:22:01 UTC	1252	IN	Data Raw: 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 51 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 68 3f 66 2e 68 28 6c 29 3a 0a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: hen(void 0,g)};e.prototype.Qc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null==this.h?f.h(l):this.h.push(l);this.A=!0};e.resolve=c;e.reject=function(g){return new e(function(h
2023-12-28 16:22:01 UTC	1252	IN	Data Raw: 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 Data Ascii: bject[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49747	3.161.239.231	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:00 UTC	580	OUT	GET /libs/amplitude-8.5.0-min.gz.js HTTP/1.1 Host: cdn.amplitude.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mediafire.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:01 UTC	786	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 22154 Connection: close Date: Thu, 28 Dec 2023 16:22:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Fri, 13 Aug 2021 22:37:42 GMT ETag: "660c3b546f2a131de50b69b91f26c636" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Content-Encoding: gzip x-amz-version-id: NY8_7uBz3xoXYJBVsMSBAGHOz8ixMBS3 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 58e001730d8489d18724ad776e42cb62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW57-P7 X-Amz-Cf-Id: hoKI5MNJReo3LCa6z9Qm1-kBtMqP4tahyTvjwZuR1CULFfU-NCXruA==
2023-12-28 16:22:01 UTC	8192	IN	Data Raw: 1f 8b 08 00 2d f4 16 61 00 03 cc 3b 8d 73 e2 b6 f2 ff 8a e3 76 88 5d 14 17 48 9a be 9a a8 0c 49 b8 2b 6d 02 94 8f eb 5d 39 1e e3 80 42 dc 80 c5 d9 72 72 34 f0 bf bf 5d 49 fe e0 23 d7 4e df ef cd fc 66 6e 82 bd 5a af 56 bb ab fd 92 ee c9 0b 0d 6f b1 9c fb 22 9e 32 7a 1f 07 13 e1 f3 c0 b2 5f cc 38 62 46 24 42 7f 22 cc 6a 02 37 84 c5 ec 97 90 89 38 0c 2c 41 cd 04 6e 52 2a 56 4b c6 ef 8d de 6a 71 c7 e7 85 82 19 c9 87 dd 01 c7 17 2c f4 04 0f 6b e9 54 29 41 43 63 b2 8d 7b 60 90 01 cd d7 a7 63 ce 84 07 c0 6d 3c 01 da 94 d2 14 7e 94 3c 3b cb 90 0b 8e 9f d5 12 de dc 74 42 1b 26 da a4 8b f4 2d 46 84 fd 72 cf 43 eb 09 c4 13 d0 52 35 b8 10 ce 9c 05 33 f1 50 0d 8a 45 fb 05 e1 3e 15 c3 60 54 f5 1d 16 c4 0b 58 d5 dd 9c d1 fc cb 7a 7d 54 26 3e 32 76 ef cf 62 35 7e 54 22 Data Ascii: -a;sv]HI+m]9Brr4]I#NfnZVo"2z_8bF$B"j78,AnR*VKjq,kT)ACc{`cm<~<;tB&-FrCR53PE>`TXz}T&>2vb5~T"
2023-12-28 16:22:01 UTC	13962	IN	Data Raw: ab 14 73 23 f8 a6 94 66 5e cc ae b6 11 c0 ba 23 0c 72 6d 47 1d 61 c7 c1 56 76 86 fe 8e bc e7 36 33 98 54 51 41 7f 79 97 d9 c3 87 b9 b4 f0 d7 61 f7 ab e7 66 d5 43 68 fe 4c 6e 65 f6 70 92 21 bb c8 fd 28 84 45 c7 71 bc 60 f8 47 0e 8f 66 81 ef 6c 98 e9 b0 12 05 4e 40 2f 25 83 a0 c0 8d d0 7a ae c8 a8 c6 b7 9d be d2 3a 13 db 5d 08 92 14 a3 dd 58 c0 22 3d 23 d3 69 cc 51 35 bc 6c 46 ee 9e 66 53 8a 18 6d 8c 53 9d fd 30 c6 d9 14 b9 0a 2f 72 e2 35 9d 14 26 30 e9 13 33 11 67 c3 a9 fc 15 95 e3 62 70 bd f4 a3 12 4e dc b7 9d 41 71 3b fb 50 71 11 3c fa 5a 37 be c1 30 45 1d 6e e0 5f a1 c5 8d 32 bc 2c a3 ba 1c 85 4d 34 06 4e 58 c3 01 fb 49 5c 24 e8 34 b3 37 af 93 e8 be 30 dc e6 fb a4 1d d7 a7 ae 84 30 4f 3b 48 c4 f1 ff 79 71 2a a3 70 d3 a8 7a 5e 0f d6 ca 0c ef 8f 78 fe b8 Data Ascii: s#f^#rmGaVv63TQAyafChLnep!(Eq`GflN@/%z:]X"=#iQ5lFfSmS0/r5&03gbpNAq;Pq<Z70En_2,M4NXI\$4700O;Hyq*pz^x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:00 UTC	1085	OUT	GET /images/icons/svg_dark/check_circle_green.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:00 GMT Content-Type: image/svg+xml Content-Length: 444 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1bc" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 7607 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23bffad7e595-DFW
2023-12-28 16:22:01 UTC	444	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49748	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:00 UTC	1088	OUT	GET /images/backgrounds/download/social/fb_16x16.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	397	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:00 GMT Content-Type: image/png Content-Length: 181 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-b5" Expires: Sat, 27 Jan 2024 12:23:43 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 7797 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23bff8f46b76-DFW
2023-12-28 16:22:01 UTC	181	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 04 03 00 00 00 ed dd e2 52 00 00 00 30 50 4c 54 45 3c 5a 98 ff ff ff 6d 84 b3 55 6f a6 9e ad cc ce d6 e5 aa b7 d2 b6 c2 d9 6d 83 b2 b6 c1 d8 f3 f5 f9 54 6f a5 61 79 ab 85 98 bf 91 a2 c5 da e0 ec 6f 35 67 c2 00 00 00 40 49 44 41 54 08 5b 63 60 c0 0e 9e 86 41 68 36 41 51 08 83 4b de 17 c2 60 14 81 d0 dc 8d 92 3d 60 06 8b 20 54 0d 9c 01 57 83 c6 60 36 36 36 36 14 33 36 60 60 52 52 52 52 14 57 52 40 30 60 00 00 b4 96 06 e3 34 f7 35 c6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRR0PLTE<ZmUomToayo5g@IDAT[c`Ah6AQK`=` TW`666636``RRRRWR@0`45IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:00 UTC	1127	OUT	GET /images/icons/svg_light/icons_sprite.svg HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	356	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/svg+xml Content-Length: 37035 Connection: close CF-Ray: 83cb23c11b162c96-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 6384 ETag: "62deda56-90ab" Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT Vary: Accept-Encoding Server: cloudflare
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 3c 73 76 67 0a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0a 77 69 64 74 68 3d 22 31 36 35 36 22 0a 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 44 65 66 69 6e 65 20 53 56 47 73 20 2d 2d 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 65 61 72 63 68 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 65 61 72 63 68 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a Data Ascii: <svgxmlns="http://www.w3.org/2000/svg"xmlns:xlink="http://www.w3.org/1999/xlink"width="1656"height="24"> ... Define SVGs --> <defs> ... search --> <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 36 22 20 77 69 64 74 68 3d 22 31 31 22 20 68 65 69 67 68 74 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 38 22 20 79 3d 22 31 31 22 20 77 69 64 74 68 3d 22 31 31 22 20 68 65 69 67 68 74 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 38 22 20 79 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 31 22 20 68 65 69 67 68 74 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 67 72 69 64 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 67 72 69 64 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d Data Ascii: 6" width="11" height="1"/> <rect x="8" y="11" width="11" height="1"/> <rect x="8" y="16" width="11" height="1"/> </symbol> ... grid --> <symbol id="grid" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin m
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 2e 34 39 2c 30 2c 30 2c 30 2d 2e 35 38 33 2d 31 2e 31 34 35 68 30 61 31 2e 31 31 31 2c 31 2e 31 31 31 2c 30 2c 30 2c 31 2d 2e 31 30 35 2d 31 2e 36 37 34 6c 31 2e 32 35 38 2d 31 2e 32 34 31 61 31 2e 33 36 38 2c 31 2e 33 36 38 2c 30 2c 30 2c 30 2c 2e 32 35 31 2d 31 2e 36 31 4c 31 32 2e 31 32 36 2c 35 2e 39 6c 2e 35 37 36 2d 2e 38 36 34 41 37 2e 30 31 2c 37 2e 30 31 2c 30 2c 30 2c 31 2c 31 39 2c 31 32 61 36 2e 39 33 36 2c 36 2e 39 33 36 2c 30 2c 30 2c 31 2d 31 2e 32 34 38 2c 33 2e 39 37 33 41 2e 35 39 33 2e 35 39 33 2c 30 2c 30 2c 31 2c 31 36 2e 38 31 32 2c 31 36 2e 30 32 38 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 61 64 64 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 Data Ascii: .49,0,0,0-.583-1.145h0a1.111,1.111,0,0,1-.105-1.674l1.258-1.241a1.368,1.368,0,0,0,.251-1.61L12.126,5.9l.576-.864A7.01,7.01,0,0,1,19,12a6.936,6.936,0,0,1-1.248,3.973A.593.593,0,0,1,16.812,16.028Z"/> </symbol> ... add --> <symbol i
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 33 33 33 2c 31 35 2e 36 32 32 61 32 2e 35 38 37 2c 32 2e 35 38 37 2c 30 2c 30 2c 30 2d 31 2e 37 34 32 2e 36 38 34 4c 39 2e 32 35 33 2c 31 32 2e 36 31 37 61 32 2e 34 35 38 2c 32 2e 34 35 38 2c 30 2c 30 2c 30 2c 30 2d 31 2e 32 34 34 4c 31 35 2e 35 32 2c 37 2e 37 31 39 61 32 2e 36 36 31 2c 32 2e 36 36 31 2c 30 2c 31 2c 30 2d 2e 38 35 33 2d 31 2e 39 34 36 2c 32 2e 38 37 32 2c 32 2e 38 37 32 2c 30 2c 30 2c 30 2c 2e 30 38 2e 36 32 32 4c 38 2e 34 38 2c 31 30 2e 30 34 38 61 32 2e 36 36 37 2c 32 2e 36 36 37 2c 30 2c 31 2c 30 2c 30 2c 33 2e 38 39 34 6c 36 2e 33 32 39 2c 33 2e 36 38 39 61 32 2e 34 38 38 2c 32 2e 34 38 38 2c 30 2c 30 2c 30 2d 2e 30 37 31 2e 35 38 36 2c 32 2e 36 2c 32 2e 36 2c Data Ascii: <path d="M17.333,15.622a2.587,2.587,0,0,0-1.742.684L9.253,12.617a2.458,2.458,0,0,0,0-1.244L15.52,7.719a2.661,2.661,0,1,0-.853-1.946,2.872,2.872,0,0,0,.08.622L8.48,10.048a2.667,2.667,0,1,0,0,3.894l6.329,3.689a2.488,2.488,0,0,0-.071.586,2.6,2.6,
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 33 20 39 20 31 31 20 39 20 31 31 20 37 20 39 20 37 20 39 20 39 20 37 20 39 20 37 20 31 31 20 39 20 31 31 20 39 20 31 33 20 31 31 20 31 33 20 31 31 20 31 31 20 31 33 20 31 31 20 31 33 20 39 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 7a 6f 6f 6d 20 6f 75 74 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 7a 6f 6f 6d 5f 6f 75 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f Data Ascii: on points="13 9 11 9 11 7 9 7 9 9 7 9 7 11 9 11 9 13 11 13 11 11 13 11 13 9"/> </symbol> ... zoom out --> <symbol id="zoom_out" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="no
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 34 2e 34 36 36 2c 31 34 2e 34 36 36 2c 30 2c 30 2c 31 2d 31 2e 35 33 36 2d 2e 38 2c 31 2e 36 32 34 2c 31 2e 36 32 34 2c 30 2c 30 2c 31 2d 2e 34 37 32 2d 2e 34 36 31 2c 31 2e 30 33 34 2c 31 2e 30 33 34 2c 30 2c 30 2c 31 2d 2e 31 34 39 2d 2e 35 35 38 2c 31 2e 30 35 36 2c 31 2e 30 35 36 2c 30 2c 30 2c 31 2c 2e 33 36 38 2d 2e 38 33 36 41 31 2e 35 35 32 2c 31 2e 35 35 32 2c 30 2c 30 2c 31 2c 31 32 2e 32 2c 38 2e 31 34 34 61 34 2e 38 36 2c 34 2e 38 36 2c 30 2c 30 2c 31 2c 31 2e 31 37 36 2e 31 34 39 2c 31 31 2e 34 37 39 2c 31 31 2e 34 37 39 2c 30 2c 30 2c 31 2c 31 2e 35 31 32 2e 35 32 33 6c 2e 37 38 31 2d 31 2e 38 38 32 61 31 31 2e 35 33 32 2c 31 31 2e 35 33 32 2c 30 2c 30 2c 30 2d 31 2e 36 39 31 2d 2e 35 39 34 2c 36 2e 36 39 34 2c 36 2e 36 39 34 2c 30 2c 30 2c Data Ascii: 4.466,14.466,0,0,1-1.536-.8,1.624,1.624,0,0,1-.472-.461,1.034,1.034,0,0,1-.149-.558,1.056,1.056,0,0,1,.368-.836A1.552,1.552,0,0,1,12.2,8.144a4.86,4.86,0,0,1,1.176.149,11.479,11.479,0,0,1,1.512.523l.781-1.882a11.532,11.532,0,0,0-1.691-.594,6.694,6.694,0,0,
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 72 73 73 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 38 22 20 63 79 3d 22 31 36 22 20 72 3d 22 32 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 2c 39 61 38 2e 32 36 32 2c 38 2e 32 36 32 2c 30 2c 30 2c 30 2d 31 2c 2e 30 36 76 32 2e 35 33 41 35 2e 35 30 38 2c 35 2e 35 30 38 2c 30 2c 30 2c 31 2c 31 32 Data Ascii: --> <symbol id="rss" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <circle cx="8" cy="16" r="2"/> <path d="M7,9a8.262,8.262,0,0,0-1,.06v2.53A5.508,5.508,0,0,1,12
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 31 32 20 31 34 20 31 36 20 31 30 20 38 20 31 30 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 65 64 69 74 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 65 64 69 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 70 6f 69 6e 74 73 3d 22 36 2e 31 35 20 31 34 2e 38 35 20 39 2e 31 37 20 31 37 Data Ascii: 12 14 16 10 8 10"/> </symbol> ... edit --> <symbol id="edit" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <polygon class="cls-1" points="6.15 14.85 9.17 17
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 48 31 35 41 34 2e 33 38 2c 34 2e 33 38 2c 30 2c 30 2c 30 2c 31 32 2c 31 38 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 38 2e 32 35 2c 35 68 2d 34 2e 35 41 31 2e 37 34 36 2c 31 2e 37 34 36 2c 30 2c 30 2c 30 2c 31 32 2c 36 2e 37 35 2c 31 2e 37 34 36 2c 31 2e 37 34 36 2c 30 2c 30 2c 30 2c 31 30 2e 32 35 2c 35 48 35 2e 37 35 41 31 2e 37 34 36 2c 31 2e 37 34 36 2c 30 2c 30 2c 30 2c 34 2c 36 2e 37 35 56 31 36 48 39 61 34 2e 33 38 2c 34 2e 33 38 2c 30 2c 30 2c 31 2c 33 2c 31 2c 34 2e 33 38 2c 34 2e 33 38 2c 30 2c 30 2c 31 2c 33 2d 31 68 35 56 36 2e 37 35 41 31 2e 37 34 36 2c 31 2e 37 34 36 2c 30 2c 30 2c 30 2c 31 38 2e 32 35 2c 35 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 Data Ascii: H15A4.38,4.38,0,0,0,12,18Z"/> <path d="M18.25,5h-4.5A1.746,1.746,0,0,0,12,6.75,1.746,1.746,0,0,0,10.25,5H5.75A1.746,1.746,0,0,0,4,6.75V16H9a4.38,4.38,0,0,1,3,1,4.38,4.38,0,0,1,3-1h5V6.75A1.746,1.746,0,0,0,18.25,5Z"/> </symbol>
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 32 20 34 20 36 20 34 20 36 20 32 30 20 31 31 20 32 30 20 31 32 20 32 30 20 31 38 20 32 30 20 31 38 20 31 30 20 31 32 20 31 30 20 31 32 20 34 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 2c 34 56 39 68 35 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 71 75 65 73 74 69 6f 6e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 71 75 65 73 74 69 6f 6e 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 Data Ascii: fill="none"/> <polygon points="12 4 6 4 6 20 11 20 12 20 18 20 18 10 12 10 12 4"/> <path d="M13,4V9h5Z"/> </symbol> ... question --> <symbol id="question" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49750	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	1089	OUT	GET /images/backgrounds/header/mf_logo_full_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/svg+xml Content-Length: 3357 Connection: close Last-Modified: Fri, 28 Oct 2016 22:22:42 GMT ETag: "5813cfb2-d1d" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 5740 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c0ddb76b2c-DFW
2023-12-28 16:22:01 UTC	1038	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 39 34 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 34 20 34 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 30 65 32 38 36 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 6d 66 5f 6c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 66 75 6c 6c 5f 63 6f 6c 6f 72 22 3e 3c 67 20 69 64 3d 22 66 6c 61 6d 65 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42"><defs><style>.cls-1{fill:#07f;}.cls-2{fill:none;}.cls-3{fill:#fff;}.cls-4{fill:#0e2866;}</style></defs><title>mf_logo</title><g id="full_color"><g id="flame"><path class=
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 31 32 2e 32 2c 32 2e 34 2d 31 32 2e 32 2c 32 2e 36 32 73 33 2e 31 2c 31 2e 35 33 2c 31 30 2e 37 2c 35 2e 32 32 41 32 37 2c 32 37 2c 30 2c 30 2c 30 2c 35 37 2e 33 35 2c 33 30 68 30 61 38 2c 38 2c 30 2c 31 2c 30 2c 30 2d 31 36 5a 22 2f 3e 3c 2f 67 3e 3c 67 20 69 64 3d 22 4d 65 64 69 61 46 69 72 65 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 2e 36 33 2c 36 2e 33 31 48 31 30 31 6c 2e 33 39 2c 31 36 2e 37 38 68 2e 30 39 4c 31 31 30 2c 36 2e 33 31 68 31 33 2e 36 38 6c 2d 36 2e 36 34 2c 33 31 2e 32 68 2d 38 2e 39 32 4c 31 31 33 2c 31 36 68 2d 2e 30 39 6c 2d 31 30 2e 32 33 2c 32 31 2e 35 48 39 35 2e 35 34 4c 39 34 2e 34 2c 31 36 68 2d 2e 30 39 4c 39 30 2c 33 37 2e 35 32 48 38 31 2e 31 31 5a 22 2f 3e 3c 70 61 74 68 20 63 6c Data Ascii: 12.2,2.4-12.2,2.62s3.1,1.53,10.7,5.22A27,27,0,0,0,57.35,30h0a8,8,0,1,0,0-16Z"/></g><g id="MediaFire"><path class="cls-4" d="M87.63,6.31H101l.39,16.78h.09L110,6.31h13.68l-6.64,31.2h-8.92L113,16h-.09l-10.23,21.5H95.54L94.4,16h-.09L90,37.52H81.11Z"/><path cl
2023-12-28 16:22:01 UTC	950	IN	Data Raw: 36 2e 31 37 41 31 34 2e 30 39 2c 31 34 2e 30 39 2c 30 2c 30 2c 30 2c 32 39 31 2e 32 2c 32 34 2e 31 39 5a 4d 32 38 33 2c 32 33 2e 36 32 68 2d 37 2e 36 39 63 2e 36 36 2d 32 2e 34 2c 32 2e 31 38 2d 33 2e 38 2c 34 2e 35 2d 33 2e 38 61 33 2c 33 2c 30 2c 30 2c 31 2c 33 2e 32 38 2c 33 2e 30 36 41 34 2e 33 37 2c 34 2e 33 37 2c 30 2c 30 2c 31 2c 32 38 33 2c 32 33 2e 36 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 32 36 35 2e 38 31 2c 32 32 6c 2e 39 32 2d 32 41 31 34 2e 34 32 2c 31 34 2e 34 32 2c 30 2c 30 2c 30 2c 32 36 35 2e 38 31 2c 32 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 32 36 39 2e 31 2c 31 34 2e 37 39 61 31 30 2e 36 37 2c 31 30 2e 36 37 2c 30 2c 30 2c 30 2d 33 2e 33 38 Data Ascii: 6.17A14.09,14.09,0,0,0,291.2,24.19ZM283,23.62h-7.69c.66-2.4,2.18-3.8,4.5-3.8a3,3,0,0,1,3.28,3.06A4.37,4.37,0,0,1,283,23.62Z"/><path class="cls-2" d="M265.81,22l.92-2A14.42,14.42,0,0,0,265.81,22Z"/><path class="cls-4" d="M269.1,14.79a10.67,10.67,0,0,0-3.38

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49754	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	1072	OUT	GET /images/filetype/file-app-v3.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	399	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/png Content-Length: 2380 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-94c" Expires: Sat, 27 Jan 2024 12:31:33 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6598 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c14fc12ca9-DFW
2023-12-28 16:22:01 UTC	970	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2b 00 00 00 3a 08 06 00 00 00 29 d7 a0 fe 00 00 09 13 49 44 41 54 78 5e ed 98 db 8b 5c 59 15 c6 d7 de a7 4e 55 9d aa ea 7b 67 3a 7d 0b da 3a b1 db 90 4e a6 33 88 20 86 8c 71 86 98 19 05 df 04 67 44 70 08 ce 9b 82 04 d4 67 7d 98 97 cc 43 20 2f be 89 ff 44 10 0d 04 62 02 19 7c 09 a4 2f e9 26 21 e9 9e ee 4e 9b e9 6b 55 57 9d cb 76 9d 6f 4e 16 bb ea b4 5d 75 44 a5 03 ae 64 b3 6b 9f eb 6f 7f e7 5b 6b ef 44 d1 db ef 13 c7 34 b7 cb 5f 9d 9a 7c cf 2b 97 5d fa 4f 87 22 aa ee ee f9 8b 0f 67 ff f4 cb 8f 7f 7f c3 90 91 13 d7 ce 8e 53 a7 91 e3 76 b1 50 2a fd ea 47 3f fd f1 99 e1 2f 7f 69 38 20 43 0a 7f 10 78 ac 42 8f 90 df aa 05 c6 18 74 07 85 a0 dd be f9 97 ee 6b 57 7f 43 bf f8 f8 77 37 28 7b 00 f6 f2 07 1f 7d Data Ascii: PNGIHDR+:)IDATx^\YNU{g:}:N3 qgDpg}C /Db\|/&!NkUWvoN]uDdko[kD4_\|+]O"gSvP*G?/i8 CxBtkWCw7({}
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 63 93 af 9f 79 70 e7 6f 97 13 1b 28 10 01 3a 81 94 74 01 05 01 54 16 01 95 5c 2f fb 03 5b d5 28 e9 31 80 bd 94 72 c8 ab 74 d1 67 6b 9f d1 e3 c7 8f 49 85 01 d8 d2 86 53 c2 a0 13 7f fb 8d 3a 55 bc 62 c8 83 ba b5 82 45 e8 53 2b 96 bc b9 b5 02 88 20 f2 2d ec aa 00 ad ed eb 58 dd ca e0 6b 80 8e 82 a0 f9 c1 d6 a4 21 84 b2 f7 c2 21 95 14 c3 d1 df 43 81 e5 a1 c0 a6 81 d3 ae b4 fb 83 b7 88 92 48 68 ca c9 93 e3 e5 c8 c9 17 2c 9f db c8 02 28 b0 9a 9b 62 2f 38 7e 4d 4a 17 6d 36 02 f2 f3 a1 b5 9f b5 ca 3c 8a 3c a5 61 fe c5 39 65 3b 58 54 83 39 48 1b ee 1d 97 00 6f 6f 78 24 24 8f 25 a7 fd f8 ce d0 17 58 1a c9 19 2a aa 00 08 0a f5 19 20 a9 1c b0 67 2f 60 0c 22 26 48 9f 17 1e 20 69 60 ca 92 6d 2b 2a fb 09 19 23 28 34 21 e5 f3 b9 04 43 3b 17 aa d5 ea 5f c5 43 47 2b 20 dc Data Ascii: cypo(:tT\/[(1rtgkIS:UbES+ -Xk!!CHh,(b/8~MJm6<<a9e;XT9Hoox$$%X* g/`"&H i`m+*#(4!C;_CG+
2023-12-28 16:22:01 UTC	41	IN	Data Raw: ff 43 cc f9 52 ca 71 6e 23 dc 3c 3a 7a b1 1a 83 b2 ca db ff 04 87 4b a0 ea 59 c7 df 87 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: CRqn#<:zKYIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49755	104.19.215.37	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	586	OUT	GET /Scripts/infinity.js.aspx?guid=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0 HTTP/1.1 Host: cdn.otnolatrnup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:01 UTC	577	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=900 P3P: CP="CAO PSA OUR IND" Access-Control-Allow-Origin: * Last-Modified: Thu, 28 Dec 2023 16:18:24 GMT CF-Cache-Status: HIT Age: 103 Server: cloudflare CF-RAY: 83cb23c21c023ace-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:01 UTC	792	IN	Data Raw: 37 64 37 31 0d 0a 76 61 72 20 69 73 49 6e 52 65 63 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 73 65 6c 65 63 74 6f 72 2c 20 63 6c 69 63 6b 45 76 65 6e 74 29 20 7b 20 69 66 20 28 73 65 6c 65 63 74 6f 72 20 21 3d 20 6e 75 6c 6c 20 26 26 20 63 6c 69 63 6b 45 76 65 6e 74 20 21 3d 20 6e 75 6c 6c 29 20 7b 20 76 61 72 20 6c 69 6e 6b 50 6f 73 58 20 3d 20 63 6c 69 63 6b 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3b 20 76 61 72 20 6c 69 6e 6b 50 6f 73 59 20 3d 20 63 6c 69 63 6b 45 76 65 6e 74 2e 63 6c 69 65 6e 74 59 3b 20 76 61 72 20 73 65 6c 65 63 74 6f 72 42 6f 78 20 3d 20 73 65 6c 65 63 74 6f 72 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 20 69 66 20 28 28 6c 69 6e 6b 50 6f 73 58 20 3e 3d 20 73 65 6c 65 63 74 6f 72 42 6f 78 2e 6c 65 66 74 Data Ascii: 7d71var isInRect = function(selector, clickEvent) { if (selector != null && clickEvent != null) { var linkPosX = clickEvent.clientX; var linkPosY = clickEvent.clientY; var selectorBox = selector.getBoundingClientRect(); if ((linkPosX >= selectorBox.left
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 20 3f 20 22 26 22 20 3a 20 22 3f 22 29 20 2b 20 22 64 6b 65 79 3d 22 20 2b 20 64 6b 65 79 29 20 3a 20 22 22 29 29 3b 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 43 6f 6e 73 6f 6c 65 4c 6f 67 28 22 64 6b 65 79 20 6e 6f 74 20 66 6f 75 6e 64 3a 5c 6e 22 2c 20 65 72 72 2e 73 74 61 63 6b 29 3b 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 20 7d 20 7d 3b 20 77 69 6e 64 6f 77 2e 49 6e 66 43 75 73 74 6f 6d 46 50 53 54 41 4d 6f 62 69 6c 65 46 75 6e 63 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 2c 20 6f 73 2c 20 62 72 6f 77 73 65 72 2c 20 6c 69 6e 6b 2c 20 73 55 72 6c 29 20 7b 20 76 61 72 20 77 2c 20 74 61 72 67 65 74 55 72 6c 3b 20 76 61 72 20 67 20 3d 20 Data Ascii: ? "&" : "?") + "dkey=" + dkey) : "")); } catch (err) { g367CB268B1094004A3689751E7AC568F.ConsoleLog("dkey not found:\n", err.stack); return null; } }; window.InfCustomFPSTAMobileFunc = function(event, os, browser, link, sUrl) { var w, targetUrl; var g =
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 20 22 69 4f 53 22 20 26 26 20 28 62 72 6f 77 73 65 72 2e 6e 61 6d 65 20 3d 3d 3d 20 22 43 68 72 6f 6d 65 22 20 7c 7c 20 28 62 72 6f 77 73 65 72 2e 6e 61 6d 65 20 3d 3d 3d 20 22 4d 6f 62 69 6c 65 20 53 61 66 61 72 69 22 20 26 26 20 70 61 72 73 65 46 6c 6f 61 74 28 62 72 6f 77 73 65 72 2e 76 65 72 73 69 6f 6e 29 20 3c 20 70 61 72 73 65 46 6c 6f 61 74 28 22 38 22 29 29 29 29 20 7b 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 74 61 72 67 65 74 55 72 6c 2c 20 74 61 62 57 69 6e 4e 61 6d 65 29 3b 20 7d 20 65 6c 73 65 20 7b 20 69 66 20 28 67 2e 50 6f 70 53 65 74 74 69 6e 67 73 2e 4d 6f 62 69 6c 65 48 69 73 74 6f 72 79 29 20 7b 20 74 72 79 20 7b 20 76 61 72 20 6e 77 20 3d 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 20 74 72 79 20 Data Ascii: "iOS" && (browser.name === "Chrome" \|\| (browser.name === "Mobile Safari" && parseFloat(browser.version) < parseFloat("8")))) { window.open(targetUrl, tabWinName); } else { if (g.PopSettings.MobileHistory) { try { var nw = window.open("about:blank"); try
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 73 63 72 69 70 74 3a 22 29 20 3d 3d 3d 20 2d 31 20 26 26 20 21 28 4d 6f 64 75 6c 65 2e 4d 65 64 69 61 2e 53 65 74 74 69 6e 67 73 2e 52 65 73 70 65 63 74 54 61 72 67 65 74 42 6c 61 6e 6b 20 26 26 20 28 6c 69 6e 6b 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 72 67 65 74 22 29 20 3d 3d 3d 20 22 5f 62 6c 61 6e 6b 22 20 7c 7c 20 6c 69 6e 6b 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 72 65 6c 22 29 20 3d 3d 3d 20 22 6e 6f 66 6f 6c 6c 6f 77 22 29 29 29 20 7b 20 69 66 20 28 4d 6f 64 75 6c 65 2e 50 6f 70 4c 6f 61 64 65 64 20 7c 7c 20 21 4d 6f 64 75 6c 65 2e 4c 6f 61 64 65 72 2e 49 73 43 6c 69 65 6e 74 53 69 64 65 46 69 6c 74 65 72 73 50 61 73 73 65 64 28 4d 6f 64 75 6c 65 2e 4d 65 64 69 61 2e 43 6c 69 65 6e 74 53 69 64 65 46 69 6c 74 65 72 73 2c 20 4d 6f Data Ascii: script:") === -1 && !(Module.Media.Settings.RespectTargetBlank && (link.getAttribute("target") === "_blank" \|\| link.getAttribute("rel") === "nofollow"))) { if (Module.PopLoaded \|\| !Module.Loader.IsClientSideFiltersPassed(Module.Media.ClientSideFilters, Mo
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 74 63 68 20 28 65 72 72 29 20 7b 20 67 2e 43 6f 6e 73 6f 6c 65 4c 6f 67 28 65 72 72 29 3b 20 7d 20 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 20 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 65 2e 73 74 61 74 65 2e 70 72 65 76 69 6f 75 73 3b 20 7d 29 3b 20 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 75 72 6c 54 6f 4f 70 65 6e 3b 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 20 67 2e 43 6f 6e 73 6f 6c 65 4c 6f 67 28 65 72 72 29 3b 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 75 72 6c 54 6f 4f 70 65 6e 29 3b 20 7d 20 7d 20 65 6c 73 65 20 7b 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 75 72 6c 54 6f 4f 70 65 6e 29 3b 20 7d 20 7d 20 69 66 20 28 6f 73 2e 6e 61 6d 65 20 3d 3d 20 22 41 6e 64 72 Data Ascii: tch (err) { g.ConsoleLog(err); } w.addEventListener("popstate", function(e) { w.location = e.state.previous; }); w.location = urlToOpen; } catch (err) { g.ConsoleLog(err); window.open(urlToOpen); } } else { window.open(urlToOpen); } } if (os.name == "Andr
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 37 35 31 45 37 41 43 35 36 38 46 2e 50 6f 70 4c 6f 61 64 65 64 20 3d 20 74 72 75 65 3b 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 50 6f 70 52 75 6e 6e 69 6e 67 20 3d 20 74 72 75 65 3b 20 72 65 74 75 72 6e 20 74 72 75 65 3b 20 7d 20 69 66 20 28 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 50 6f 70 53 65 74 74 69 6e 67 73 2e 49 73 54 72 61 63 6b 69 6e 67 29 20 7b 20 64 6f 54 72 61 63 6b 69 6e 67 46 61 73 74 50 6f 70 28 29 3b 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 4f 6e 46 61 73 74 50 6f 70 4c 6f 61 64 65 64 28 29 3b 20 7d 20 65 6c 73 65 20 7b 20 6c 69 6e 6b 2e 73 65 74 41 74 Data Ascii: 751E7AC568F.PopLoaded = true; g367CB268B1094004A3689751E7AC568F.PopRunning = true; return true; } if (g367CB268B1094004A3689751E7AC568F.PopSettings.IsTracking) { doTrackingFastPop(); g367CB268B1094004A3689751E7AC568F.OnFastPopLoaded(); } else { link.setAt
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 65 4e 61 6d 65 29 3b 20 74 72 79 20 7b 20 76 61 72 20 77 20 3d 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 2c 20 74 61 62 57 69 6e 4e 61 6d 65 29 3b 20 74 72 79 20 7b 20 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 7b 20 70 72 65 76 69 6f 75 73 3a 20 63 75 72 72 65 6e 74 55 72 6c 20 7d 2c 20 6e 75 6c 6c 2c 20 63 75 72 72 65 6e 74 55 72 6c 29 3b 20 77 2e 6f 6e 50 61 67 65 53 68 6f 77 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 20 69 66 20 28 65 2e 70 65 72 73 69 73 74 65 64 29 20 7b 20 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 20 7d 20 7d 3b 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 Data Ascii: eName); try { var w = window.open("about:blank", tabWinName); try { w.history.replaceState({ previous: currentUrl }, null, currentUrl); w.onPageShow = function(e) { if (e.persisted) { w.location.reload(); } }; } catch (err) { g367CB268B1094004A3689751E7AC
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 20 67 2e 49 6e 66 69 6e 69 74 79 48 6f 73 74 3b 20 76 61 72 20 72 65 64 69 72 65 63 74 55 72 6c 3b 20 76 61 72 20 74 69 6d 65 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 29 3b 20 76 61 72 20 72 65 66 65 72 72 65 72 55 72 6c 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 20 76 61 72 20 63 75 72 72 65 6e 74 55 72 6c 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 67 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 20 76 61 72 20 72 61 6e 64 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e Data Ascii: g.InfinityHost; var redirectUrl; var time = encodeURIComponent(new Date().getTimezoneOffset()); var referrerUrl = encodeURIComponent(window.document.referrer); var currentUrl = encodeURIComponent(g._Top.window.location.href); var rand = encodeURIComponen
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 20 76 61 72 20 69 73 41 6c 6c 6f 77 65 64 20 3d 20 66 61 6c 73 65 3b 20 69 66 20 28 63 75 72 72 65 6e 74 29 20 7b 20 69 73 41 6c 6c 6f 77 65 64 20 3d 20 61 6c 6c 6f 77 65 64 2e 69 6e 63 6c 75 64 65 73 28 70 61 72 73 65 49 6e 74 28 63 75 72 72 65 6e 74 29 29 3b 20 7d 20 76 61 72 20 65 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 64 69 76 2e 64 6f 77 6e 6c 6f 61 64 5f 6c 69 6e 6b 20 61 2e 72 65 74 72 79 22 29 3b 20 69 66 20 28 65 6c 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 20 49 6e 66 53 68 6f 77 4e 65 77 41 64 73 20 3d 20 65 6c 5b 30 5d 2e 68 72 65 66 2e 6d 61 74 63 68 28 2f 74 65 6d 70 6c 61 74 65 3d 28 5b 30 2d 39 5d 2b 29 2f 69 29 5b 31 5d 20 3d 3d 3d 20 22 32 37 22 3b 20 7d 20 49 6e 66 53 68 6f 77 4e 65 Data Ascii: var isAllowed = false; if (current) { isAllowed = allowed.includes(parseInt(current)); } var el = document.querySelectorAll("div.download_link a.retry"); if (el.length > 0) { InfShowNewAds = el[0].href.match(/template=([0-9]+)/i)[1] === "27"; } InfShowNe
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 66 69 6e 65 64 22 7c 7c 21 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 43 6f 72 65 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 7c 7c 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 66 2c 72 2c 65 2c 74 2c 75 3b 69 66 28 74 68 69 73 3d 3d 3d 76 6f 69 64 20 30 7c 7c 74 68 69 73 3d 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 69 66 28 69 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 66 3d 69 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 74 79 70 65 6f 66 20 6e 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 Data Ascii: fined"\|\|!g367CB268B1094004A3689751E7AC568F.Core){Array.prototype.filter\|\|(Array.prototype.filter=function(n){"use strict";var i,f,r,e,t,u;if(this===void 0\|\|this===null)throw new TypeError;if(i=Object(this),f=i.length>>>0,typeof n!="function")throw new Typ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49753	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	1089	OUT	GET /images/backgrounds/footer/social/footerIcons.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	397	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/png Content-Length: 583 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-247" Expires: Sat, 27 Jan 2024 15:36:44 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 520 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c14ad86c13-DFW
2023-12-28 16:22:01 UTC	583	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 70 00 00 00 1c 08 06 00 00 00 b9 d6 3b 6a 00 00 02 0e 49 44 41 54 78 da ed 99 4d 4e 02 31 18 86 3d c2 70 02 c8 5c 00 13 0f 30 9c 00 bc 80 e3 ce e5 b8 64 83 86 25 0b 0d 6e 49 14 f7 84 9f 0b 10 f1 00 88 5c 60 f0 06 70 84 fa 2e 5e 92 a6 8b 06 e8 fc 58 f9 be e4 49 86 16 f8 98 3e d3 f6 1b e6 42 29 25 78 cc d9 0f 80 08 14 44 a0 20 02 45 a0 70 06 02 b5 08 c0 10 6c 80 22 9d 73 1f 4c 9f 04 be ee c5 89 40 3f 05 6e 35 71 3f e0 13 dc b8 fc 90 03 a3 0a 62 90 f0 78 1f 81 43 be 18 f4 c1 8c e7 b3 e3 71 dd c8 ad 7f c8 e5 3c 43 a0 2c b4 41 98 b7 40 45 dc 4f 8a 70 59 7e b3 c8 ab eb 17 0e e9 83 6f 50 3b 51 60 c2 d5 44 7f ad 40 13 20 8a 17 48 b6 20 f4 4d 60 03 28 8b c4 94 fd 26 53 90 9c 28 70 0b 3a 46 9e 0d 98 17 28 b0 Data Ascii: PNGIHDRp;jIDATxMN1=p\0d%nI\`p.^XI>B)%xD Epl"sL@?n5q?bxCq<C,A@EOpY~oP;Q`D@ H M`(&S(p:F(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	1097	OUT	GET /images/backgrounds/download/additional_content/world.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	335	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/svg+xml Content-Length: 146658 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-23ce2" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1118 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c25cb56b6b-DFW
2023-12-28 16:22:01 UTC	1034	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 61 6c 6c 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 32 22 20 68 65 69 67 68 74 3d 22 32 31 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 32 20 32 31 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 61 62 64 64 61 34 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 74 69 74 6c 65 3e 77 6f 72 6c 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 20 69 64 3d 22 61 66 72 69 63 61 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 32 33 33 30 22 20 63 6c 61 Data Ascii: <svg id="all" xmlns="http://www.w3.org/2000/svg" width="402" height="210" viewBox="0 0 402 210"> <defs> <style> .cls-1 { fill: #abdda4; } </style> </defs> <title>world</title> <g id="africa"> <path id="path2330" cla
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 2d 31 2e 30 35 31 2c 31 2e 32 32 32 61 32 2e 33 2c 32 2e 33 2c 30 2c 30 2c 31 2d 2e 35 32 36 2e 38 31 34 63 2d 2e 34 35 38 2c 30 2d 31 2e 33 39 31 2c 31 2e 33 39 31 2d 31 2e 33 39 31 2c 32 2e 30 38 36 61 33 2e 31 36 37 2c 33 2e 31 36 37 2c 30 2c 30 2c 31 2d 31 2e 31 32 2c 31 2e 37 33 31 2c 34 2e 37 2c 34 2e 37 2c 30 2c 30 2c 30 2d 2e 37 36 33 2c 31 2e 33 35 37 2c 33 2e 32 35 33 2c 33 2e 32 35 33 2c 30 2c 30 2c 31 2d 2e 36 37 39 2c 31 2e 32 32 31 2c 31 2e 36 35 36 2c 31 2e 36 35 36 2c 30 2c 30 2c 30 2d 2e 34 30 37 2e 38 34 38 63 2d 2e 30 35 31 2e 33 35 36 2d 2e 31 35 32 2e 38 33 31 2d 2e 32 2c 31 2e 30 35 32 2d 2e 30 36 38 2e 32 38 38 2d 2e 30 33 34 2e 33 37 33 2e 31 33 35 2e 33 32 32 2e 31 31 39 2d 2e 30 33 34 2e 34 30 38 2e 31 31 39 2e 36 31 31 2e 33 33 Data Ascii: -1.051,1.222a2.3,2.3,0,0,1-.526.814c-.458,0-1.391,1.391-1.391,2.086a3.167,3.167,0,0,1-1.12,1.731,4.7,4.7,0,0,0-.763,1.357,3.253,3.253,0,0,1-.679,1.221,1.656,1.656,0,0,0-.407.848c-.051.356-.152.831-.2,1.052-.068.288-.034.373.135.322.119-.034.408.119.611.33
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 30 35 31 2e 33 33 39 2e 32 2e 33 33 39 2e 33 32 32 61 2e 36 31 31 2e 36 31 31 2c 30 2c 30 2c 30 2c 2e 32 33 37 2e 34 32 35 63 2e 33 32 33 2e 32 37 31 2e 31 37 2c 31 2e 39 31 36 2d 2e 32 35 34 2c 32 2e 37 36 34 2d 2e 32 32 31 2e 34 32 35 2d 2e 32 35 35 2e 36 34 35 2d 2e 31 31 39 2e 36 37 39 2e 31 31 39 2e 30 35 31 2e 31 35 33 2e 31 38 37 2e 30 35 31 2e 34 30 37 61 34 2e 39 2c 34 2e 39 2c 30 2c 30 2c 30 2d 2e 32 2c 31 2e 30 38 36 63 2d 2e 30 38 35 2e 37 32 39 2d 2e 33 30 36 2c 31 2e 30 38 35 2d 2e 35 39 34 2e 39 31 36 2d 2e 32 32 31 2d 2e 31 33 36 2d 2e 31 35 33 2e 33 33 39 2e 31 2e 38 38 32 2e 31 33 35 2e 32 37 31 2e 33 37 33 2e 38 2e 35 34 32 2c 31 2e 31 37 61 35 2e 33 37 34 2c 35 2e 33 37 34 2c 30 2c 30 2c 30 2c 2e 39 31 36 2c 31 2e 32 37 32 63 31 2e 32 Data Ascii: 051.339.2.339.322a.611.611,0,0,0,.237.425c.323.271.17,1.916-.254,2.764-.221.425-.255.645-.119.679.119.051.153.187.051.407a4.9,4.9,0,0,0-.2,1.086c-.085.729-.306,1.085-.594.916-.221-.136-.153.339.1.882.135.271.373.8.542,1.17a5.374,5.374,0,0,0,.916,1.272c1.2
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 2e 33 37 34 63 2e 31 38 37 2c 30 2c 2e 34 39 32 2d 2e 36 32 37 2e 39 31 36 2d 31 2e 39 35 31 2e 33 30 35 2d 2e 39 34 39 2e 33 37 33 2d 32 2e 32 30 35 2e 31 2d 32 2e 30 33 35 2d 2e 33 30 35 2e 31 38 37 2d 2e 31 37 2d 2e 32 32 31 2e 32 32 2d 2e 36 37 39 61 35 2e 35 34 32 2c 35 2e 35 34 32 2c 30 2c 30 2c 31 2c 31 2e 35 36 31 2d 2e 39 31 36 2c 33 2e 31 35 39 2c 33 2e 31 35 39 2c 30 2c 30 2c 30 2c 31 2e 35 37 38 2d 31 2e 30 33 34 63 2e 32 33 37 2d 2e 33 35 37 2e 33 32 32 2d 2e 36 32 38 2e 32 32 2d 2e 37 33 73 2d 2e 31 2d 2e 33 32 32 2e 30 31 37 2d 2e 36 31 61 33 2e 34 2c 33 2e 34 2c 30 2c 30 2c 30 2d 2e 30 33 34 2d 32 2e 31 32 31 2e 35 38 32 2e 35 38 32 2c 30 2c 30 2c 31 2d 2e 31 37 2d 2e 33 33 39 63 30 2d 2e 31 2e 30 38 35 2d 2e 30 36 38 2e 31 37 2e 30 36 38 Data Ascii: .374c.187,0,.492-.627.916-1.951.305-.949.373-2.205.1-2.035-.305.187-.17-.221.22-.679a5.542,5.542,0,0,1,1.561-.916,3.159,3.159,0,0,0,1.578-1.034c.237-.357.322-.628.22-.73s-.1-.322.017-.61a3.4,3.4,0,0,0-.034-2.121.582.582,0,0,1-.17-.339c0-.1.085-.068.17.068
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 31 2c 30 2c 30 2c 31 2d 2e 37 38 2e 31 31 38 2c 31 2e 30 32 31 2c 31 2e 30 32 31 2c 30 2c 30 2c 30 2d 2e 38 33 32 2e 32 35 35 2c 31 2e 33 36 31 2c 31 2e 33 36 31 2c 30 2c 30 2c 31 2d 31 2e 30 33 34 2e 32 37 31 2c 31 2e 36 34 32 2c 31 2e 36 34 32 2c 30 2c 30 2c 30 2d 31 2e 30 38 36 2e 32 32 31 63 2d 2e 38 38 32 2e 35 34 33 2d 31 2e 35 32 37 2e 33 32 32 2d 32 2e 32 2d 2e 37 34 37 61 31 2e 33 38 35 2c 31 2e 33 38 35 2c 30 2c 30 2c 30 2d 2e 37 31 33 2d 2e 35 35 39 6c 2d 2e 34 30 37 2d 2e 31 2e 33 39 2d 2e 32 63 2e 36 34 35 2d 2e 33 32 32 2e 35 37 37 2d 2e 38 31 34 2d 2e 32 33 37 2d 31 2e 36 36 32 61 31 32 2e 30 31 34 2c 31 32 2e 30 31 34 2c 30 2c 30 2c 31 2d 2e 39 38 34 2d 31 2e 31 33 37 63 2d 2e 31 33 36 2d 2e 31 38 36 2d 2e 33 32 32 2d 2e 33 35 36 2d 2e 34 Data Ascii: 1,0,0,1-.78.118,1.021,1.021,0,0,0-.832.255,1.361,1.361,0,0,1-1.034.271,1.642,1.642,0,0,0-1.086.221c-.882.543-1.527.322-2.2-.747a1.385,1.385,0,0,0-.713-.559l-.407-.1.39-.2c.645-.322.577-.814-.237-1.662a12.014,12.014,0,0,1-.984-1.137c-.136-.186-.322-.356-.4
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 32 2e 39 33 31 2c 32 2e 39 33 31 2c 30 2c 30 2c 31 2d 2e 39 33 33 2d 2e 34 37 35 2c 34 2e 38 33 2c 34 2e 38 33 2c 30 2c 30 2c 30 2d 32 2e 34 36 2d 2e 38 38 32 2c 31 2e 33 2c 31 2e 33 2c 30 2c 30 2c 31 2d 31 2e 32 35 35 2d 31 2e 30 33 35 2e 39 35 33 2e 39 35 33 2c 30 2c 30 2c 30 2d 2e 35 36 2d 2e 37 2c 39 2e 31 34 31 2c 39 2e 31 34 31 2c 30 2c 30 2c 31 2d 2e 39 35 2d 2e 34 34 31 2c 33 2e 33 31 35 2c 33 2e 33 31 35 2c 30 2c 30 2c 30 2d 31 2e 33 39 31 2d 2e 32 33 37 2c 33 2e 37 2c 33 2e 37 2c 30 2c 30 2c 31 2d 31 2e 35 37 37 2d 2e 33 63 2d 2e 36 37 39 2d 2e 33 34 2d 31 2e 31 33 37 2d 2e 38 36 36 2d 2e 39 31 36 2d 31 2e 30 38 36 2e 30 35 2d 2e 30 35 31 2d 2e 30 31 37 2d 2e 31 2d 2e 31 37 2d 2e 31 73 2d 2e 32 38 38 2e 30 36 38 2d 2e 32 38 38 2e 31 37 63 30 2c Data Ascii: 2.931,2.931,0,0,1-.933-.475,4.83,4.83,0,0,0-2.46-.882,1.3,1.3,0,0,1-1.255-1.035.953.953,0,0,0-.56-.7,9.141,9.141,0,0,1-.95-.441,3.315,3.315,0,0,0-1.391-.237,3.7,3.7,0,0,1-1.577-.3c-.679-.34-1.137-.866-.916-1.086.05-.051-.017-.1-.17-.1s-.288.068-.288.17c0,
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 30 38 35 2d 31 2e 31 31 39 2d 2e 31 31 39 2d 31 2e 38 36 36 2d 2e 30 35 31 2d 31 2e 32 32 31 2d 2e 30 33 34 2d 31 2e 33 30 36 2e 31 35 33 2d 2e 38 34 38 41 33 2e 34 38 33 2c 33 2e 34 38 33 2c 30 2c 30 2c 31 2c 32 32 36 2e 33 36 34 2c 31 32 36 2e 37 33 39 5a 6d 36 2e 31 30 37 2c 37 2e 37 36 39 61 33 2e 37 31 32 2c 33 2e 37 31 32 2c 30 2c 30 2c 31 2c 2e 32 33 37 2c 31 2e 31 2c 32 2c 32 2c 30 2c 30 2c 30 2c 2e 32 33 38 2e 39 36 36 63 2e 32 35 34 2e 32 35 35 2e 32 37 31 2e 39 33 33 2e 30 33 34 2c 31 2e 30 36 39 61 34 2e 36 34 31 2c 34 2e 36 34 31 2c 30 2c 30 2c 30 2c 2e 31 35 32 2c 32 2e 36 2e 32 37 32 2e 32 37 32 2c 30 2c 30 2c 31 2c 2e 31 38 37 2e 32 32 31 63 30 2c 2e 31 2d 2e 30 36 38 2e 31 31 39 2d 2e 31 37 2e 30 36 38 2d 2e 30 38 34 2d 2e 30 35 31 2d 2e Data Ascii: 085-1.119-.119-1.866-.051-1.221-.034-1.306.153-.848A3.483,3.483,0,0,1,226.364,126.739Zm6.107,7.769a3.712,3.712,0,0,1,.237,1.1,2,2,0,0,0,.238.966c.254.255.271.933.034,1.069a4.641,4.641,0,0,0,.152,2.6.272.272,0,0,1,.187.221c0,.1-.068.119-.17.068-.084-.051-.
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 32 38 37 2c 30 2c 30 2c 30 2c 2e 37 34 36 2d 32 2e 32 39 63 2e 32 2d 31 2e 32 32 31 2e 32 35 35 2d 31 2e 34 30 38 2e 34 37 35 2d 31 2e 33 35 37 2e 32 2e 30 33 34 2e 32 32 31 2d 2e 31 31 38 2e 30 31 37 2d 31 2e 34 30 38 6c 2d 2e 31 31 38 2d 2e 37 36 33 2e 33 33 39 2e 34 30 37 2e 33 33 39 2e 34 32 34 2e 32 38 38 2d 2e 35 34 33 63 2e 32 2d 2e 34 30 37 2e 32 33 38 2d 2e 36 32 37 2e 31 2d 2e 38 36 35 61 33 2e 33 36 32 2c 33 2e 33 36 32 2c 30 2c 30 2c 31 2d 2e 31 36 39 2d 31 2e 30 38 35 2c 35 2e 32 39 33 2c 35 2e 32 39 33 2c 30 2c 30 2c 30 2d 2e 31 38 37 2d 31 2e 33 32 34 2c 31 30 2e 32 34 31 2c 31 30 2e 32 34 31 2c 30 2c 30 2c 30 2d 31 2d 32 2e 31 38 38 43 32 35 31 2e 35 38 38 2c 31 33 37 2e 35 36 31 2c 32 35 31 2e 34 33 36 2c 31 33 37 2e 37 33 31 2c 32 35 31 Data Ascii: 287,0,0,0,.746-2.29c.2-1.221.255-1.408.475-1.357.2.034.221-.118.017-1.408l-.118-.763.339.407.339.424.288-.543c.2-.407.238-.627.1-.865a3.362,3.362,0,0,1-.169-1.085,5.293,5.293,0,0,0-.187-1.324,10.241,10.241,0,0,0-1-2.188C251.588,137.561,251.436,137.731,251
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 37 2c 30 2d 2e 32 33 37 2e 30 33 34 2d 2e 30 35 2e 31 35 33 2e 33 35 36 2e 32 32 2d 2e 31 37 2e 33 33 39 2d 31 2e 38 33 32 2e 33 39 6c 2d 31 2e 34 32 35 2e 30 33 34 2e 34 39 32 2e 33 39 63 2e 32 37 31 2e 32 32 2e 36 36 31 2e 35 36 2e 38 34 38 2e 37 34 36 61 32 2e 30 35 37 2c 32 2e 30 35 37 2c 30 2c 30 2c 30 2c 31 2e 31 35 33 2e 34 34 31 63 2e 34 32 34 2e 30 35 31 2e 37 38 31 2e 31 35 33 2e 37 38 31 2e 32 33 38 2c 30 2c 2e 30 36 38 2e 31 33 35 2e 31 36 39 2e 33 30 35 2e 32 2e 31 35 33 2e 30 35 31 2e 30 33 34 2e 30 38 35 2d 2e 32 37 32 2e 31 61 32 2e 34 33 32 2c 32 2e 34 33 32 2c 30 2c 30 2c 31 2d 31 2e 30 31 37 2d 2e 32 32 2c 31 33 2e 32 39 34 2c 31 33 2e 32 39 34 2c 30 2c 30 2c 30 2d 33 2e 31 38 39 2d 2e 37 33 2e 37 35 32 2e 37 35 32 2c 30 2c 30 2c 30 2d Data Ascii: 7,0-.237.034-.05.153.356.22-.17.339-1.832.39l-1.425.034.492.39c.271.22.661.56.848.746a2.057,2.057,0,0,0,1.153.441c.424.051.781.153.781.238,0,.068.135.169.305.2.153.051.034.085-.272.1a2.432,2.432,0,0,1-1.017-.22,13.294,13.294,0,0,0-3.189-.73.752.752,0,0,0-
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 31 2e 37 2d 2e 33 35 36 2d 31 2e 35 39 34 2d 2e 30 35 31 61 2e 34 34 31 2e 34 34 31 2c 30 2c 30 2c 31 2d 2e 31 35 33 2e 34 34 31 2c 31 2e 35 38 34 2c 31 2e 35 38 34 2c 30 2c 30 2c 30 2d 2e 32 32 2e 38 38 32 63 30 2c 2e 35 37 37 2d 2e 30 36 38 2e 37 31 33 2d 2e 35 30 39 2e 39 33 33 2d 2e 36 32 38 2e 33 32 32 2d 2e 36 36 32 2e 37 31 33 2d 2e 30 38 35 2e 39 33 33 61 2e 35 38 31 2e 35 38 31 2c 30 2c 30 2c 31 2c 2e 34 32 34 2e 36 36 32 63 30 2c 2e 35 34 33 2e 33 37 33 2e 39 35 2e 37 32 39 2e 38 31 34 61 31 2e 31 36 34 2c 31 2e 31 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 2e 32 33 37 2c 35 2e 31 37 31 2c 35 2e 31 37 31 2c 30 2c 30 2c 30 2c 2e 38 38 32 2e 34 39 32 63 2e 33 37 33 2e 31 35 33 2e 34 39 32 2e 34 32 34 2e 32 35 34 2e 35 36 61 34 2e 30 39 31 2c 34 2e 30 39 Data Ascii: 1.7-.356-1.594-.051a.441.441,0,0,1-.153.441,1.584,1.584,0,0,0-.22.882c0,.577-.068.713-.509.933-.628.322-.662.713-.085.933a.581.581,0,0,1,.424.662c0,.543.373.95.729.814a1.164,1.164,0,0,1,.73.237,5.171,5.171,0,0,0,.882.492c.373.153.492.424.254.56a4.091,4.09

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49759	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	1104	OUT	GET /images/backgrounds/download/additional_content/continent-na.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/svg+xml Content-Length: 51223 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-c817" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 9950 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c41b71e7cb-DFW
2023-12-28 16:22:01 UTC	1036	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 68 69 67 68 6c 69 67 68 74 5f 63 6f 6e 74 69 6e 65 6e 74 73 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 68 69 67 68 6c 69 67 68 74 20 63 6f 6e 74 69 6e 65 6e 74 73 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 32 22 20 68 65 69 67 68 74 3d 22 32 31 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 32 20 32 31 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 63 38 64 35 39 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 74 69 74 6c 65 3e 63 6f 6e 74 69 6e 65 6e 74 Data Ascii: <svg id="highlight_continents" data-name="highlight continents" xmlns="http://www.w3.org/2000/svg" width="402" height="210" viewBox="0 0 402 210"> <defs> <style> .cls-1 { fill: #fc8d59; } </style> </defs> <title>continent
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 31 35 33 73 2e 33 34 2e 31 2e 33 34 2e 32 33 38 63 30 2c 2e 31 31 38 2e 32 35 34 2e 33 30 35 2e 35 35 39 2e 34 30 37 2e 33 37 34 2e 31 31 38 2e 34 34 31 2e 31 36 39 2e 32 2e 31 38 36 61 31 2e 31 37 36 2c 31 2e 31 37 36 2c 30 2c 30 2c 30 2d 2e 35 37 37 2e 32 32 31 63 2d 2e 31 36 39 2e 31 38 36 2d 2e 32 2e 31 36 39 2d 2e 31 35 33 2d 2e 30 31 37 2e 30 33 34 2d 2e 31 33 36 2d 2e 31 31 38 2d 2e 32 35 35 2d 2e 33 35 36 2d 2e 32 38 39 61 31 2e 35 35 2c 31 2e 35 35 2c 30 2c 30 2c 31 2d 2e 37 32 39 2d 2e 34 30 37 63 2d 2e 32 33 38 2d 2e 32 35 34 2d 2e 35 34 33 2d 2e 33 33 39 2d 31 2e 31 35 34 2d 2e 33 33 39 2d 2e 34 35 38 2c 30 2d 2e 38 38 32 2e 30 36 38 2d 2e 39 33 33 2e 31 37 61 31 2e 31 31 36 2c 31 2e 31 31 36 2c 30 2c 30 2c 31 2d 2e 36 39 35 2e 31 36 39 63 2d Data Ascii: 153s.34.1.34.238c0,.118.254.305.559.407.374.118.441.169.2.186a1.176,1.176,0,0,0-.577.221c-.169.186-.2.169-.153-.017.034-.136-.118-.255-.356-.289a1.55,1.55,0,0,1-.729-.407c-.238-.254-.543-.339-1.154-.339-.458,0-.882.068-.933.17a1.116,1.116,0,0,1-.695.169c-
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 37 2e 30 36 38 2d 2e 31 33 36 2e 31 35 32 2e 30 38 35 2e 33 32 32 2e 31 38 36 2e 31 33 36 2e 32 32 2e 32 32 31 2e 31 2e 32 33 38 2d 2e 33 30 36 2c 30 2d 2e 32 37 32 2e 33 33 39 2e 30 33 34 2e 33 33 39 2e 31 33 35 2c 30 2c 2e 32 35 34 2d 2e 30 36 38 2e 32 35 34 2d 2e 31 35 33 2c 30 2d 2e 30 36 38 2e 33 37 33 2d 2e 31 2e 38 33 31 2d 2e 30 35 31 2e 37 34 37 2e 30 36 38 2e 39 2e 30 31 37 2c 31 2e 33 30 36 2d 2e 33 39 2e 33 37 34 2d 2e 33 37 33 2e 34 30 37 2d 2e 34 39 32 2e 32 32 31 2d 2e 36 32 38 2d 2e 31 38 37 2d 2e 31 31 38 2d 2e 31 38 37 2d 2e 31 38 36 2d 2e 30 31 37 2d 2e 32 35 34 61 2e 33 37 2e 33 37 2c 30 2c 30 2c 30 2c 2e 32 2d 2e 33 32 32 63 30 2d 2e 33 35 37 2c 31 2e 34 35 39 2d 2e 33 32 33 2c 31 2e 35 39 35 2e 30 33 34 61 2e 35 36 31 2e 35 36 31 2c Data Ascii: 7.068-.136.152.085.322.186.136.22.221.1.238-.306,0-.272.339.034.339.135,0,.254-.068.254-.153,0-.068.373-.1.831-.051.747.068.9.017,1.306-.39.374-.373.407-.492.221-.628-.187-.118-.187-.186-.017-.254a.37.37,0,0,0,.2-.322c0-.357,1.459-.323,1.595.034a.561.561,
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 31 2d 31 2e 32 33 39 2e 32 37 32 63 2d 31 2e 32 38 39 2e 30 31 37 2d 34 2e 38 31 37 2e 37 31 32 2d 34 2e 39 31 39 2e 39 38 34 2d 2e 30 33 34 2e 31 33 35 2e 31 37 2e 32 2e 37 31 33 2e 32 2e 34 32 34 2c 30 2c 2e 37 38 2e 30 36 38 2e 37 38 2e 31 37 2c 30 2c 2e 33 32 32 2d 2e 38 2e 35 36 2d 32 2e 33 37 35 2e 37 61 32 37 2e 36 34 38 2c 32 37 2e 36 34 38 2c 30 2c 30 2c 30 2d 35 2e 36 34 39 2e 38 38 32 6c 2d 2e 34 35 38 2e 32 33 38 2e 34 34 31 2e 31 38 36 61 31 2e 39 37 39 2c 31 2e 39 37 39 2c 30 2c 30 2c 30 2c 2e 37 34 37 2e 32 2e 36 30 37 2e 36 30 37 2c 30 2c 30 2c 31 2c 2e 34 30 37 2e 31 33 36 63 2e 30 33 34 2e 30 36 37 2d 2e 33 33 39 2e 31 31 38 2d 2e 38 34 38 2e 31 61 32 2e 30 36 34 2c 32 2e 30 36 34 2c 30 2c 30 2c 30 2d 31 2e 30 31 38 2e 31 31 39 63 2d 2e Data Ascii: 1-1.239.272c-1.289.017-4.817.712-4.919.984-.034.135.17.2.713.2.424,0,.78.068.78.17,0,.322-.8.56-2.375.7a27.648,27.648,0,0,0-5.649.882l-.458.238.441.186a1.979,1.979,0,0,0,.747.2.607.607,0,0,1,.407.136c.034.067-.339.118-.848.1a2.064,2.064,0,0,0-1.018.119c-.
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 34 2d 2e 30 38 35 2d 2e 38 34 38 2d 2e 30 35 31 2d 31 2e 32 35 36 2e 34 34 31 61 32 2e 31 35 33 2c 32 2e 31 35 33 2c 30 2c 30 2c 31 2d 2e 35 35 39 2e 35 32 36 2c 32 2e 35 33 39 2c 32 2e 35 33 39 2c 30 2c 30 2c 30 2d 2e 39 33 33 2c 31 2e 31 31 39 63 30 2c 2e 31 33 36 2e 31 33 35 2e 32 33 38 2e 33 2e 32 35 35 2e 32 32 31 2c 30 2c 2e 32 2e 30 33 34 2d 2e 30 38 35 2e 31 35 32 2d 2e 34 32 34 2e 31 37 2d 2e 38 31 34 2e 37 38 31 2d 2e 35 37 37 2e 39 31 36 2e 30 38 35 2e 30 35 31 2e 31 31 39 2e 32 37 32 2e 30 35 31 2e 34 37 35 2d 2e 30 36 37 2e 32 38 39 2d 2e 30 33 34 2e 33 34 2e 32 32 31 2e 32 35 35 2e 32 32 2d 2e 30 38 35 2e 32 37 31 2d 2e 30 35 31 2e 31 38 36 2e 31 33 36 2d 2e 30 35 2e 31 33 35 2d 2e 30 33 33 2e 32 35 34 2e 30 35 31 2e 32 35 34 73 2e 30 35 31 Data Ascii: 4-.085-.848-.051-1.256.441a2.153,2.153,0,0,1-.559.526,2.539,2.539,0,0,0-.933,1.119c0,.136.135.238.3.255.221,0,.2.034-.085.152-.424.17-.814.781-.577.916.085.051.119.272.051.475-.067.289-.034.34.221.255.22-.085.271-.051.186.136-.05.135-.033.254.051.254s.051
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 39 2d 32 2e 31 32 31 2d 2e 34 32 34 2e 33 30 36 2d 2e 30 31 37 2e 33 39 2d 2e 31 2e 33 34 2d 2e 34 30 37 2d 2e 30 33 34 2d 2e 33 30 36 2e 30 33 33 2d 2e 33 37 34 2e 34 34 31 2d 2e 33 37 34 2e 33 35 36 2c 30 2c 2e 35 30 38 2e 30 38 35 2e 35 34 32 2e 33 30 36 61 2e 37 31 37 2e 37 31 37 2c 30 2c 30 2c 30 2c 2e 31 35 33 2e 34 32 34 2c 35 2e 30 33 34 2c 35 2e 30 33 34 2c 30 2c 30 2c 30 2c 32 2e 31 33 37 2e 31 38 36 41 31 2e 34 32 36 2c 31 2e 34 32 36 2c 30 2c 30 2c 30 2c 31 37 32 2c 31 38 2e 38 63 2e 30 33 34 2d 2e 37 2c 30 2d 2e 37 34 36 2d 2e 35 37 37 2d 31 2e 30 33 34 2d 2e 35 30 39 2d 2e 32 33 38 2d 2e 35 34 33 2d 2e 32 37 32 2d 2e 31 33 36 2d 2e 31 38 37 2e 35 34 33 2e 31 2c 31 2e 31 32 2d 2e 32 35 34 2e 37 36 34 2d 2e 34 37 35 2d 2e 31 37 2d 2e 31 31 39 Data Ascii: 9-2.121-.424.306-.017.39-.1.34-.407-.034-.306.033-.374.441-.374.356,0,.508.085.542.306a.717.717,0,0,0,.153.424,5.034,5.034,0,0,0,2.137.186A1.426,1.426,0,0,0,172,18.8c.034-.7,0-.746-.577-1.034-.509-.238-.543-.272-.136-.187.543.1,1.12-.254.764-.475-.17-.119
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 2c 30 2c 30 2d 32 2e 32 2e 31 31 39 63 2d 2e 32 38 39 2e 32 33 37 2d 31 2e 30 31 38 2e 30 38 35 2d 2e 38 36 36 2d 2e 31 37 2e 30 36 38 2d 2e 30 38 35 2d 2e 30 31 37 2d 2e 31 35 32 2d 2e 31 35 32 2d 2e 31 35 32 2d 2e 31 35 33 2c 30 2d 2e 32 35 35 2e 30 38 34 2d 2e 32 32 31 2e 32 2e 30 31 37 2e 31 2d 2e 31 2e 32 33 38 2d 2e 32 37 31 2e 32 37 32 73 2d 2e 32 37 32 2d 2e 30 33 34 2d 2e 32 35 35 2d 2e 31 35 33 63 2e 30 33 34 2d 2e 31 31 39 2d 2e 31 2d 2e 32 35 35 2d 2e 32 38 38 2d 2e 32 38 39 73 2d 2e 32 38 38 2d 2e 30 31 36 2d 2e 32 2e 30 36 38 63 2e 30 36 38 2e 30 36 38 2d 2e 32 33 37 2e 32 37 32 2d 2e 36 37 38 2e 34 34 31 2d 2e 39 36 37 2e 33 37 34 2d 31 2e 30 36 39 2e 33 37 34 2d 2e 36 34 35 2e 30 38 35 2e 31 37 2d 2e 31 33 36 2e 32 35 35 2d 2e 33 32 32 2e Data Ascii: ,0,0-2.2.119c-.289.237-1.018.085-.866-.17.068-.085-.017-.152-.152-.152-.153,0-.255.084-.221.2.017.1-.1.238-.271.272s-.272-.034-.255-.153c.034-.119-.1-.255-.288-.289s-.288-.016-.2.068c.068.068-.237.272-.678.441-.967.374-1.069.374-.645.085.17-.136.255-.322.
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 35 31 61 2e 39 2e 39 2c 30 2c 30 2c 31 2d 2e 34 32 35 2c 30 63 2d 2e 31 31 38 2d 2e 30 35 31 2d 2e 30 33 33 2d 2e 30 38 35 2e 32 2d 2e 30 38 35 53 31 33 36 2e 39 35 32 2c 31 31 2e 34 32 34 2c 31 33 36 2e 38 35 31 2c 31 31 2e 34 37 35 5a 6d 2d 32 2e 35 34 35 2e 31 37 61 2e 38 39 33 2e 38 39 33 2c 30 2c 30 2c 31 2d 2e 34 32 34 2c 30 63 2d 2e 31 31 39 2d 2e 30 35 31 2d 2e 30 33 34 2d 2e 30 38 35 2e 32 2d 2e 30 38 35 53 31 33 34 2e 34 30 38 2c 31 31 2e 35 39 34 2c 31 33 34 2e 33 30 36 2c 31 31 2e 36 34 35 5a 6d 2d 32 37 2e 39 35 35 2c 31 2e 30 38 36 63 2e 31 38 37 2e 32 38 38 2d 2e 30 31 37 2e 33 35 36 2d 2e 32 35 34 2e 30 36 37 2d 2e 31 33 36 2d 2e 31 35 32 2d 2e 31 33 36 2d 2e 32 35 34 2d 2e 30 33 34 2d 2e 32 35 34 41 2e 33 36 39 2e 33 36 39 2c 30 2c 30 2c Data Ascii: 51a.9.9,0,0,1-.425,0c-.118-.051-.033-.085.2-.085S136.952,11.424,136.851,11.475Zm-2.545.17a.893.893,0,0,1-.424,0c-.119-.051-.034-.085.2-.085S134.408,11.594,134.306,11.645Zm-27.955,1.086c.187.288-.017.356-.254.067-.136-.152-.136-.254-.034-.254A.369.369,0,0,
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 61 74 68 20 69 64 3d 22 70 61 74 68 32 34 31 31 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 30 30 2e 32 31 2c 31 30 2e 32 33 37 63 2d 31 2e 33 32 33 2e 32 2d 31 2e 38 2e 34 34 31 2d 2e 38 38 32 2e 34 34 31 61 31 2e 38 34 36 2c 31 2e 38 34 36 2c 30 2c 30 2c 31 2c 2e 37 36 34 2e 31 33 36 63 2e 31 31 38 2e 30 36 38 2d 2e 33 32 33 2e 31 31 38 2d 2e 39 36 37 2e 31 31 38 2d 2e 38 36 35 2c 30 2d 31 2e 32 32 32 2e 30 36 38 2d 31 2e 33 34 2e 32 35 35 2d 2e 32 33 38 2e 33 39 2e 32 37 31 2e 35 36 2c 31 2e 33 39 31 2e 34 34 31 2c 31 2e 30 33 34 2d 2e 31 2c 31 2e 38 38 33 2d 2e 34 39 32 2c 31 2e 34 35 39 2d 2e 36 36 32 2d 2e 31 31 39 2d 2e 30 35 2e 30 33 33 2d 2e 30 35 2e 33 35 36 2c 30 2c 2e 34 30 37 2e 30 36 38 2e 35 34 33 2e 30 35 31 2e 34 35 38 Data Ascii: ath id="path2411" class="cls-1" d="M100.21,10.237c-1.323.2-1.8.441-.882.441a1.846,1.846,0,0,1,.764.136c.118.068-.323.118-.967.118-.865,0-1.222.068-1.34.255-.238.39.271.56,1.391.441,1.034-.1,1.883-.492,1.459-.662-.119-.05.033-.05.356,0,.407.068.543.051.458
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 33 38 38 2c 32 2e 33 38 38 2c 30 2c 30 2c 30 2d 31 2e 30 31 38 2e 30 38 34 63 2d 2e 31 37 2e 31 31 39 2d 2e 31 33 36 2e 31 35 33 2e 31 31 39 2e 31 37 2e 31 38 36 2c 30 2c 2e 32 35 34 2e 30 35 31 2e 31 35 33 2e 30 38 35 61 31 2e 30 31 32 2c 31 2e 30 31 32 2c 30 2c 30 2c 31 2d 2e 35 39 34 2d 2e 30 38 35 63 2d 2e 32 38 39 2d 2e 31 31 39 2d 2e 33 32 32 2d 2e 31 37 2d 2e 31 2d 2e 31 37 2e 31 35 33 2d 2e 30 31 37 2e 32 38 38 2d 2e 31 2e 32 38 38 2d 2e 32 2c 30 2d 2e 31 31 39 2d 2e 32 2d 2e 31 33 36 2d 2e 35 34 32 2d 2e 30 36 38 2d 2e 35 36 2e 31 2d 2e 35 36 2e 31 2d 2e 31 33 36 2d 2e 31 33 36 61 2e 37 35 36 2e 37 35 36 2c 30 2c 30 2c 31 2c 2e 37 34 36 2d 2e 30 36 38 41 35 2e 38 36 37 2c 35 2e 38 36 37 2c 30 2c 30 2c 30 2c 39 32 2e 36 37 39 2c 31 33 2e 30 37 5a Data Ascii: 388,2.388,0,0,0-1.018.084c-.17.119-.136.153.119.17.186,0,.254.051.153.085a1.012,1.012,0,0,1-.594-.085c-.289-.119-.322-.17-.1-.17.153-.017.288-.1.288-.2,0-.119-.2-.136-.542-.068-.56.1-.56.1-.136-.136a.756.756,0,0,1,.746-.068A5.867,5.867,0,0,0,92.679,13.07Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49762	104.26.3.70	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	587	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:01 UTC	1234	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPqBpAJPQh09sHW_-PXgqXWg_f9yHbuRo2Kekx-RsrTnN8HHfjqNgwiAVYTYzI6KOG61oD149DItPg x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Sat, 16 Dec 2023 06:30:30 GMT Cache-Control: public, max-age=86400 Age: 1075085 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fmhfEiw7ljXPNkD0ehuFOpGoKp%2FpfLfc6i2G6PxlNxfvEscHr3R%2BXXe81WWw%2BfBmBbmC5oRcI5B6AuXtW%2FPHYsfopQtW98MYZE%2B1a6su6vhf6swAMQBz33vBLFOtTjHP1g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23c44d3f72f9-DFW
2023-12-28 16:22:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49761	130.211.23.194	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	568	OUT	GET /mw/state?bt_env=prod HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:01 UTC	203	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Vary: Origin Date: Thu, 28 Dec 2023 16:22:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	172.67.144.62	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	373	OUT	GET /consent_modules.json HTTP/1.1 Host: privacy.gatekeeperconsent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:01 UTC	640	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=15780000, public Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yjT%2F8Sewr1taOUl5Iq0tnDRYsmAM%2BEWW3cRuDmrbmkTSdDsbWG4jXIdCXAVucHupY5t3sXauGwSrFDdbuq9cWCOfW9V7lpaUlYvFtAWTlOjr0h%2BMlX921vSgMc53hADYKZ4QD1tJrm8JccsHgY2YjQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23c45f922cbc-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:01 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49758	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	842	OUT	GET /images/icons/svg_dark/arrow_dropdown.svg HTTP/1.1 Host: www.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	354	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/svg+xml Content-Length: 315 Connection: close CF-Ray: 83cb23c3af37462a-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 13551 ETag: "62deda56-13b" Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT Vary: Accept-Encoding Server: cloudflare
2023-12-28 16:22:01 UTC	315	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49760	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	1096	OUT	GET /images/backgrounds/download/additional_content/flag.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/svg+xml Content-Length: 234 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-ea" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13534 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c3fcee46ce-DFW
2023-12-28 16:22:01 UTC	234	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 22 20 68 65 69 67 68 74 3d 22 38 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 38 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 74 69 74 6c 65 3e 41 72 74 62 6f 61 72 64 20 32 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 35 2e 32 39 32 20 34 34 2e 35 4c 30 20 38 39 68 31 30 30 56 30 48 30 6c 34 35 2e 32 39 32 20 34 34 2e 35 7a 4d 39 30 20 38 30 48 32 32 6c 33 35 2e 39 38 37 2d 33 35 2e 32 4c 32 32 20 39 68 36 38 76 37 31 7a 22 20 66 69 6c 6c 3d 22 23 33 39 34 45 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg width="100" height="89" viewBox="0 0 100 89" xmlns="http://www.w3.org/2000/svg"><title>Artboard 2</title><path d="M45.292 44.5L0 89h100V0H0l45.292 44.5zM90 80H22l35.987-35.2L22 9h68v71z" fill="#394EFF" fill-rule="evenodd"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49770	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	852	OUT	GET /images/backgrounds/download/social/fb_16x16.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	397	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/png Content-Length: 181 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-b5" Expires: Sat, 27 Jan 2024 12:23:43 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 7798 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c548076b51-DFW
2023-12-28 16:22:01 UTC	181	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 04 03 00 00 00 ed dd e2 52 00 00 00 30 50 4c 54 45 3c 5a 98 ff ff ff 6d 84 b3 55 6f a6 9e ad cc ce d6 e5 aa b7 d2 b6 c2 d9 6d 83 b2 b6 c1 d8 f3 f5 f9 54 6f a5 61 79 ab 85 98 bf 91 a2 c5 da e0 ec 6f 35 67 c2 00 00 00 40 49 44 41 54 08 5b 63 60 c0 0e 9e 86 41 68 36 41 51 08 83 4b de 17 c2 60 14 81 d0 dc 8d 92 3d 60 06 8b 20 54 0d 9c 01 57 83 c6 60 36 36 36 36 14 33 36 60 60 52 52 52 52 14 57 52 40 30 60 00 00 b4 96 06 e3 34 f7 35 c6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRR0PLTE<ZmUomToayo5g@IDAT[c`Ah6AQK`=` TW`666636``RRRRWR@0`45IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49767	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	849	OUT	GET /images/icons/svg_dark/check_circle_green.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/svg+xml Content-Length: 444 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1bc" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 12550 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c549526c51-DFW
2023-12-28 16:22:01 UTC	444	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49771	104.26.3.70	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	609	OUT	GET /px.gif?ch=1&e=0.32011031994343964 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:01 UTC	1228	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPqBpAJPQh09sHW_-PXgqXWg_f9yHbuRo2Kekx-RsrTnN8HHfjqNgwiAVYTYzI6KOG61oD149DItPg x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Sat, 16 Dec 2023 06:30:30 GMT Cache-Control: public, max-age=86400 Age: 1075085 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qBH%2FFHFWuibCoX46jKfdb72DcX0eqL0pSjTPUn2VK4zKMLmFHLCrVr74ckaZ79ekLaj2NQAm1fMbn3G6STv427cahxc4HwyB6HpD327aOF9jqLYo0dH%2F5MZsD88z7OLtYw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23c58be32e72-DFW
2023-12-28 16:22:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49764	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	841	OUT	GET /images/icons/svg_light/icons_sprite.svg HTTP/1.1 Host: www.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	356	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/svg+xml Content-Length: 37035 Connection: close CF-Ray: 83cb23c54c344617-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 6847 ETag: "62deda56-90ab" Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT Vary: Accept-Encoding Server: cloudflare
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 3c 73 76 67 0a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0a 77 69 64 74 68 3d 22 31 36 35 36 22 0a 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 44 65 66 69 6e 65 20 53 56 47 73 20 2d 2d 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 65 61 72 63 68 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 65 61 72 63 68 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a Data Ascii: <svgxmlns="http://www.w3.org/2000/svg"xmlns:xlink="http://www.w3.org/1999/xlink"width="1656"height="24"> ... Define SVGs --> <defs> ... search --> <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 36 22 20 77 69 64 74 68 3d 22 31 31 22 20 68 65 69 67 68 74 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 38 22 20 79 3d 22 31 31 22 20 77 69 64 74 68 3d 22 31 31 22 20 68 65 69 67 68 74 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 38 22 20 79 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 31 22 20 68 65 69 67 68 74 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 67 72 69 64 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 67 72 69 64 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d Data Ascii: 6" width="11" height="1"/> <rect x="8" y="11" width="11" height="1"/> <rect x="8" y="16" width="11" height="1"/> </symbol> ... grid --> <symbol id="grid" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin m
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 2e 34 39 2c 30 2c 30 2c 30 2d 2e 35 38 33 2d 31 2e 31 34 35 68 30 61 31 2e 31 31 31 2c 31 2e 31 31 31 2c 30 2c 30 2c 31 2d 2e 31 30 35 2d 31 2e 36 37 34 6c 31 2e 32 35 38 2d 31 2e 32 34 31 61 31 2e 33 36 38 2c 31 2e 33 36 38 2c 30 2c 30 2c 30 2c 2e 32 35 31 2d 31 2e 36 31 4c 31 32 2e 31 32 36 2c 35 2e 39 6c 2e 35 37 36 2d 2e 38 36 34 41 37 2e 30 31 2c 37 2e 30 31 2c 30 2c 30 2c 31 2c 31 39 2c 31 32 61 36 2e 39 33 36 2c 36 2e 39 33 36 2c 30 2c 30 2c 31 2d 31 2e 32 34 38 2c 33 2e 39 37 33 41 2e 35 39 33 2e 35 39 33 2c 30 2c 30 2c 31 2c 31 36 2e 38 31 32 2c 31 36 2e 30 32 38 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 61 64 64 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 Data Ascii: .49,0,0,0-.583-1.145h0a1.111,1.111,0,0,1-.105-1.674l1.258-1.241a1.368,1.368,0,0,0,.251-1.61L12.126,5.9l.576-.864A7.01,7.01,0,0,1,19,12a6.936,6.936,0,0,1-1.248,3.973A.593.593,0,0,1,16.812,16.028Z"/> </symbol> ... add --> <symbol i
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 33 33 33 2c 31 35 2e 36 32 32 61 32 2e 35 38 37 2c 32 2e 35 38 37 2c 30 2c 30 2c 30 2d 31 2e 37 34 32 2e 36 38 34 4c 39 2e 32 35 33 2c 31 32 2e 36 31 37 61 32 2e 34 35 38 2c 32 2e 34 35 38 2c 30 2c 30 2c 30 2c 30 2d 31 2e 32 34 34 4c 31 35 2e 35 32 2c 37 2e 37 31 39 61 32 2e 36 36 31 2c 32 2e 36 36 31 2c 30 2c 31 2c 30 2d 2e 38 35 33 2d 31 2e 39 34 36 2c 32 2e 38 37 32 2c 32 2e 38 37 32 2c 30 2c 30 2c 30 2c 2e 30 38 2e 36 32 32 4c 38 2e 34 38 2c 31 30 2e 30 34 38 61 32 2e 36 36 37 2c 32 2e 36 36 37 2c 30 2c 31 2c 30 2c 30 2c 33 2e 38 39 34 6c 36 2e 33 32 39 2c 33 2e 36 38 39 61 32 2e 34 38 38 2c 32 2e 34 38 38 2c 30 2c 30 2c 30 2d 2e 30 37 31 2e 35 38 36 2c 32 2e 36 2c 32 2e 36 2c Data Ascii: <path d="M17.333,15.622a2.587,2.587,0,0,0-1.742.684L9.253,12.617a2.458,2.458,0,0,0,0-1.244L15.52,7.719a2.661,2.661,0,1,0-.853-1.946,2.872,2.872,0,0,0,.08.622L8.48,10.048a2.667,2.667,0,1,0,0,3.894l6.329,3.689a2.488,2.488,0,0,0-.071.586,2.6,2.6,
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 33 20 39 20 31 31 20 39 20 31 31 20 37 20 39 20 37 20 39 20 39 20 37 20 39 20 37 20 31 31 20 39 20 31 31 20 39 20 31 33 20 31 31 20 31 33 20 31 31 20 31 31 20 31 33 20 31 31 20 31 33 20 39 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 7a 6f 6f 6d 20 6f 75 74 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 7a 6f 6f 6d 5f 6f 75 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f Data Ascii: on points="13 9 11 9 11 7 9 7 9 9 7 9 7 11 9 11 9 13 11 13 11 11 13 11 13 9"/> </symbol> ... zoom out --> <symbol id="zoom_out" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="no
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 34 2e 34 36 36 2c 31 34 2e 34 36 36 2c 30 2c 30 2c 31 2d 31 2e 35 33 36 2d 2e 38 2c 31 2e 36 32 34 2c 31 2e 36 32 34 2c 30 2c 30 2c 31 2d 2e 34 37 32 2d 2e 34 36 31 2c 31 2e 30 33 34 2c 31 2e 30 33 34 2c 30 2c 30 2c 31 2d 2e 31 34 39 2d 2e 35 35 38 2c 31 2e 30 35 36 2c 31 2e 30 35 36 2c 30 2c 30 2c 31 2c 2e 33 36 38 2d 2e 38 33 36 41 31 2e 35 35 32 2c 31 2e 35 35 32 2c 30 2c 30 2c 31 2c 31 32 2e 32 2c 38 2e 31 34 34 61 34 2e 38 36 2c 34 2e 38 36 2c 30 2c 30 2c 31 2c 31 2e 31 37 36 2e 31 34 39 2c 31 31 2e 34 37 39 2c 31 31 2e 34 37 39 2c 30 2c 30 2c 31 2c 31 2e 35 31 32 2e 35 32 33 6c 2e 37 38 31 2d 31 2e 38 38 32 61 31 31 2e 35 33 32 2c 31 31 2e 35 33 32 2c 30 2c 30 2c 30 2d 31 2e 36 39 31 2d 2e 35 39 34 2c 36 2e 36 39 34 2c 36 2e 36 39 34 2c 30 2c 30 2c Data Ascii: 4.466,14.466,0,0,1-1.536-.8,1.624,1.624,0,0,1-.472-.461,1.034,1.034,0,0,1-.149-.558,1.056,1.056,0,0,1,.368-.836A1.552,1.552,0,0,1,12.2,8.144a4.86,4.86,0,0,1,1.176.149,11.479,11.479,0,0,1,1.512.523l.781-1.882a11.532,11.532,0,0,0-1.691-.594,6.694,6.694,0,0,
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 72 73 73 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 38 22 20 63 79 3d 22 31 36 22 20 72 3d 22 32 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 37 2c 39 61 38 2e 32 36 32 2c 38 2e 32 36 32 2c 30 2c 30 2c 30 2d 31 2c 2e 30 36 76 32 2e 35 33 41 35 2e 35 30 38 2c 35 2e 35 30 38 2c 30 2c 30 2c 31 2c 31 32 Data Ascii: --> <symbol id="rss" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <circle cx="8" cy="16" r="2"/> <path d="M7,9a8.262,8.262,0,0,0-1,.06v2.53A5.508,5.508,0,0,1,12
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 31 32 20 31 34 20 31 36 20 31 30 20 38 20 31 30 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 65 64 69 74 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 65 64 69 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 70 6f 69 6e 74 73 3d 22 36 2e 31 35 20 31 34 2e 38 35 20 39 2e 31 37 20 31 37 Data Ascii: 12 14 16 10 8 10"/> </symbol> ... edit --> <symbol id="edit" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <polygon class="cls-1" points="6.15 14.85 9.17 17
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 48 31 35 41 34 2e 33 38 2c 34 2e 33 38 2c 30 2c 30 2c 30 2c 31 32 2c 31 38 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 38 2e 32 35 2c 35 68 2d 34 2e 35 41 31 2e 37 34 36 2c 31 2e 37 34 36 2c 30 2c 30 2c 30 2c 31 32 2c 36 2e 37 35 2c 31 2e 37 34 36 2c 31 2e 37 34 36 2c 30 2c 30 2c 30 2c 31 30 2e 32 35 2c 35 48 35 2e 37 35 41 31 2e 37 34 36 2c 31 2e 37 34 36 2c 30 2c 30 2c 30 2c 34 2c 36 2e 37 35 56 31 36 48 39 61 34 2e 33 38 2c 34 2e 33 38 2c 30 2c 30 2c 31 2c 33 2c 31 2c 34 2e 33 38 2c 34 2e 33 38 2c 30 2c 30 2c 31 2c 33 2d 31 68 35 56 36 2e 37 35 41 31 2e 37 34 36 2c 31 2e 37 34 36 2c 30 2c 30 2c 30 2c 31 38 2e 32 35 2c 35 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 Data Ascii: H15A4.38,4.38,0,0,0,12,18Z"/> <path d="M18.25,5h-4.5A1.746,1.746,0,0,0,12,6.75,1.746,1.746,0,0,0,10.25,5H5.75A1.746,1.746,0,0,0,4,6.75V16H9a4.38,4.38,0,0,1,3,1,4.38,4.38,0,0,1,3-1h5V6.75A1.746,1.746,0,0,0,18.25,5Z"/> </symbol>
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 32 20 34 20 36 20 34 20 36 20 32 30 20 31 31 20 32 30 20 31 32 20 32 30 20 31 38 20 32 30 20 31 38 20 31 30 20 31 32 20 31 30 20 31 32 20 34 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 2c 34 56 39 68 35 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 71 75 65 73 74 69 6f 6e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 71 75 65 73 74 69 6f 6e 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 Data Ascii: fill="none"/> <polygon points="12 4 6 4 6 20 11 20 12 20 18 20 18 10 12 10 12 4"/> <path d="M13,4V9h5Z"/> </symbol> ... question --> <symbol id="question" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49773	142.250.115.148	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	738	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:01 UTC	746	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Dec 2023 09:01:24 GMT Expires: Fri, 29 Dec 2023 09:01:24 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 26437 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:01 UTC	506	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2023-12-28 16:22:01 UTC	572	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49768	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	853	OUT	GET /images/backgrounds/header/mf_logo_full_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/svg+xml Content-Length: 3357 Connection: close Last-Modified: Fri, 28 Oct 2016 22:22:42 GMT ETag: "5813cfb2-d1d" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1392 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c55a854770-DFW
2023-12-28 16:22:01 UTC	1038	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 39 34 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 34 20 34 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 30 65 32 38 36 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 6d 66 5f 6c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 66 75 6c 6c 5f 63 6f 6c 6f 72 22 3e 3c 67 20 69 64 3d 22 66 6c 61 6d 65 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42"><defs><style>.cls-1{fill:#07f;}.cls-2{fill:none;}.cls-3{fill:#fff;}.cls-4{fill:#0e2866;}</style></defs><title>mf_logo</title><g id="full_color"><g id="flame"><path class=
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 31 32 2e 32 2c 32 2e 34 2d 31 32 2e 32 2c 32 2e 36 32 73 33 2e 31 2c 31 2e 35 33 2c 31 30 2e 37 2c 35 2e 32 32 41 32 37 2c 32 37 2c 30 2c 30 2c 30 2c 35 37 2e 33 35 2c 33 30 68 30 61 38 2c 38 2c 30 2c 31 2c 30 2c 30 2d 31 36 5a 22 2f 3e 3c 2f 67 3e 3c 67 20 69 64 3d 22 4d 65 64 69 61 46 69 72 65 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 38 37 2e 36 33 2c 36 2e 33 31 48 31 30 31 6c 2e 33 39 2c 31 36 2e 37 38 68 2e 30 39 4c 31 31 30 2c 36 2e 33 31 68 31 33 2e 36 38 6c 2d 36 2e 36 34 2c 33 31 2e 32 68 2d 38 2e 39 32 4c 31 31 33 2c 31 36 68 2d 2e 30 39 6c 2d 31 30 2e 32 33 2c 32 31 2e 35 48 39 35 2e 35 34 4c 39 34 2e 34 2c 31 36 68 2d 2e 30 39 4c 39 30 2c 33 37 2e 35 32 48 38 31 2e 31 31 5a 22 2f 3e 3c 70 61 74 68 20 63 6c Data Ascii: 12.2,2.4-12.2,2.62s3.1,1.53,10.7,5.22A27,27,0,0,0,57.35,30h0a8,8,0,1,0,0-16Z"/></g><g id="MediaFire"><path class="cls-4" d="M87.63,6.31H101l.39,16.78h.09L110,6.31h13.68l-6.64,31.2h-8.92L113,16h-.09l-10.23,21.5H95.54L94.4,16h-.09L90,37.52H81.11Z"/><path cl
2023-12-28 16:22:01 UTC	950	IN	Data Raw: 36 2e 31 37 41 31 34 2e 30 39 2c 31 34 2e 30 39 2c 30 2c 30 2c 30 2c 32 39 31 2e 32 2c 32 34 2e 31 39 5a 4d 32 38 33 2c 32 33 2e 36 32 68 2d 37 2e 36 39 63 2e 36 36 2d 32 2e 34 2c 32 2e 31 38 2d 33 2e 38 2c 34 2e 35 2d 33 2e 38 61 33 2c 33 2c 30 2c 30 2c 31 2c 33 2e 32 38 2c 33 2e 30 36 41 34 2e 33 37 2c 34 2e 33 37 2c 30 2c 30 2c 31 2c 32 38 33 2c 32 33 2e 36 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 32 36 35 2e 38 31 2c 32 32 6c 2e 39 32 2d 32 41 31 34 2e 34 32 2c 31 34 2e 34 32 2c 30 2c 30 2c 30 2c 32 36 35 2e 38 31 2c 32 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 32 36 39 2e 31 2c 31 34 2e 37 39 61 31 30 2e 36 37 2c 31 30 2e 36 37 2c 30 2c 30 2c 30 2d 33 2e 33 38 Data Ascii: 6.17A14.09,14.09,0,0,0,291.2,24.19ZM283,23.62h-7.69c.66-2.4,2.18-3.8,4.5-3.8a3,3,0,0,1,3.28,3.06A4.37,4.37,0,0,1,283,23.62Z"/><path class="cls-2" d="M265.81,22l.92-2A14.42,14.42,0,0,0,265.81,22Z"/><path class="cls-4" d="M269.1,14.79a10.67,10.67,0,0,0-3.38

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49769	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	853	OUT	GET /images/backgrounds/footer/social/footerIcons.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	399	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/png Content-Length: 583 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-247" Expires: Sat, 27 Jan 2024 11:36:43 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 12629 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c55d48e72e-DFW
2023-12-28 16:22:01 UTC	583	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 70 00 00 00 1c 08 06 00 00 00 b9 d6 3b 6a 00 00 02 0e 49 44 41 54 78 da ed 99 4d 4e 02 31 18 86 3d c2 70 02 c8 5c 00 13 0f 30 9c 00 bc 80 e3 ce e5 b8 64 83 86 25 0b 0d 6e 49 14 f7 84 9f 0b 10 f1 00 88 5c 60 f0 06 70 84 fa 2e 5e 92 a6 8b 06 e8 fc 58 f9 be e4 49 86 16 f8 98 3e d3 f6 1b e6 42 29 25 78 cc d9 0f 80 08 14 44 a0 20 02 45 a0 70 06 02 b5 08 c0 10 6c 80 22 9d 73 1f 4c 9f 04 be ee c5 89 40 3f 05 6e 35 71 3f e0 13 dc b8 fc 90 03 a3 0a 62 90 f0 78 1f 81 43 be 18 f4 c1 8c e7 b3 e3 71 dd c8 ad 7f c8 e5 3c 43 a0 2c b4 41 98 b7 40 45 dc 4f 8a 70 59 7e b3 c8 ab eb 17 0e e9 83 6f 50 3b 51 60 c2 d5 44 7f ad 40 13 20 8a 17 48 b6 20 f4 4d 60 03 28 8b c4 94 fd 26 53 90 9c 28 70 0b 3a 46 9e 0d 98 17 28 b0 Data Ascii: PNGIHDRp;jIDATxMN1=p\0d%nI\`p.^XI>B)%xD Epl"sL@?n5q?bxCq<C,A@EOpY~oP;Q`D@ H M`(&S(p:F(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49766	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	836	OUT	GET /images/filetype/file-app-v3.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:01 UTC	399	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:01 GMT Content-Type: image/png Content-Length: 2380 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-94c" Expires: Sat, 27 Jan 2024 12:31:33 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6598 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c55da12e1f-DFW
2023-12-28 16:22:01 UTC	970	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2b 00 00 00 3a 08 06 00 00 00 29 d7 a0 fe 00 00 09 13 49 44 41 54 78 5e ed 98 db 8b 5c 59 15 c6 d7 de a7 4e 55 9d aa ea 7b 67 3a 7d 0b da 3a b1 db 90 4e a6 33 88 20 86 8c 71 86 98 19 05 df 04 67 44 70 08 ce 9b 82 04 d4 67 7d 98 97 cc 43 20 2f be 89 ff 44 10 0d 04 62 02 19 7c 09 a4 2f e9 26 21 e9 9e ee 4e 9b e9 6b 55 57 9d cb 76 9d 6f 4e 16 bb ea b4 5d 75 44 a5 03 ae 64 b3 6b 9f eb 6f 7f e7 5b 6b ef 44 d1 db ef 13 c7 34 b7 cb 5f 9d 9a 7c cf 2b 97 5d fa 4f 87 22 aa ee ee f9 8b 0f 67 ff f4 cb 8f 7f 7f c3 90 91 13 d7 ce 8e 53 a7 91 e3 76 b1 50 2a fd ea 47 3f fd f1 99 e1 2f 7f 69 38 20 43 0a 7f 10 78 ac 42 8f 90 df aa 05 c6 18 74 07 85 a0 dd be f9 97 ee 6b 57 7f 43 bf f8 f8 77 37 28 7b 00 f6 f2 07 1f 7d Data Ascii: PNGIHDR+:)IDATx^\YNU{g:}:N3 qgDpg}C /Db\|/&!NkUWvoN]uDdko[kD4_\|+]O"gSvP*G?/i8 CxBtkWCw7({}
2023-12-28 16:22:01 UTC	1369	IN	Data Raw: 63 93 af 9f 79 70 e7 6f 97 13 1b 28 10 01 3a 81 94 74 01 05 01 54 16 01 95 5c 2f fb 03 5b d5 28 e9 31 80 bd 94 72 c8 ab 74 d1 67 6b 9f d1 e3 c7 8f 49 85 01 d8 d2 86 53 c2 a0 13 7f fb 8d 3a 55 bc 62 c8 83 ba b5 82 45 e8 53 2b 96 bc b9 b5 02 88 20 f2 2d ec aa 00 ad ed eb 58 dd ca e0 6b 80 8e 82 a0 f9 c1 d6 a4 21 84 b2 f7 c2 21 95 14 c3 d1 df 43 81 e5 a1 c0 a6 81 d3 ae b4 fb 83 b7 88 92 48 68 ca c9 93 e3 e5 c8 c9 17 2c 9f db c8 02 28 b0 9a 9b 62 2f 38 7e 4d 4a 17 6d 36 02 f2 f3 a1 b5 9f b5 ca 3c 8a 3c a5 61 fe c5 39 65 3b 58 54 83 39 48 1b ee 1d 97 00 6f 6f 78 24 24 8f 25 a7 fd f8 ce d0 17 58 1a c9 19 2a aa 00 08 0a f5 19 20 a9 1c b0 67 2f 60 0c 22 26 48 9f 17 1e 20 69 60 ca 92 6d 2b 2a fb 09 19 23 28 34 21 e5 f3 b9 04 43 3b 17 aa d5 ea 5f c5 43 47 2b 20 dc Data Ascii: cypo(:tT\/[(1rtgkIS:UbES+ -Xk!!CHh,(b/8~MJm6<<a9e;XT9Hoox$$%X* g/`"&H i`m+*#(4!C;_CG+
2023-12-28 16:22:01 UTC	41	IN	Data Raw: ff 43 cc f9 52 ca 71 6e 23 dc 3c 3a 7a b1 1a 83 b2 ca db ff 04 87 4b a0 ea 59 c7 df 87 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: CRqn#<:zKYIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49774	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	989	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:02 UTC	319	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:02 GMT Transfer-Encoding: chunked Connection: close access-control-allow-origin: * vary: accept-encoding location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/74bd6362/main.js cache-control: max-age=300, public Server: cloudflare CF-RAY: 83cb23c56d3ce51c-DFW
2023-12-28 16:22:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49772	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:01 UTC	598	OUT	POST /saa.go HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 2608 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:01 UTC	2608	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 22 2c 22 77 63 22 3a 32 34 31 2c 22 6e 70 76 22 3a 74 72 75 65 2c 22 61 73 6c 22 3a 7b 22 70 61 67 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 76 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 6f 75 74 73 74 72 65 61 6d 22 3a 66 61 6c 73 65 2c 22 61 64 73 65 6e 73 65 22 3a 66 61 6c 73 65 7d 2c 22 6f 72 69 67 22 3a 74 72 75 65 2c 22 70 64 22 3a 7b 22 6d 65 74 61 73 22 3a 5b 7b 22 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 7d 2c 7b 22 68 74 74 70 2d 65 71 75 69 76 22 3a 22 78 2d 75 61 Data Ascii: {"url":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe","wc":241,"npv":true,"asl":{"page":false,"display":false,"video":false,"outstream":false,"adsense":false},"orig":true,"pd":{"metas":[{"charset":"utf-8"},{"http-equiv":"x-ua
2023-12-28 16:22:02 UTC	620	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS Access-Control-Allow-Origin: https://www.mediafire.com Access-Control-Max-Age: 1728000 Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Content-Type: text/javascript Date: Thu, 28 Dec 2023 16:22:01 GMT Expires: Wed, 27 Dec 2023 16:22:01 GMT Server: Apache/2.4.39 (Ubuntu) Vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers X-Robots-Tag: noindex Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:02 UTC	2372	IN	Data Raw: 32 62 62 62 0d 0a 76 61 72 20 65 7a 41 6e 61 6c 79 74 69 63 73 44 65 66 69 6e 65 20 3d 20 22 76 61 72 20 5f 65 7a 5f 73 61 20 3d 20 74 72 75 65 3b 76 61 72 20 5f 5f 65 7a 3d 5f 5f 65 7a 7c 7c 7b 7d 3b 5f 5f 65 7a 2e 73 74 6d 73 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 5f 5f 65 7a 2e 65 76 74 3d 7b 7d 3b 5f 5f 65 7a 2e 73 63 72 69 70 74 3d 7b 7d 3b 5f 5f 65 7a 2e 63 6b 3d 5f 5f 65 7a 2e 63 6b 7c 7c 7b 7d 3b 5f 5f 65 7a 2e 74 65 6d 70 6c 61 74 65 3d 7b 7d 3b 5f 5f 65 7a 2e 74 65 6d 70 6c 61 74 65 2e 69 73 4f 72 69 67 3d 74 72 75 65 3b 5f 5f 65 7a 2e 71 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 2c 69 3d 30 2c 74 3d 5b 5d 2c 6e 3d 21 31 2c 6f 3d 5b 5d 2c 72 3d 5b 5d 2c 73 3d 21 30 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6e 2c 6f Data Ascii: 2bbbvar ezAnalyticsDefine = "var _ez_sa = true;var __ez=__ez\|\|{};__ez.stms=Date.now();__ez.evt={};__ez.script={};__ez.ck=__ez.ck\|\|{};__ez.template={};__ez.template.isOrig=true;__ez.queue=function(){var e=0,i=0,t=[],n=!1,o=[],r=[],s=!0,a=function(e,i,n,o
2023-12-28 16:22:02 UTC	1724	IN	Data Raw: 72 6f 72 3d 21 31 2c 74 68 69 73 2e 69 73 43 6f 6d 70 6c 65 74 65 3d 69 2c 74 68 69 73 2e 70 72 6f 63 65 65 64 49 66 45 72 72 6f 72 3d 21 31 2c 74 68 69 73 2e 69 73 54 69 6d 65 44 65 6c 61 79 3d 21 31 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 21 30 21 3d 3d 68 28 65 29 26 26 30 21 3d 73 26 26 65 2e 70 72 6f 63 65 73 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 30 3d 3d 3d 65 2e 69 73 54 69 6d 65 44 65 6c 61 79 26 26 21 31 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 66 28 65 2e 6e 61 6d 65 2b 5c 22 20 62 6c 6f 63 6b 65 64 20 3d 20 54 49 4d 45 20 44 45 4c 41 59 21 5c 22 29 2c 21 30 3b 69 66 28 70 28 65 2e 62 6c 6f 63 6b 65 64 42 79 29 29 66 6f 72 28 76 61 72 20 Data Ascii: ror=!1,this.isComplete=i,this.proceedIfError=!1,this.isTimeDelay=!1,this.process=function(){}};function c(e){!0!==h(e)&&0!=s&&e.process()}function h(e){if(!0===e.isTimeDelay&&!1===n)return f(e.name+\" blocked = TIME DELAY!\"),!0;if(p(e.blockedBy))for(var
2023-12-28 16:22:02 UTC	4744	IN	Data Raw: 67 74 68 29 7b 69 66 28 65 20 69 6e 20 74 29 7b 76 61 72 20 69 3d 74 5b 65 5d 3b 21 30 3d 3d 3d 69 2e 69 73 43 6f 6d 70 6c 65 74 65 3f 66 28 69 2e 6e 61 6d 65 2b 5c 22 20 5c 22 2b 65 2b 5c 22 3a 20 65 72 72 6f 72 20 6c 6f 61 64 65 64 20 64 75 70 6c 69 63 61 74 65 5c 22 29 3a 28 69 2e 69 73 43 6f 6d 70 6c 65 74 65 3d 21 30 2c 69 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 3d 21 30 29 7d 65 6c 73 65 20 74 5b 65 5d 3d 6e 65 77 20 64 28 65 2c 21 30 29 3b 66 28 5c 22 6d 61 72 6b 4c 6f 61 64 65 64 20 64 75 6d 6d 79 66 69 6c 65 3a 20 5c 22 2b 74 5b 65 5d 2e 6e 61 6d 65 29 7d 7d 2c 6c 6f 67 57 68 61 74 73 42 6c 6f 63 6b 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 74 29 21 31 21 3d 3d 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: gth){if(e in t){var i=t[e];!0===i.isComplete?f(i.name+\" \"+e+\": error loaded duplicate\"):(i.isComplete=!0,i.isInitialized=!0)}else t[e]=new d(e,!0);f(\"markLoaded dummyfile: \"+t[e].name)}},logWhatsBlocked:function(){for(var e in t)!1!==t.hasOwnPropert
2023-12-28 16:22:02 UTC	2361	IN	Data Raw: 7b 20 09 09 49 4c 31 31 49 4c 49 4c 49 49 6c 4c 4c 4c 49 4c 49 4c 4c 4c 4c 49 49 4c 4c 4c 49 49 4c 31 31 31 31 31 4c 4c 49 4c 69 69 4c 49 6c 69 4c 6c 49 4c 6c 4c 69 69 4c 4c 49 69 49 4c 4c 2e 64 65 73 74 72 6f 79 28 29 3b 20 09 09 49 4c 31 31 49 4c 49 4c 49 49 6c 4c 4c 4c 49 4c 49 4c 4c 4c 4c 49 49 4c 4c 4c 49 49 4c 31 31 31 31 31 4c 4c 49 4c 69 69 4c 49 6c 69 4c 6c 49 4c 6c 4c 69 69 4c 4c 49 69 49 4c 4c 2e 69 6e 69 74 28 29 3b 20 09 7d 20 09 69 66 20 28 74 79 70 65 6f 66 20 65 7a 6f 69 63 5f 6d 61 73 68 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 20 09 09 65 7a 6f 69 63 5f 6d 61 73 68 2e 64 65 73 74 72 6f 79 28 29 3b 20 09 09 65 7a 6f 69 63 5f 6d 61 73 68 2e 69 6e 69 74 28 29 3b 20 09 7d 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 65 Data Ascii: { IL11ILILIIlLLLILILLLLIILLLIIL11111LLILiiLIliLlILlLiiLLIiILL.destroy(); IL11ILILIIlLLLILILLLLIILLLIIL11111LLILiiLIliLlILlLiiLLIiILL.init(); } if (typeof ezoic_mash !== 'undefined') { ezoic_mash.destroy(); ezoic_mash.init(); } else if (typeof e
2023-12-28 16:22:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-12-28 16:22:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49775	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:02 UTC	861	OUT	GET /images/backgrounds/download/additional_content/world.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:02 UTC	335	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:02 GMT Content-Type: image/svg+xml Content-Length: 146658 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-23ce2" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1119 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c82d1b6c53-DFW
2023-12-28 16:22:02 UTC	1034	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 61 6c 6c 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 32 22 20 68 65 69 67 68 74 3d 22 32 31 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 32 20 32 31 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 61 62 64 64 61 34 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 74 69 74 6c 65 3e 77 6f 72 6c 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 20 69 64 3d 22 61 66 72 69 63 61 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 32 33 33 30 22 20 63 6c 61 Data Ascii: <svg id="all" xmlns="http://www.w3.org/2000/svg" width="402" height="210" viewBox="0 0 402 210"> <defs> <style> .cls-1 { fill: #abdda4; } </style> </defs> <title>world</title> <g id="africa"> <path id="path2330" cla
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 2d 31 2e 30 35 31 2c 31 2e 32 32 32 61 32 2e 33 2c 32 2e 33 2c 30 2c 30 2c 31 2d 2e 35 32 36 2e 38 31 34 63 2d 2e 34 35 38 2c 30 2d 31 2e 33 39 31 2c 31 2e 33 39 31 2d 31 2e 33 39 31 2c 32 2e 30 38 36 61 33 2e 31 36 37 2c 33 2e 31 36 37 2c 30 2c 30 2c 31 2d 31 2e 31 32 2c 31 2e 37 33 31 2c 34 2e 37 2c 34 2e 37 2c 30 2c 30 2c 30 2d 2e 37 36 33 2c 31 2e 33 35 37 2c 33 2e 32 35 33 2c 33 2e 32 35 33 2c 30 2c 30 2c 31 2d 2e 36 37 39 2c 31 2e 32 32 31 2c 31 2e 36 35 36 2c 31 2e 36 35 36 2c 30 2c 30 2c 30 2d 2e 34 30 37 2e 38 34 38 63 2d 2e 30 35 31 2e 33 35 36 2d 2e 31 35 32 2e 38 33 31 2d 2e 32 2c 31 2e 30 35 32 2d 2e 30 36 38 2e 32 38 38 2d 2e 30 33 34 2e 33 37 33 2e 31 33 35 2e 33 32 32 2e 31 31 39 2d 2e 30 33 34 2e 34 30 38 2e 31 31 39 2e 36 31 31 2e 33 33 Data Ascii: -1.051,1.222a2.3,2.3,0,0,1-.526.814c-.458,0-1.391,1.391-1.391,2.086a3.167,3.167,0,0,1-1.12,1.731,4.7,4.7,0,0,0-.763,1.357,3.253,3.253,0,0,1-.679,1.221,1.656,1.656,0,0,0-.407.848c-.051.356-.152.831-.2,1.052-.068.288-.034.373.135.322.119-.034.408.119.611.33
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 30 35 31 2e 33 33 39 2e 32 2e 33 33 39 2e 33 32 32 61 2e 36 31 31 2e 36 31 31 2c 30 2c 30 2c 30 2c 2e 32 33 37 2e 34 32 35 63 2e 33 32 33 2e 32 37 31 2e 31 37 2c 31 2e 39 31 36 2d 2e 32 35 34 2c 32 2e 37 36 34 2d 2e 32 32 31 2e 34 32 35 2d 2e 32 35 35 2e 36 34 35 2d 2e 31 31 39 2e 36 37 39 2e 31 31 39 2e 30 35 31 2e 31 35 33 2e 31 38 37 2e 30 35 31 2e 34 30 37 61 34 2e 39 2c 34 2e 39 2c 30 2c 30 2c 30 2d 2e 32 2c 31 2e 30 38 36 63 2d 2e 30 38 35 2e 37 32 39 2d 2e 33 30 36 2c 31 2e 30 38 35 2d 2e 35 39 34 2e 39 31 36 2d 2e 32 32 31 2d 2e 31 33 36 2d 2e 31 35 33 2e 33 33 39 2e 31 2e 38 38 32 2e 31 33 35 2e 32 37 31 2e 33 37 33 2e 38 2e 35 34 32 2c 31 2e 31 37 61 35 2e 33 37 34 2c 35 2e 33 37 34 2c 30 2c 30 2c 30 2c 2e 39 31 36 2c 31 2e 32 37 32 63 31 2e 32 Data Ascii: 051.339.2.339.322a.611.611,0,0,0,.237.425c.323.271.17,1.916-.254,2.764-.221.425-.255.645-.119.679.119.051.153.187.051.407a4.9,4.9,0,0,0-.2,1.086c-.085.729-.306,1.085-.594.916-.221-.136-.153.339.1.882.135.271.373.8.542,1.17a5.374,5.374,0,0,0,.916,1.272c1.2
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 2e 33 37 34 63 2e 31 38 37 2c 30 2c 2e 34 39 32 2d 2e 36 32 37 2e 39 31 36 2d 31 2e 39 35 31 2e 33 30 35 2d 2e 39 34 39 2e 33 37 33 2d 32 2e 32 30 35 2e 31 2d 32 2e 30 33 35 2d 2e 33 30 35 2e 31 38 37 2d 2e 31 37 2d 2e 32 32 31 2e 32 32 2d 2e 36 37 39 61 35 2e 35 34 32 2c 35 2e 35 34 32 2c 30 2c 30 2c 31 2c 31 2e 35 36 31 2d 2e 39 31 36 2c 33 2e 31 35 39 2c 33 2e 31 35 39 2c 30 2c 30 2c 30 2c 31 2e 35 37 38 2d 31 2e 30 33 34 63 2e 32 33 37 2d 2e 33 35 37 2e 33 32 32 2d 2e 36 32 38 2e 32 32 2d 2e 37 33 73 2d 2e 31 2d 2e 33 32 32 2e 30 31 37 2d 2e 36 31 61 33 2e 34 2c 33 2e 34 2c 30 2c 30 2c 30 2d 2e 30 33 34 2d 32 2e 31 32 31 2e 35 38 32 2e 35 38 32 2c 30 2c 30 2c 31 2d 2e 31 37 2d 2e 33 33 39 63 30 2d 2e 31 2e 30 38 35 2d 2e 30 36 38 2e 31 37 2e 30 36 38 Data Ascii: .374c.187,0,.492-.627.916-1.951.305-.949.373-2.205.1-2.035-.305.187-.17-.221.22-.679a5.542,5.542,0,0,1,1.561-.916,3.159,3.159,0,0,0,1.578-1.034c.237-.357.322-.628.22-.73s-.1-.322.017-.61a3.4,3.4,0,0,0-.034-2.121.582.582,0,0,1-.17-.339c0-.1.085-.068.17.068
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 31 2c 30 2c 30 2c 31 2d 2e 37 38 2e 31 31 38 2c 31 2e 30 32 31 2c 31 2e 30 32 31 2c 30 2c 30 2c 30 2d 2e 38 33 32 2e 32 35 35 2c 31 2e 33 36 31 2c 31 2e 33 36 31 2c 30 2c 30 2c 31 2d 31 2e 30 33 34 2e 32 37 31 2c 31 2e 36 34 32 2c 31 2e 36 34 32 2c 30 2c 30 2c 30 2d 31 2e 30 38 36 2e 32 32 31 63 2d 2e 38 38 32 2e 35 34 33 2d 31 2e 35 32 37 2e 33 32 32 2d 32 2e 32 2d 2e 37 34 37 61 31 2e 33 38 35 2c 31 2e 33 38 35 2c 30 2c 30 2c 30 2d 2e 37 31 33 2d 2e 35 35 39 6c 2d 2e 34 30 37 2d 2e 31 2e 33 39 2d 2e 32 63 2e 36 34 35 2d 2e 33 32 32 2e 35 37 37 2d 2e 38 31 34 2d 2e 32 33 37 2d 31 2e 36 36 32 61 31 32 2e 30 31 34 2c 31 32 2e 30 31 34 2c 30 2c 30 2c 31 2d 2e 39 38 34 2d 31 2e 31 33 37 63 2d 2e 31 33 36 2d 2e 31 38 36 2d 2e 33 32 32 2d 2e 33 35 36 2d 2e 34 Data Ascii: 1,0,0,1-.78.118,1.021,1.021,0,0,0-.832.255,1.361,1.361,0,0,1-1.034.271,1.642,1.642,0,0,0-1.086.221c-.882.543-1.527.322-2.2-.747a1.385,1.385,0,0,0-.713-.559l-.407-.1.39-.2c.645-.322.577-.814-.237-1.662a12.014,12.014,0,0,1-.984-1.137c-.136-.186-.322-.356-.4
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 32 2e 39 33 31 2c 32 2e 39 33 31 2c 30 2c 30 2c 31 2d 2e 39 33 33 2d 2e 34 37 35 2c 34 2e 38 33 2c 34 2e 38 33 2c 30 2c 30 2c 30 2d 32 2e 34 36 2d 2e 38 38 32 2c 31 2e 33 2c 31 2e 33 2c 30 2c 30 2c 31 2d 31 2e 32 35 35 2d 31 2e 30 33 35 2e 39 35 33 2e 39 35 33 2c 30 2c 30 2c 30 2d 2e 35 36 2d 2e 37 2c 39 2e 31 34 31 2c 39 2e 31 34 31 2c 30 2c 30 2c 31 2d 2e 39 35 2d 2e 34 34 31 2c 33 2e 33 31 35 2c 33 2e 33 31 35 2c 30 2c 30 2c 30 2d 31 2e 33 39 31 2d 2e 32 33 37 2c 33 2e 37 2c 33 2e 37 2c 30 2c 30 2c 31 2d 31 2e 35 37 37 2d 2e 33 63 2d 2e 36 37 39 2d 2e 33 34 2d 31 2e 31 33 37 2d 2e 38 36 36 2d 2e 39 31 36 2d 31 2e 30 38 36 2e 30 35 2d 2e 30 35 31 2d 2e 30 31 37 2d 2e 31 2d 2e 31 37 2d 2e 31 73 2d 2e 32 38 38 2e 30 36 38 2d 2e 32 38 38 2e 31 37 63 30 2c Data Ascii: 2.931,2.931,0,0,1-.933-.475,4.83,4.83,0,0,0-2.46-.882,1.3,1.3,0,0,1-1.255-1.035.953.953,0,0,0-.56-.7,9.141,9.141,0,0,1-.95-.441,3.315,3.315,0,0,0-1.391-.237,3.7,3.7,0,0,1-1.577-.3c-.679-.34-1.137-.866-.916-1.086.05-.051-.017-.1-.17-.1s-.288.068-.288.17c0,
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 30 38 35 2d 31 2e 31 31 39 2d 2e 31 31 39 2d 31 2e 38 36 36 2d 2e 30 35 31 2d 31 2e 32 32 31 2d 2e 30 33 34 2d 31 2e 33 30 36 2e 31 35 33 2d 2e 38 34 38 41 33 2e 34 38 33 2c 33 2e 34 38 33 2c 30 2c 30 2c 31 2c 32 32 36 2e 33 36 34 2c 31 32 36 2e 37 33 39 5a 6d 36 2e 31 30 37 2c 37 2e 37 36 39 61 33 2e 37 31 32 2c 33 2e 37 31 32 2c 30 2c 30 2c 31 2c 2e 32 33 37 2c 31 2e 31 2c 32 2c 32 2c 30 2c 30 2c 30 2c 2e 32 33 38 2e 39 36 36 63 2e 32 35 34 2e 32 35 35 2e 32 37 31 2e 39 33 33 2e 30 33 34 2c 31 2e 30 36 39 61 34 2e 36 34 31 2c 34 2e 36 34 31 2c 30 2c 30 2c 30 2c 2e 31 35 32 2c 32 2e 36 2e 32 37 32 2e 32 37 32 2c 30 2c 30 2c 31 2c 2e 31 38 37 2e 32 32 31 63 30 2c 2e 31 2d 2e 30 36 38 2e 31 31 39 2d 2e 31 37 2e 30 36 38 2d 2e 30 38 34 2d 2e 30 35 31 2d 2e Data Ascii: 085-1.119-.119-1.866-.051-1.221-.034-1.306.153-.848A3.483,3.483,0,0,1,226.364,126.739Zm6.107,7.769a3.712,3.712,0,0,1,.237,1.1,2,2,0,0,0,.238.966c.254.255.271.933.034,1.069a4.641,4.641,0,0,0,.152,2.6.272.272,0,0,1,.187.221c0,.1-.068.119-.17.068-.084-.051-.
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 32 38 37 2c 30 2c 30 2c 30 2c 2e 37 34 36 2d 32 2e 32 39 63 2e 32 2d 31 2e 32 32 31 2e 32 35 35 2d 31 2e 34 30 38 2e 34 37 35 2d 31 2e 33 35 37 2e 32 2e 30 33 34 2e 32 32 31 2d 2e 31 31 38 2e 30 31 37 2d 31 2e 34 30 38 6c 2d 2e 31 31 38 2d 2e 37 36 33 2e 33 33 39 2e 34 30 37 2e 33 33 39 2e 34 32 34 2e 32 38 38 2d 2e 35 34 33 63 2e 32 2d 2e 34 30 37 2e 32 33 38 2d 2e 36 32 37 2e 31 2d 2e 38 36 35 61 33 2e 33 36 32 2c 33 2e 33 36 32 2c 30 2c 30 2c 31 2d 2e 31 36 39 2d 31 2e 30 38 35 2c 35 2e 32 39 33 2c 35 2e 32 39 33 2c 30 2c 30 2c 30 2d 2e 31 38 37 2d 31 2e 33 32 34 2c 31 30 2e 32 34 31 2c 31 30 2e 32 34 31 2c 30 2c 30 2c 30 2d 31 2d 32 2e 31 38 38 43 32 35 31 2e 35 38 38 2c 31 33 37 2e 35 36 31 2c 32 35 31 2e 34 33 36 2c 31 33 37 2e 37 33 31 2c 32 35 31 Data Ascii: 287,0,0,0,.746-2.29c.2-1.221.255-1.408.475-1.357.2.034.221-.118.017-1.408l-.118-.763.339.407.339.424.288-.543c.2-.407.238-.627.1-.865a3.362,3.362,0,0,1-.169-1.085,5.293,5.293,0,0,0-.187-1.324,10.241,10.241,0,0,0-1-2.188C251.588,137.561,251.436,137.731,251
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 37 2c 30 2d 2e 32 33 37 2e 30 33 34 2d 2e 30 35 2e 31 35 33 2e 33 35 36 2e 32 32 2d 2e 31 37 2e 33 33 39 2d 31 2e 38 33 32 2e 33 39 6c 2d 31 2e 34 32 35 2e 30 33 34 2e 34 39 32 2e 33 39 63 2e 32 37 31 2e 32 32 2e 36 36 31 2e 35 36 2e 38 34 38 2e 37 34 36 61 32 2e 30 35 37 2c 32 2e 30 35 37 2c 30 2c 30 2c 30 2c 31 2e 31 35 33 2e 34 34 31 63 2e 34 32 34 2e 30 35 31 2e 37 38 31 2e 31 35 33 2e 37 38 31 2e 32 33 38 2c 30 2c 2e 30 36 38 2e 31 33 35 2e 31 36 39 2e 33 30 35 2e 32 2e 31 35 33 2e 30 35 31 2e 30 33 34 2e 30 38 35 2d 2e 32 37 32 2e 31 61 32 2e 34 33 32 2c 32 2e 34 33 32 2c 30 2c 30 2c 31 2d 31 2e 30 31 37 2d 2e 32 32 2c 31 33 2e 32 39 34 2c 31 33 2e 32 39 34 2c 30 2c 30 2c 30 2d 33 2e 31 38 39 2d 2e 37 33 2e 37 35 32 2e 37 35 32 2c 30 2c 30 2c 30 2d Data Ascii: 7,0-.237.034-.05.153.356.22-.17.339-1.832.39l-1.425.034.492.39c.271.22.661.56.848.746a2.057,2.057,0,0,0,1.153.441c.424.051.781.153.781.238,0,.068.135.169.305.2.153.051.034.085-.272.1a2.432,2.432,0,0,1-1.017-.22,13.294,13.294,0,0,0-3.189-.73.752.752,0,0,0-
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 31 2e 37 2d 2e 33 35 36 2d 31 2e 35 39 34 2d 2e 30 35 31 61 2e 34 34 31 2e 34 34 31 2c 30 2c 30 2c 31 2d 2e 31 35 33 2e 34 34 31 2c 31 2e 35 38 34 2c 31 2e 35 38 34 2c 30 2c 30 2c 30 2d 2e 32 32 2e 38 38 32 63 30 2c 2e 35 37 37 2d 2e 30 36 38 2e 37 31 33 2d 2e 35 30 39 2e 39 33 33 2d 2e 36 32 38 2e 33 32 32 2d 2e 36 36 32 2e 37 31 33 2d 2e 30 38 35 2e 39 33 33 61 2e 35 38 31 2e 35 38 31 2c 30 2c 30 2c 31 2c 2e 34 32 34 2e 36 36 32 63 30 2c 2e 35 34 33 2e 33 37 33 2e 39 35 2e 37 32 39 2e 38 31 34 61 31 2e 31 36 34 2c 31 2e 31 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 2e 32 33 37 2c 35 2e 31 37 31 2c 35 2e 31 37 31 2c 30 2c 30 2c 30 2c 2e 38 38 32 2e 34 39 32 63 2e 33 37 33 2e 31 35 33 2e 34 39 32 2e 34 32 34 2e 32 35 34 2e 35 36 61 34 2e 30 39 31 2c 34 2e 30 39 Data Ascii: 1.7-.356-1.594-.051a.441.441,0,0,1-.153.441,1.584,1.584,0,0,0-.22.882c0,.577-.068.713-.509.933-.628.322-.662.713-.085.933a.581.581,0,0,1,.424.662c0,.543.373.95.729.814a1.164,1.164,0,0,1,.73.237,5.171,5.171,0,0,0,.882.492c.373.153.492.424.254.56a4.091,4.09

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49778	104.26.2.70	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:02 UTC	350	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:02 UTC	1234	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPo_io1QDzPOHlfKtsspZIHSERdCJXmHym3SnfhBvGlHj1eR9QMK0-2lHpRToKPlkrKXu86yQkUCWQ x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Fri, 01 Dec 2023 12:48:57 GMT Cache-Control: public, max-age=86400 Age: 2346327 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vCObqRLXJrSXKlt4Xua44ZmVpgSE5wko5Zq6L5w9%2BUIpAzKfWZe2nhKfND0XpkN30E6f38RtCONn%2BQjwnbcoIv2oddnPEtJ%2BVMXur4rk7dvIuDKMY5S%2FntEN1JXebeLI%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23c93c073ac4-DFW
2023-12-28 16:22:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49784	104.26.2.70	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:02 UTC	372	OUT	GET /px.gif?ch=1&e=0.32011031994343964 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:02 UTC	1230	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPqBpAJPQh09sHW_-PXgqXWg_f9yHbuRo2Kekx-RsrTnN8HHfjqNgwiAVYTYzI6KOG61oD149DItPg x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Sat, 16 Dec 2023 06:30:30 GMT Cache-Control: public, max-age=86400 Age: 1075086 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NUVLa8cMYToYCbh8HgmPLVc1fcsRygc%2BxGJn3Ugil9I%2Fuk1yppO6YnscQ7QvzQ7Rg3plGuaVGJijdPPBd%2Bg8cMO9KOE4FW3TuHViY0Lp8kokAilJZvCrApPLhA3enDcWpw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23c97e362847-DFW
2023-12-28 16:22:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49776	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:02 UTC	860	OUT	GET /images/backgrounds/download/additional_content/flag.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:02 UTC	329	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:02 GMT Content-Type: image/svg+xml Content-Length: 234 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-ea" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 3724 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c88e886b97-DFW
2023-12-28 16:22:02 UTC	234	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 30 22 20 68 65 69 67 68 74 3d 22 38 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 38 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 74 69 74 6c 65 3e 41 72 74 62 6f 61 72 64 20 32 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 35 2e 32 39 32 20 34 34 2e 35 4c 30 20 38 39 68 31 30 30 56 30 48 30 6c 34 35 2e 32 39 32 20 34 34 2e 35 7a 4d 39 30 20 38 30 48 32 32 6c 33 35 2e 39 38 37 2d 33 35 2e 32 4c 32 32 20 39 68 36 38 76 37 31 7a 22 20 66 69 6c 6c 3d 22 23 33 39 34 45 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg width="100" height="89" viewBox="0 0 100 89" xmlns="http://www.w3.org/2000/svg"><title>Artboard 2</title><path d="M45.292 44.5L0 89h100V0H0l45.292 44.5zM90 80H22l35.987-35.2L22 9h68v71z" fill="#394EFF" fill-rule="evenodd"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49777	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:02 UTC	868	OUT	GET /images/backgrounds/download/additional_content/continent-na.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D
2023-12-28 16:22:02 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:02 GMT Content-Type: image/svg+xml Content-Length: 51223 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-c817" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 8515 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb23c8aeae4618-DFW
2023-12-28 16:22:02 UTC	1036	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 68 69 67 68 6c 69 67 68 74 5f 63 6f 6e 74 69 6e 65 6e 74 73 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 68 69 67 68 6c 69 67 68 74 20 63 6f 6e 74 69 6e 65 6e 74 73 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 32 22 20 68 65 69 67 68 74 3d 22 32 31 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 32 20 32 31 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 63 38 64 35 39 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 74 69 74 6c 65 3e 63 6f 6e 74 69 6e 65 6e 74 Data Ascii: <svg id="highlight_continents" data-name="highlight continents" xmlns="http://www.w3.org/2000/svg" width="402" height="210" viewBox="0 0 402 210"> <defs> <style> .cls-1 { fill: #fc8d59; } </style> </defs> <title>continent
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 31 35 33 73 2e 33 34 2e 31 2e 33 34 2e 32 33 38 63 30 2c 2e 31 31 38 2e 32 35 34 2e 33 30 35 2e 35 35 39 2e 34 30 37 2e 33 37 34 2e 31 31 38 2e 34 34 31 2e 31 36 39 2e 32 2e 31 38 36 61 31 2e 31 37 36 2c 31 2e 31 37 36 2c 30 2c 30 2c 30 2d 2e 35 37 37 2e 32 32 31 63 2d 2e 31 36 39 2e 31 38 36 2d 2e 32 2e 31 36 39 2d 2e 31 35 33 2d 2e 30 31 37 2e 30 33 34 2d 2e 31 33 36 2d 2e 31 31 38 2d 2e 32 35 35 2d 2e 33 35 36 2d 2e 32 38 39 61 31 2e 35 35 2c 31 2e 35 35 2c 30 2c 30 2c 31 2d 2e 37 32 39 2d 2e 34 30 37 63 2d 2e 32 33 38 2d 2e 32 35 34 2d 2e 35 34 33 2d 2e 33 33 39 2d 31 2e 31 35 34 2d 2e 33 33 39 2d 2e 34 35 38 2c 30 2d 2e 38 38 32 2e 30 36 38 2d 2e 39 33 33 2e 31 37 61 31 2e 31 31 36 2c 31 2e 31 31 36 2c 30 2c 30 2c 31 2d 2e 36 39 35 2e 31 36 39 63 2d Data Ascii: 153s.34.1.34.238c0,.118.254.305.559.407.374.118.441.169.2.186a1.176,1.176,0,0,0-.577.221c-.169.186-.2.169-.153-.017.034-.136-.118-.255-.356-.289a1.55,1.55,0,0,1-.729-.407c-.238-.254-.543-.339-1.154-.339-.458,0-.882.068-.933.17a1.116,1.116,0,0,1-.695.169c-
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 37 2e 30 36 38 2d 2e 31 33 36 2e 31 35 32 2e 30 38 35 2e 33 32 32 2e 31 38 36 2e 31 33 36 2e 32 32 2e 32 32 31 2e 31 2e 32 33 38 2d 2e 33 30 36 2c 30 2d 2e 32 37 32 2e 33 33 39 2e 30 33 34 2e 33 33 39 2e 31 33 35 2c 30 2c 2e 32 35 34 2d 2e 30 36 38 2e 32 35 34 2d 2e 31 35 33 2c 30 2d 2e 30 36 38 2e 33 37 33 2d 2e 31 2e 38 33 31 2d 2e 30 35 31 2e 37 34 37 2e 30 36 38 2e 39 2e 30 31 37 2c 31 2e 33 30 36 2d 2e 33 39 2e 33 37 34 2d 2e 33 37 33 2e 34 30 37 2d 2e 34 39 32 2e 32 32 31 2d 2e 36 32 38 2d 2e 31 38 37 2d 2e 31 31 38 2d 2e 31 38 37 2d 2e 31 38 36 2d 2e 30 31 37 2d 2e 32 35 34 61 2e 33 37 2e 33 37 2c 30 2c 30 2c 30 2c 2e 32 2d 2e 33 32 32 63 30 2d 2e 33 35 37 2c 31 2e 34 35 39 2d 2e 33 32 33 2c 31 2e 35 39 35 2e 30 33 34 61 2e 35 36 31 2e 35 36 31 2c Data Ascii: 7.068-.136.152.085.322.186.136.22.221.1.238-.306,0-.272.339.034.339.135,0,.254-.068.254-.153,0-.068.373-.1.831-.051.747.068.9.017,1.306-.39.374-.373.407-.492.221-.628-.187-.118-.187-.186-.017-.254a.37.37,0,0,0,.2-.322c0-.357,1.459-.323,1.595.034a.561.561,
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 31 2d 31 2e 32 33 39 2e 32 37 32 63 2d 31 2e 32 38 39 2e 30 31 37 2d 34 2e 38 31 37 2e 37 31 32 2d 34 2e 39 31 39 2e 39 38 34 2d 2e 30 33 34 2e 31 33 35 2e 31 37 2e 32 2e 37 31 33 2e 32 2e 34 32 34 2c 30 2c 2e 37 38 2e 30 36 38 2e 37 38 2e 31 37 2c 30 2c 2e 33 32 32 2d 2e 38 2e 35 36 2d 32 2e 33 37 35 2e 37 61 32 37 2e 36 34 38 2c 32 37 2e 36 34 38 2c 30 2c 30 2c 30 2d 35 2e 36 34 39 2e 38 38 32 6c 2d 2e 34 35 38 2e 32 33 38 2e 34 34 31 2e 31 38 36 61 31 2e 39 37 39 2c 31 2e 39 37 39 2c 30 2c 30 2c 30 2c 2e 37 34 37 2e 32 2e 36 30 37 2e 36 30 37 2c 30 2c 30 2c 31 2c 2e 34 30 37 2e 31 33 36 63 2e 30 33 34 2e 30 36 37 2d 2e 33 33 39 2e 31 31 38 2d 2e 38 34 38 2e 31 61 32 2e 30 36 34 2c 32 2e 30 36 34 2c 30 2c 30 2c 30 2d 31 2e 30 31 38 2e 31 31 39 63 2d 2e Data Ascii: 1-1.239.272c-1.289.017-4.817.712-4.919.984-.034.135.17.2.713.2.424,0,.78.068.78.17,0,.322-.8.56-2.375.7a27.648,27.648,0,0,0-5.649.882l-.458.238.441.186a1.979,1.979,0,0,0,.747.2.607.607,0,0,1,.407.136c.034.067-.339.118-.848.1a2.064,2.064,0,0,0-1.018.119c-.
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 34 2d 2e 30 38 35 2d 2e 38 34 38 2d 2e 30 35 31 2d 31 2e 32 35 36 2e 34 34 31 61 32 2e 31 35 33 2c 32 2e 31 35 33 2c 30 2c 30 2c 31 2d 2e 35 35 39 2e 35 32 36 2c 32 2e 35 33 39 2c 32 2e 35 33 39 2c 30 2c 30 2c 30 2d 2e 39 33 33 2c 31 2e 31 31 39 63 30 2c 2e 31 33 36 2e 31 33 35 2e 32 33 38 2e 33 2e 32 35 35 2e 32 32 31 2c 30 2c 2e 32 2e 30 33 34 2d 2e 30 38 35 2e 31 35 32 2d 2e 34 32 34 2e 31 37 2d 2e 38 31 34 2e 37 38 31 2d 2e 35 37 37 2e 39 31 36 2e 30 38 35 2e 30 35 31 2e 31 31 39 2e 32 37 32 2e 30 35 31 2e 34 37 35 2d 2e 30 36 37 2e 32 38 39 2d 2e 30 33 34 2e 33 34 2e 32 32 31 2e 32 35 35 2e 32 32 2d 2e 30 38 35 2e 32 37 31 2d 2e 30 35 31 2e 31 38 36 2e 31 33 36 2d 2e 30 35 2e 31 33 35 2d 2e 30 33 33 2e 32 35 34 2e 30 35 31 2e 32 35 34 73 2e 30 35 31 Data Ascii: 4-.085-.848-.051-1.256.441a2.153,2.153,0,0,1-.559.526,2.539,2.539,0,0,0-.933,1.119c0,.136.135.238.3.255.221,0,.2.034-.085.152-.424.17-.814.781-.577.916.085.051.119.272.051.475-.067.289-.034.34.221.255.22-.085.271-.051.186.136-.05.135-.033.254.051.254s.051
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 39 2d 32 2e 31 32 31 2d 2e 34 32 34 2e 33 30 36 2d 2e 30 31 37 2e 33 39 2d 2e 31 2e 33 34 2d 2e 34 30 37 2d 2e 30 33 34 2d 2e 33 30 36 2e 30 33 33 2d 2e 33 37 34 2e 34 34 31 2d 2e 33 37 34 2e 33 35 36 2c 30 2c 2e 35 30 38 2e 30 38 35 2e 35 34 32 2e 33 30 36 61 2e 37 31 37 2e 37 31 37 2c 30 2c 30 2c 30 2c 2e 31 35 33 2e 34 32 34 2c 35 2e 30 33 34 2c 35 2e 30 33 34 2c 30 2c 30 2c 30 2c 32 2e 31 33 37 2e 31 38 36 41 31 2e 34 32 36 2c 31 2e 34 32 36 2c 30 2c 30 2c 30 2c 31 37 32 2c 31 38 2e 38 63 2e 30 33 34 2d 2e 37 2c 30 2d 2e 37 34 36 2d 2e 35 37 37 2d 31 2e 30 33 34 2d 2e 35 30 39 2d 2e 32 33 38 2d 2e 35 34 33 2d 2e 32 37 32 2d 2e 31 33 36 2d 2e 31 38 37 2e 35 34 33 2e 31 2c 31 2e 31 32 2d 2e 32 35 34 2e 37 36 34 2d 2e 34 37 35 2d 2e 31 37 2d 2e 31 31 39 Data Ascii: 9-2.121-.424.306-.017.39-.1.34-.407-.034-.306.033-.374.441-.374.356,0,.508.085.542.306a.717.717,0,0,0,.153.424,5.034,5.034,0,0,0,2.137.186A1.426,1.426,0,0,0,172,18.8c.034-.7,0-.746-.577-1.034-.509-.238-.543-.272-.136-.187.543.1,1.12-.254.764-.475-.17-.119
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 2c 30 2c 30 2d 32 2e 32 2e 31 31 39 63 2d 2e 32 38 39 2e 32 33 37 2d 31 2e 30 31 38 2e 30 38 35 2d 2e 38 36 36 2d 2e 31 37 2e 30 36 38 2d 2e 30 38 35 2d 2e 30 31 37 2d 2e 31 35 32 2d 2e 31 35 32 2d 2e 31 35 32 2d 2e 31 35 33 2c 30 2d 2e 32 35 35 2e 30 38 34 2d 2e 32 32 31 2e 32 2e 30 31 37 2e 31 2d 2e 31 2e 32 33 38 2d 2e 32 37 31 2e 32 37 32 73 2d 2e 32 37 32 2d 2e 30 33 34 2d 2e 32 35 35 2d 2e 31 35 33 63 2e 30 33 34 2d 2e 31 31 39 2d 2e 31 2d 2e 32 35 35 2d 2e 32 38 38 2d 2e 32 38 39 73 2d 2e 32 38 38 2d 2e 30 31 36 2d 2e 32 2e 30 36 38 63 2e 30 36 38 2e 30 36 38 2d 2e 32 33 37 2e 32 37 32 2d 2e 36 37 38 2e 34 34 31 2d 2e 39 36 37 2e 33 37 34 2d 31 2e 30 36 39 2e 33 37 34 2d 2e 36 34 35 2e 30 38 35 2e 31 37 2d 2e 31 33 36 2e 32 35 35 2d 2e 33 32 32 2e Data Ascii: ,0,0-2.2.119c-.289.237-1.018.085-.866-.17.068-.085-.017-.152-.152-.152-.153,0-.255.084-.221.2.017.1-.1.238-.271.272s-.272-.034-.255-.153c.034-.119-.1-.255-.288-.289s-.288-.016-.2.068c.068.068-.237.272-.678.441-.967.374-1.069.374-.645.085.17-.136.255-.322.
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 35 31 61 2e 39 2e 39 2c 30 2c 30 2c 31 2d 2e 34 32 35 2c 30 63 2d 2e 31 31 38 2d 2e 30 35 31 2d 2e 30 33 33 2d 2e 30 38 35 2e 32 2d 2e 30 38 35 53 31 33 36 2e 39 35 32 2c 31 31 2e 34 32 34 2c 31 33 36 2e 38 35 31 2c 31 31 2e 34 37 35 5a 6d 2d 32 2e 35 34 35 2e 31 37 61 2e 38 39 33 2e 38 39 33 2c 30 2c 30 2c 31 2d 2e 34 32 34 2c 30 63 2d 2e 31 31 39 2d 2e 30 35 31 2d 2e 30 33 34 2d 2e 30 38 35 2e 32 2d 2e 30 38 35 53 31 33 34 2e 34 30 38 2c 31 31 2e 35 39 34 2c 31 33 34 2e 33 30 36 2c 31 31 2e 36 34 35 5a 6d 2d 32 37 2e 39 35 35 2c 31 2e 30 38 36 63 2e 31 38 37 2e 32 38 38 2d 2e 30 31 37 2e 33 35 36 2d 2e 32 35 34 2e 30 36 37 2d 2e 31 33 36 2d 2e 31 35 32 2d 2e 31 33 36 2d 2e 32 35 34 2d 2e 30 33 34 2d 2e 32 35 34 41 2e 33 36 39 2e 33 36 39 2c 30 2c 30 2c Data Ascii: 51a.9.9,0,0,1-.425,0c-.118-.051-.033-.085.2-.085S136.952,11.424,136.851,11.475Zm-2.545.17a.893.893,0,0,1-.424,0c-.119-.051-.034-.085.2-.085S134.408,11.594,134.306,11.645Zm-27.955,1.086c.187.288-.017.356-.254.067-.136-.152-.136-.254-.034-.254A.369.369,0,0,
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 61 74 68 20 69 64 3d 22 70 61 74 68 32 34 31 31 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 30 30 2e 32 31 2c 31 30 2e 32 33 37 63 2d 31 2e 33 32 33 2e 32 2d 31 2e 38 2e 34 34 31 2d 2e 38 38 32 2e 34 34 31 61 31 2e 38 34 36 2c 31 2e 38 34 36 2c 30 2c 30 2c 31 2c 2e 37 36 34 2e 31 33 36 63 2e 31 31 38 2e 30 36 38 2d 2e 33 32 33 2e 31 31 38 2d 2e 39 36 37 2e 31 31 38 2d 2e 38 36 35 2c 30 2d 31 2e 32 32 32 2e 30 36 38 2d 31 2e 33 34 2e 32 35 35 2d 2e 32 33 38 2e 33 39 2e 32 37 31 2e 35 36 2c 31 2e 33 39 31 2e 34 34 31 2c 31 2e 30 33 34 2d 2e 31 2c 31 2e 38 38 33 2d 2e 34 39 32 2c 31 2e 34 35 39 2d 2e 36 36 32 2d 2e 31 31 39 2d 2e 30 35 2e 30 33 33 2d 2e 30 35 2e 33 35 36 2c 30 2c 2e 34 30 37 2e 30 36 38 2e 35 34 33 2e 30 35 31 2e 34 35 38 Data Ascii: ath id="path2411" class="cls-1" d="M100.21,10.237c-1.323.2-1.8.441-.882.441a1.846,1.846,0,0,1,.764.136c.118.068-.323.118-.967.118-.865,0-1.222.068-1.34.255-.238.39.271.56,1.391.441,1.034-.1,1.883-.492,1.459-.662-.119-.05.033-.05.356,0,.407.068.543.051.458
2023-12-28 16:22:02 UTC	1369	IN	Data Raw: 33 38 38 2c 32 2e 33 38 38 2c 30 2c 30 2c 30 2d 31 2e 30 31 38 2e 30 38 34 63 2d 2e 31 37 2e 31 31 39 2d 2e 31 33 36 2e 31 35 33 2e 31 31 39 2e 31 37 2e 31 38 36 2c 30 2c 2e 32 35 34 2e 30 35 31 2e 31 35 33 2e 30 38 35 61 31 2e 30 31 32 2c 31 2e 30 31 32 2c 30 2c 30 2c 31 2d 2e 35 39 34 2d 2e 30 38 35 63 2d 2e 32 38 39 2d 2e 31 31 39 2d 2e 33 32 32 2d 2e 31 37 2d 2e 31 2d 2e 31 37 2e 31 35 33 2d 2e 30 31 37 2e 32 38 38 2d 2e 31 2e 32 38 38 2d 2e 32 2c 30 2d 2e 31 31 39 2d 2e 32 2d 2e 31 33 36 2d 2e 35 34 32 2d 2e 30 36 38 2d 2e 35 36 2e 31 2d 2e 35 36 2e 31 2d 2e 31 33 36 2d 2e 31 33 36 61 2e 37 35 36 2e 37 35 36 2c 30 2c 30 2c 31 2c 2e 37 34 36 2d 2e 30 36 38 41 35 2e 38 36 37 2c 35 2e 38 36 37 2c 30 2c 30 2c 30 2c 39 32 2e 36 37 39 2c 31 33 2e 30 37 5a Data Ascii: 388,2.388,0,0,0-1.018.084c-.17.119-.136.153.119.17.186,0,.254.051.153.085a1.012,1.012,0,0,1-.594-.085c-.289-.119-.322-.17-.1-.17.153-.017.288-.1.288-.2,0-.119-.2-.136-.542-.068-.56.1-.56.1-.136-.136a.756.756,0,0,1,.746-.068A5.867,5.867,0,0,0,92.679,13.07Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49785	142.250.115.148	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:02 UTC	501	OUT	GET /favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:02 UTC	746	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 1078 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Dec 2023 09:01:24 GMT Expires: Fri, 29 Dec 2023 09:01:24 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 08 May 2012 13:08:06 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 26438 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:02 UTC	506	IN	Data Raw: 00 00 01 00 02 00 10 10 10 00 00 00 00 00 28 01 00 00 26 00 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 4e 01 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 04 00 00 00 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: (& N(
2023-12-28 16:22:02 UTC	572	IN	Data Raw: 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49786	23.40.70.2	443

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-12-28 16:22:03 UTC	494	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=27963 Date: Thu, 28 Dec 2023 16:22:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49788	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	1375	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/74bd6362/main.js HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false
2023-12-28 16:22:03 UTC	300	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:03 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-content-type-options: nosniff cache-control: max-age=14400, public vary: accept-encoding Server: cloudflare CF-RAY: 83cb23cf5da3aa7f-DFW
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 31 63 61 36 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 52 2c 67 2c 68 2c 6d 2c 6e 2c 77 29 7b 52 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 51 2c 66 2c 79 29 7b 66 6f 72 28 51 3d 62 2c 66 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 79 3d 2d 70 61 72 73 65 49 6e 74 28 51 28 32 39 39 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 51 28 32 37 38 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 51 28 33 33 33 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 51 28 32 38 33 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 51 28 32 37 34 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 51 28 32 35 35 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 51 28 33 31 34 29 29 2f 37 2a 28 2d Data Ascii: 1ca6window._cf_chl_opt={cFPWv:'g'};~function(R,g,h,m,n,w){R=b,function(c,e,Q,f,y){for(Q=b,f=c();!![];)try{if(y=-parseInt(Q(299))/1(parseInt(Q(278))/2)+parseInt(Q(333))/3+-parseInt(Q(283))/4+parseInt(Q(274))/5(parseInt(Q(255))/6)+-parseInt(Q(314))/7*(-
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 2c 48 3d 33 2c 49 3d 32 2c 4a 3d 5b 5d 2c 4b 3d 30 2c 4c 3d 30 2c 4d 3d 30 3b 4d 3c 7a 5b 61 35 28 33 32 35 29 5d 3b 4d 2b 3d 31 29 69 66 28 4e 3d 7a 5b 61 35 28 32 33 39 29 5d 28 4d 29 2c 4f 62 6a 65 63 74 5b 61 35 28 33 33 37 29 5d 5b 61 35 28 33 30 36 29 5d 5b 61 35 28 32 36 30 29 5d 28 44 2c 4e 29 7c 7c 28 44 5b 4e 5d 3d 48 2b 2b 2c 45 5b 4e 5d 3d 21 30 29 2c 4f 3d 46 2b 4e 2c 4f 62 6a 65 63 74 5b 61 35 28 33 33 37 29 5d 5b 61 35 28 33 30 36 29 5d 5b 61 35 28 32 36 30 29 5d 28 44 2c 4f 29 29 46 3d 4f 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 61 35 28 33 33 37 29 5d 5b 61 35 28 33 30 36 29 5d 5b 61 35 28 32 36 30 29 5d 28 45 2c 46 29 29 7b 69 66 28 32 35 36 3e 46 5b 61 35 28 32 36 37 29 5d 28 30 29 29 7b 66 6f 72 28 43 3d 30 3b 43 3c 49 3b 4b 3c Data Ascii: ,H=3,I=2,J=[],K=0,L=0,M=0;M<z[a5(325)];M+=1)if(N=z[a5(239)](M),Object[a5(337)][a5(306)][a5(260)](D,N)\|\|(D[N]=H++,E[N]=!0),O=F+N,Object[a5(337)][a5(306)][a5(260)](D,O))F=O;else{if(Object[a5(337)][a5(306)][a5(260)](E,F)){if(256>F[a5(267)](0)){for(C=0;C<I;K<
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 4b 3c 3c 3d 31 2c 41 2d 31 3d 3d 4c 29 7b 4a 5b 61 35 28 32 34 35 29 5d 28 42 28 4b 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 4c 2b 2b 3b 72 65 74 75 72 6e 20 4a 5b 61 35 28 33 31 37 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 7a 2c 61 36 29 7b 72 65 74 75 72 6e 20 61 36 3d 61 33 2c 6e 75 6c 6c 3d 3d 7a 3f 27 27 3a 27 27 3d 3d 7a 3f 6e 75 6c 6c 3a 66 2e 69 28 7a 5b 61 36 28 33 32 35 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 41 2c 61 37 29 7b 72 65 74 75 72 6e 20 61 37 3d 61 36 2c 7a 5b 61 37 28 32 36 37 29 5d 28 41 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 7a 2c 41 2c 42 2c 61 38 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c Data Ascii: :L++,P>>=1,C++);for(;;)if(K<<=1,A-1==L){J[a5(245)](B(K));break}else L++;return J[a5(317)]('')},'j':function(z,a6){return a6=a3,null==z?'':''==z?null:f.i(z[a6(325)],32768,function(A,a7){return a7=a6,z[a7(267)](A)})},'i':function(z,A,B,a8,C,D,E,F,G,H,I,J,K,
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 28 32 36 32 29 5d 26 26 30 3c 63 5b 57 28 32 36 32 29 5d 5b 57 28 33 33 37 29 5d 5b 57 28 32 39 38 29 5d 5b 57 28 32 36 30 29 5d 28 65 29 5b 57 28 33 31 30 29 5d 28 57 28 32 38 36 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 54 2c 63 2c 65 2c 66 2c 79 29 7b 69 66 28 28 54 3d 52 2c 63 3d 67 5b 54 28 33 32 37 29 5d 2c 65 3d 33 36 30 30 2c 63 2e 74 29 26 26 28 66 3d 4d 61 74 68 5b 54 28 32 34 34 29 5d 28 2b 61 74 6f 62 28 63 2e 74 29 29 2c 79 3d 4d 61 74 68 5b 54 28 32 34 34 29 5d 28 44 61 74 65 5b 54 28 32 34 30 29 5d 28 29 2f 31 65 33 29 2c 79 2d 66 3e 65 29 29 72 65 74 75 72 6e 21 5b 5d 3b 72 65 74 75 72 6e 21 21 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 66 2c 79 2c 7a 2c 58 2c 41 29 7b 58 3d 52 3b 74 72 79 7b 72 65 74 75 72 6e 20 79 5b 7a 5d 5b 58 28 32 39 Data Ascii: (262)]&&0<c[W(262)][W(337)][W(298)][W(260)](e)[W(310)](W(286))}function j(T,c,e,f,y){if((T=R,c=g[T(327)],e=3600,c.t)&&(f=Math[T(244)](+atob(c.t)),y=Math[T(244)](Date[T(240)]()/1e3),y-f>e))return![];return!![]}function s(f,y,z,X,A){X=R;try{return y[z][X(29
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 5d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 61 2c 7a 29 7b 28 61 61 3d 61 39 2c 21 65 29 26 26 28 65 3d 21 21 5b 5d 2c 7a 3d 76 28 29 2c 6b 28 63 2e 72 2c 7a 2e 72 29 2c 7a 2e 65 26 26 6c 28 61 61 28 33 33 35 29 2c 7a 2e 65 2c 61 61 28 33 31 32 29 29 29 7d 2c 68 5b 61 39 28 32 39 35 29 5d 21 3d 3d 61 39 28 33 30 38 29 29 3f 66 28 29 3a 67 5b 61 39 28 32 37 32 29 5d 3f 68 5b 61 39 28 32 37 32 29 5d 28 61 39 28 33 30 31 29 2c 66 29 3a 28 79 3d 68 5b 61 39 28 33 32 34 29 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 68 5b 61 39 28 33 32 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 62 29 7b 61 62 3d 61 39 2c 79 28 29 2c 68 5b 61 62 28 32 39 35 29 5d 21 3d 3d 61 62 28 33 30 38 29 26 26 28 68 5b 61 62 28 33 32 34 29 5d 3d 79 2c 66 28 29 29 7d 29 7d 66 75 6e 63 74 Data Ascii: ],f=function(aa,z){(aa=a9,!e)&&(e=!![],z=v(),k(c.r,z.r),z.e&&l(aa(335),z.e,aa(312)))},h[a9(295)]!==a9(308))?f():g[a9(272)]?h[a9(272)](a9(301),f):(y=h[a9(324)]\|\|function(){},h[a9(324)]=function(ab){ab=a9,y(),h[ab(295)]!==ab(308)&&(h[ab(324)]=y,f())})}funct
2023-12-28 16:22:03 UTC	497	IN	Data Raw: 73 61 67 65 3a 20 3b 32 30 37 32 33 32 32 7a 76 77 78 6f 55 3b 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 3b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 6a 6f 69 6e 3b 20 2d 20 3b 69 73 41 72 72 61 79 3b 64 2e 63 6f 6f 6b 69 65 3b 5f 63 66 5f 63 68 6c 5f 6f 70 74 3b 64 6f 63 75 6d 65 6e 74 3b 72 65 6d 6f 76 65 43 68 69 6c 64 3b 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3b 6c 65 6e 67 74 68 3b 69 73 4e 61 4e 3b 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3b 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 61 70 70 65 6e 64 43 68 69 6c 64 3b 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 74 61 62 49 6e 64 65 78 3b 36 34 36 34 39 37 30 66 41 50 44 6b 43 3b 38 32 37 30 39 31 64 77 4d 78 70 79 3b Data Ascii: sage: ;2072322zvwxoU;setRequestHeader;display: none;join; - ;isArray;d.cookie;_cf_chl_opt;document;removeChild;onreadystatechange;length;isNaN;__CF$cv$params;getPrototypeOf;appendChild;application/x-www-form-urlencoded;tabIndex;6464970fAPDkC;827091dwMxpy;
2023-12-28 16:22:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49792	172.64.137.15	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	551	OUT	GET /detroitchicago/boise.js?gcb=195-8&cb=2 HTTP/1.1 Host: go.ezodn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:03 UTC	753	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:03 GMT Content-Type: application/javascript Content-Length: 926 Connection: close Cache-Control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex Last-Modified: Tue, 07 Nov 2023 20:19:31 GMT CF-Cache-Status: HIT Age: 4345343 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dpTm94K0GZ0dRqPvtqg5K0Lg7vUFZWha4QqwlA9pG9YCtVxDpWgR0TqKiAgKEev0Ne74AQPhAnjtNeqoQozhm%2FU%2FW2KBvgE3oXHCTrdneNvkhwLvDL7qDAVWltYm8EY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23cfddab2cdc-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:03 UTC	616	IN	Data Raw: 74 72 79 20 7b 20 5f 5f 65 7a 2e 63 6b 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 6e 75 6c 6c 21 3d 3d 6f 26 26 28 65 3d 65 2b 22 5f 22 2b 6f 29 3b 66 6f 72 28 76 61 72 20 6e 3d 65 2b 22 3d 22 2c 74 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 2e 73 70 6c 69 74 28 22 3b 22 29 2c 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 66 6f 72 28 76 61 72 20 63 3d 74 5b 69 5d 3b 22 20 22 3d 3d 3d 63 2e 63 68 61 72 41 74 28 30 29 3b 29 63 3d 63 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 69 66 28 30 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 6e 29 29 72 65 74 75 72 6e 20 63 2e 73 75 62 73 74 72 69 6e 67 28 6e 2e 6c 65 6e 67 74 68 2c 63 2e 6c 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 22 Data Ascii: try { __ez.ck.get=function(e,o){null!==o&&(e=e+"_"+o);for(var n=e+"=",t=decodeURIComponent(document.cookie).split(";"),i=0;i<t.length;i++){for(var c=t[i];" "===c.charAt(0);)c=c.substring(1);if(0===c.indexOf(n))return c.substring(n.length,c.length)}return"
2023-12-28 16:22:03 UTC	310	IN	Data Raw: 43 6f 6f 6b 69 65 73 5b 6f 5d 3d 5b 5d 29 2c 63 6d 70 43 6f 6f 6b 69 65 73 5b 6f 5d 2e 70 75 73 68 28 65 29 29 7d 7d 65 6c 73 65 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 7d 3b 7d 20 63 61 74 63 68 28 65 72 72 29 20 7b 76 61 72 20 68 52 45 45 44 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 72 29 20 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 28 65 72 2c 20 22 2f 64 65 74 72 6f 69 74 63 68 69 63 61 67 6f 2f 62 6f 69 73 65 2e 6a 73 22 29 7d 7d 3b 20 74 79 70 65 6f 66 20 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 52 45 45 44 28 65 72 72 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 44 Data Ascii: Cookies[o]=[]),cmpCookies[o].push(e))}}else document.cookie=e};} catch(err) {var hREED = function(er) {return function() {reportEzError(er, "/detroitchicago/boise.js")}}; typeof reportEzError==="function"?hREED(err):window.addEventListener('reportEzErrorD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49791	172.64.137.15	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	552	OUT	GET /parsonsmaize/abilene.js?gcb=195-8&cb=32 HTTP/1.1 Host: go.ezodn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:03 UTC	745	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex Last-Modified: Wed, 20 Dec 2023 00:47:07 GMT CF-Cache-Status: HIT Age: 747296 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZVGhB%2FuVivrloyGalKI8eueR%2FgWQrG0A0kjvHpMwx4F%2BK2Lwl%2FuKH8%2BKQNu9uInF70UMvws9EzGCXtenDN7fMbFDdm5d2%2BZMTdHNunBpwuFDUrmXmYoWgxNAHcpZ6CU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23d009414787-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:03 UTC	624	IN	Data Raw: 31 38 62 30 0d 0a 74 72 79 20 7b 20 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 77 69 6e 64 6f 77 2e 5f 5f 65 7a 44 6f 74 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 32 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 74 3d 65 5b 31 5d 2c 65 3d 65 5b 30 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 65 2c 74 68 69 73 2e 76 61 6c 3d 74 7d 2c 5f 5f 65 7a 2e 64 6f 74 2e 62 36 34 3d 7b 6b 65 79 53 74 Data Ascii: 18b0try { !function(){function e(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}window.__ezDotData=function(e,t){"string"!=typeof e&&2==e.length&&(t=e[1],e=e[0]),this.name=e,this.val=t},__ez.dot.b64={keySt
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 2b 74 68 69 73 2e 5f 6b 65 79 53 74 72 2e 63 68 61 72 41 74 28 64 29 3b 72 65 74 75 72 6e 20 66 7d 2c 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 6f 2c 69 2c 61 2c 64 3d 22 22 2c 66 3d 30 3b 66 6f 72 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 41 2d 5a 61 2d 7a 30 2d 39 2b 5c 2f 3d 5d 2f 67 2c 22 22 29 3b 66 3c 65 2e 6c 65 6e 67 74 68 3b 29 74 3d 74 68 69 73 2e 5f 6b 65 79 53 74 72 2e 69 6e 64 65 78 4f 66 28 65 2e 63 68 61 72 41 74 28 66 2b 2b 29 29 3c 3c 32 7c 28 6f 3d 74 68 69 73 2e 5f 6b 65 79 53 74 72 2e 69 6e 64 65 78 4f 66 28 65 2e 63 68 61 72 41 74 28 66 2b 2b 29 29 29 3e 3e 34 2c 6e 3d 28 31 35 26 6f 29 3c 3c 34 7c 28 69 3d 74 68 69 73 2e 5f 6b 65 79 53 74 72 2e 69 6e 64 65 78 4f 66 28 65 2e 63 68 61 Data Ascii: +this._keyStr.charAt(d);return f},decode:function(e){var t,n,r,o,i,a,d="",f=0;for(e=e.replace(/[^A-Za-z0-9+\/=]/g,"");f<e.length;)t=this._keyStr.indexOf(e.charAt(f++))<<2\|(o=this._keyStr.indexOf(e.charAt(f++)))>>4,n=(15&o)<<4\|(i=this._keyStr.indexOf(e.cha
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 5f 65 7a 61 71 26 26 5f 65 7a 61 71 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 6f 6d 61 69 6e 5f 69 64 22 29 26 26 28 65 3d 5f 65 7a 61 71 2e 64 6f 6d 61 69 6e 5f 69 64 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 65 7d 2c 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 45 70 6f 63 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 5f 65 7a 61 71 26 26 5f 65 7a 61 71 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 5f 65 70 6f 63 68 22 29 26 26 28 65 3d 5f 65 7a 61 71 2e 74 5f 65 70 6f 63 68 29 2c 65 7d 2c 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 50 61 67 65 76 69 65 77 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 Data Ascii: turn"undefined"!=typeof _ezaq&&_ezaq.hasOwnProperty("domain_id")&&(e=_ezaq.domain_id.toString()),e},__ez.dot.getEpoch=function(e){return"undefined"!=typeof _ezaq&&_ezaq.hasOwnProperty("t_epoch")&&(e=_ezaq.t_epoch),e},__ez.dot.getPageviewId=function(){var
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 2d 31 21 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 22 69 69 64 22 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 5b 72 5d 5b 30 5d 29 7b 74 3d 6e 5b 72 5d 5b 30 5d 3b 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 74 7d 2c 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 49 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 22 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 28 74 3d 76 6f 69 64 20 30 21 3d 3d 65 2e 45 6c 65 6d 65 6e 74 49 64 3f 65 2e 45 6c 65 6d 65 6e 74 49 64 3a 65 2e 67 65 74 53 6c 6f 74 45 6c 65 6d 65 6e 74 49 64 28 29 29 26 26 28 74 3d 22 22 29 2c 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 67 70 74 5f 75 6e 69 74 5f 22 29 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2f 22 29 3b 69 Data Ascii: -1!==r.indexOf("iid")&&void 0!==n[r][0]){t=n[r][0];break}}catch(e){}return t},__ez.dot.getElementId=function(e){var t="";if("string"!=typeof(t=void 0!==e.ElementId?e.ElementId:e.getSlotElementId())&&(t=""),-1!==t.indexOf("gpt_unit_")){var n=t.split("/");i
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 7b 73 3a 69 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3e 3d 74 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 74 5b 6f 2b 2b 5d 7d 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 65 7d 2c 66 3a 69 7d 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 Data Ascii: nction(){};return{s:i,n:function(){return o>=t.length?{done:!0}:{done:!1,value:t[o++]}},e:function(e){throw e},f:i}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iter
2023-12-28 16:22:03 UTC	228	IN	Data Raw: 45 44 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 72 29 20 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 28 65 72 2c 20 22 2f 70 61 72 73 6f 6e 73 6d 61 69 7a 65 2f 61 62 69 6c 65 6e 65 2e 6a 73 22 29 7d 7d 3b 20 74 79 70 65 6f 66 20 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 52 45 45 44 28 65 72 72 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 44 65 66 69 6e 65 64 27 2c 68 52 45 45 44 28 65 72 72 29 2c 20 7b 6f 6e 63 65 3a 20 74 72 75 65 7d 29 3b 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 72 72 29 3b 7d 0d 0a Data Ascii: ED = function(er) {return function() {reportEzError(er, "/parsonsmaize/abilene.js")}}; typeof reportEzError==="function"?hREED(err):window.addEventListener('reportEzErrorDefined',hREED(err), {once: true}); console.error(err);}
2023-12-28 16:22:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49793	130.211.23.194	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	555	OUT	GET /country HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:03 UTC	332	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-Control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600 Content-Type: application/json Vary: Origin Date: Thu, 28 Dec 2023 16:22:03 GMT Content-Length: 16 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:03 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49787	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	1419	OUT	GET /js/prebid8.10.0.js HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false
2023-12-28 16:22:03 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:03 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 83cb23cf9f2b6bba-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 3352 Cache-Control: max-age=2592000 ETag: W/"64ecb639-40a99" Expires: Sat, 27 Jan 2024 13:59:36 GMT Last-Modified: Mon, 28 Aug 2023 14:59:05 GMT Vary: Accept-Encoding Cf-Bgj: minify Cf-Polished: origSize=264857 Server: cloudflare
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 69 66 28 77 69 6e 64 6f 77 2e 70 62 6a 73 26 26 77 69 6e 64 6f 77 2e 70 62 6a 73 2e 6c 69 62 4c 6f 61 64 65 64 29 74 72 79 7b 77 69 6e 64 6f 77 2e 70 62 6a 73 2e 67 65 74 43 6f 6e 66 69 67 28 22 64 65 62 75 67 22 29 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 74 74 65 6d 70 74 65 64 20 74 6f 20 6c 6f 61 64 20 61 20 63 6f 70 79 20 6f 66 20 50 72 65 62 69 64 2e 6a 73 20 74 68 61 74 20 63 6c 61 73 68 65 73 20 77 69 74 68 20 74 68 65 20 65 78 69 73 74 69 6e 67 20 27 70 62 6a 73 27 20 69 6e 73 74 61 6e 63 65 2e 20 4c 6f 61 64 20 61 62 6f 72 74 65 64 2e 22 29 7d 63 61 74 63 68 28 65 29 7b 7d 65 6c 73 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 3d 7b 33 35 37 30 36 3a 66 75 6e 63 74 69 Data Ascii: 7ff2if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else(function(){!function(){var e,n={35706:functi
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 6e 74 52 65 73 6f 6c 76 65 72 28 6e 2c 64 6f 63 75 6d 65 6e 74 2c 74 29 29 2c 72 7c 7c 28 72 3d 64 6f 63 75 6d 65 6e 74 29 2c 65 2e 64 6f 63 75 6d 65 6e 74 43 6f 6e 74 65 78 74 3d 72 2c 65 2e 72 65 6e 64 65 72 28 6e 2c 65 2e 64 6f 63 75 6d 65 6e 74 43 6f 6e 74 65 78 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 6e 3d 75 2e 61 64 55 6e 69 74 73 2c 74 3d 28 30 2c 61 2e 73 45 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 63 6f 64 65 3d 3d 3d 65 7d 29 29 3b 69 66 28 21 74 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 72 3d 28 30 2c 6f 2e 5a 29 28 74 2c 22 72 65 6e 64 65 72 65 72 22 29 2c 69 3d 21 21 28 72 26 26 72 2e 75 72 6c 26 26 72 2e 72 65 6e 64 65 72 29 2c 63 3d 28 30 2c 6f 2e 5a 29 28 74 2c 22 6d 65 64 69 61 Data Ascii: ntResolver(n,document,t)),r\|\|(r=document),e.documentContext=r,e.render(n,e.documentContext)}function l(e){var n=u.adUnits,t=(0,a.sE)(n,(function(n){return n.code===e}));if(!t)return!1;var r=(0,o.Z)(t,"renderer"),i=!!(r&&r.url&&r.render),c=(0,o.Z)(t,"media
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 64 73 22 2c 63 3d 22 72 65 70 6f 72 74 41 6e 61 6c 79 74 69 63 73 22 2c 73 3d 22 74 72 61 6e 73 6d 69 74 45 69 64 73 22 2c 64 3d 22 74 72 61 6e 73 6d 69 74 55 66 70 64 22 2c 66 3d 22 74 72 61 6e 73 6d 69 74 50 72 65 63 69 73 65 47 65 6f 22 2c 6c 3d 22 74 72 61 6e 73 6d 69 74 54 69 64 22 7d 2c 31 30 32 38 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 72 3d 74 28 38 36 31 30 34 29 2c 69 3d 28 30 2c 74 28 31 36 33 31 30 29 2e 4f 6a 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 5a 50 2e 72 65 73 6f 6c 76 65 41 6c 69 61 73 28 65 29 7d 29 29 7d 2c 39 36 33 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 Data Ascii: ds",c="reportAnalytics",s="transmitEids",d="transmitUfpd",f="transmitPreciseGeo",l="transmitTid"},10286:function(e,n,t){t.d(n,{T:function(){return i}});var r=t(86104),i=(0,t(16310).Oj)((function(e){return r.ZP.resolveAlias(e)}))},9633:function(e,n,t){t.d(
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 36 35 29 2c 61 3d 74 28 33 31 39 33 29 2c 75 3d 74 28 35 30 35 37 31 29 2c 63 3d 74 28 37 34 39 34 37 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 6e 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 21 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 28 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 64 28 65 2c 6e 29 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 Data Ascii: 65),a=t(3193),u=t(50571),c=t(74947);function s(e,n){var t="undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(!t){if(Array.isArray(e)\|\|(t=function(e,n){if(!e)return;if("string"==typeof e)return d(e,n);var t=Object.prototype.toString.call(e)
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 29 26 26 69 28 29 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 67 65 74 28 6f 29 3b 76 6f 69 64 20 30 3d 3d 3d 61 3f 64 65 6c 65 74 65 20 74 5b 72 5d 3a 74 5b 72 5d 3d 61 7d 7d 7d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 61 74 68 73 3d 65 2e 70 61 74 68 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 74 3d 6e 2e 70 6f 70 28 29 3b 72 65 74 75 72 6e 5b 6e 2e 6c 65 6e 67 74 68 3e 30 3f 6e 2e 6a 6f 69 6e 28 22 2e 22 29 3a 6e 75 6c 6c 2c 74 5d 7d 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 Data Ascii: )&&i()){var a=this.get(o);void 0===a?delete t[r]:t[r]=a}}},e)}function v(e){return e.forEach((function(e){e.paths=e.paths.map((function(e){var n=e.split("."),t=n.pop();return[n.length>0?n.join("."):null,t]}))})),function(n,t){for(var r=[],a=arguments.leng
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 4b 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 63 2e 65 2c 70 61 74 68 73 3a 6c 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 65 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 63 2e 67 30 2c 70 61 74 68 73 3a 67 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 67 30 2c 65 29 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 28 65 2b 4e 75 6d 62 65 72 2e 45 50 53 49 4c 4f 4e 29 29 2f 31 30 30 7d 7d 2c 7b 6e 61 6d 65 3a 63 2e 4a 74 2c 70 61 74 68 73 3a 5b 22 73 6f 75 72 63 65 2e 74 69 64 22 5d 2c 61 70 70 6c 69 65 73 3a 62 28 63 2e 4a 74 2c 65 29 7d 5d 2e 6d 61 70 28 70 29 7d 76 61 72 20 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 Data Ascii: K,e)},{name:c.e,paths:l,applies:b(c.e,e)},{name:c.g0,paths:g,applies:b(c.g0,e),get:function(e){return Math.round(100*(e+Number.EPSILON))/100}},{name:c.Jt,paths:["source.tid"],applies:b(c.Jt,e)}].map(p)}var E=function(){var e=arguments.length>0&&void 0!==a
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 6f 2c 61 3d 21 30 2c 63 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 74 2e 63 61 6c 6c 28 65 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 61 3d 65 2e 64 6f 6e 65 2c 65 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 3d 21 30 2c 6f 3d 65 7d 2c 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 61 7c 7c 6e 75 6c 6c 3d 3d 74 2e 72 65 74 75 72 6e 7c 7c 74 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 74 68 72 6f 77 20 6f 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 6e 29 7b 28 6e 75 Data Ascii: ts must have a [Symbol.iterator]() method.")}var o,a=!0,c=!1;return{s:function(){t=t.call(e)},n:function(){var e=t.next();return a=e.done,e},e:function(e){c=!0,o=e},f:function(){try{a\|\|null==t.return\|\|t.return()}finally{if(c)throw o}}}}function u(e,n){(nu
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 6f 6e 65 3b 29 7b 76 61 72 20 66 3d 28 30 2c 72 2e 5a 29 28 63 2e 76 61 6c 75 65 2c 33 29 2c 6c 3d 66 5b 30 5d 2c 67 3d 66 5b 31 5d 2c 70 3d 66 5b 32 5d 3b 69 66 28 69 21 3d 3d 6c 26 26 6f 29 62 72 65 61 6b 3b 69 3d 6c 3b 76 61 72 20 76 3d 75 28 65 2c 67 2c 70 2c 6e 29 3b 69 66 28 76 29 7b 69 66 28 21 76 2e 61 6c 6c 6f 77 29 72 65 74 75 72 6e 20 64 28 76 29 2c 21 31 3b 6f 3d 76 7d 7d 7d 63 61 74 63 68 28 65 29 7b 73 2e 65 28 65 29 7d 66 69 6e 61 6c 6c 79 7b 73 2e 66 28 29 7d 72 65 74 75 72 6e 20 6f 26 26 64 28 6f 29 2c 21 30 7d 5d 7d 28 29 2c 73 3d 28 30 2c 72 2e 5a 29 28 63 2c 32 29 2c 64 3d 73 5b 30 5d 2c 66 3d 73 5b 31 5d 7d 2c 38 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 2e 64 28 6e 2c 7b 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: one;){var f=(0,r.Z)(c.value,3),l=f[0],g=f[1],p=f[2];if(i!==l&&o)break;i=l;var v=u(e,g,p,n);if(v){if(!v.allow)return d(v),!1;o=v}}}catch(e){s.e(e)}finally{s.f()}return o&&d(o),!0}]}(),s=(0,r.Z)(c,2),d=s[0],f=s[1]},875:function(e,n,t){t.d(n,{f:function(){re
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 30 30 35 39 29 2c 73 3d 74 28 31 34 36 39 39 29 2c 64 3d 74 28 34 38 39 32 38 29 2c 66 3d 74 28 33 31 39 33 29 2c 6c 3d 74 28 39 32 37 39 37 29 2c 67 3d 74 28 33 34 36 31 34 29 2c 70 3d 74 28 38 37 35 29 2c 76 3d 74 28 32 35 31 30 32 29 2c 68 3d 74 28 33 34 35 31 36 29 2c 6d 3d 74 28 35 32 30 32 31 29 2c 62 3d 74 28 35 36 34 34 29 2c 79 3d 74 28 39 39 31 32 38 29 2c 77 3d 74 28 37 38 36 35 33 29 2c 45 3d 74 28 39 36 33 33 29 2c 43 3d 74 28 35 30 35 37 31 29 2c 41 3d 74 28 37 34 39 34 37 29 2c 54 3d 74 28 31 36 33 31 30 29 2c 49 3d 74 28 34 31 30 38 37 29 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 6e 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c Data Ascii: 0059),s=t(14699),d=t(48928),f=t(3193),l=t(92797),g=t(34614),p=t(875),v=t(25102),h=t(34516),m=t(52021),b=t(5644),y=t(99128),w=t(78653),E=t(9633),C=t(50571),A=t(74947),T=t(16310),I=t(41087);function O(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbol
2023-12-28 16:22:03 UTC	1369	IN	Data Raw: 6e 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 6e 75 6c 6c 21 3d 69 2e 73 32 73 42 69 64 26 26 73 2e 70 75 73 68 28 7b 62 69 64 64 65 72 3a 6e 75 6c 6c 7d 29 2c 65 2e 70 75 73 68 28 73 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 73 3d 6e 75 6c 6c 3d 3d 28 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 6e 2c 7b 6f 72 74 62 32 49 6d 70 3a 28 30 2c 61 2e 6d 65 72 67 65 44 65 65 70 29 28 7b 7d 2c 69 2e 6f 72 74 62 32 49 6d 70 2c 6e 2e 6f 72 74 62 32 49 6d 70 29 7d 2c 28 30 2c 61 2e 67 65 74 44 65 66 69 6e 65 64 50 61 72 61 6d 73 29 28 69 2c 5b 22 6e 61 74 69 76 65 50 61 72 61 6d 73 22 2c 22 6e 61 74 69 76 65 4f 72 74 62 52 65 71 75 65 73 74 22 2c 22 6d 65 64 69 61 54 79 70 65 22 2c 22 72 65 6e 64 65 72 65 72 Data Ascii: n&&0===s.length&&null!=i.s2sBid&&s.push({bidder:null}),e.push(s.reduce((function(e,n){var s=null==(n=Object.assign({},n,{ortb2Imp:(0,a.mergeDeep)({},i.ortb2Imp,n.ortb2Imp)},(0,a.getDefinedParams)(i,["nativeParams","nativeOrtbRequest","mediaType","renderer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49790	172.64.137.15	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	545	OUT	GET /porpoiseant/et.js?gcb=195-8&cb=2 HTTP/1.1 Host: go.ezodn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:03 UTC	760	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:03 GMT Content-Type: application/javascript Content-Length: 1078 Connection: close Cache-Control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex Last-Modified: Wed, 29 Nov 2023 08:10:02 GMT CF-Cache-Status: HIT Age: 2517533 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OsgaybQ08qFs704ipcEaIyWOnLQom%2FDGKj7GB4jgA6Pu1Isdtkpm%2B0rK2RkXqKiqquNBQdFaQxM2pUR2bESi%2F5s7%2BT84DooJc8rXizUGfY5QkvZzJ80a6po8V%2FLF6OE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23cff9c1346d-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:03 UTC	609	IN	Data Raw: 76 61 72 20 67 65 74 45 7a 45 72 72 6f 72 55 52 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 65 66 61 75 6c 74 44 6f 6d 61 69 6e 3d 27 2f 2f 67 2e 65 7a 6f 69 63 2e 6e 65 74 27 3b 76 61 72 20 70 61 74 68 3d 27 2f 64 65 74 72 6f 69 74 63 68 69 63 61 67 6f 2f 65 72 6a 73 27 3b 69 66 28 74 79 70 65 6f 66 20 5f 5f 65 7a 2e 64 6f 74 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 5f 5f 65 7a 2e 64 6f 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 27 67 65 74 55 52 4c 27 29 29 7b 72 65 74 75 72 6e 20 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 55 52 4c 28 70 61 74 68 29 3b 7d 0a 72 65 74 75 72 6e 20 64 65 66 61 75 6c 74 44 6f 6d 61 69 6e 2b 70 61 74 68 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 28 65 72 72 2c 73 6e 29 7b 69 Data Ascii: var getEzErrorURL=function(){var defaultDomain='//g.ezoic.net';var path='/detroitchicago/erjs';if(typeof __ez.dot!=='undefined'&&__ez.dot.hasOwnProperty('getURL')){return __ez.dot.getURL(path);}return defaultDomain+path;}function reportEzError(err,sn){i
2023-12-28 16:22:03 UTC	469	IN	Data Raw: 6e 3a 70 61 72 73 65 49 6e 74 28 63 6f 6c 75 6d 6e 29 2c 65 72 72 6f 72 5f 74 79 70 65 3a 65 72 72 2e 6e 61 6d 65 2c 73 63 72 69 70 74 5f 75 72 6c 3a 73 63 72 69 70 74 55 72 6c 2c 75 72 6c 3a 5f 65 7a 61 71 2e 75 72 6c 2c 64 6f 6d 61 69 6e 5f 69 64 3a 5f 65 7a 61 71 2e 64 6f 6d 61 69 6e 5f 69 64 2c 70 61 67 65 76 69 65 77 5f 69 64 3a 5f 65 7a 61 71 2e 70 61 67 65 5f 76 69 65 77 5f 69 64 2c 66 6f 72 6d 5f 66 61 63 74 6f 72 5f 69 64 3a 5f 65 7a 61 71 2e 66 6f 72 6d 5f 66 61 63 74 6f 72 5f 69 64 2c 73 63 72 69 70 74 5f 6e 61 6d 65 3a 73 6e 7d 3b 76 61 72 20 64 61 74 61 54 78 74 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 72 72 6f 72 4d 65 73 73 61 67 65 29 3b 69 66 28 64 61 74 61 54 78 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 76 61 72 20 75 72 6c 3d 67 65 Data Ascii: n:parseInt(column),error_type:err.name,script_url:scriptUrl,url:_ezaq.url,domain_id:_ezaq.domain_id,pageview_id:_ezaq.page_view_id,form_factor_id:_ezaq.form_factor_id,script_name:sn};var dataTxt=JSON.stringify(errorMessage);if(dataTxt.length>0){var url=ge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49794	130.211.23.194	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	774	OUT	GET /pv?tid=OSkNpM4O&w=5115845767331840&o=5678961798414336&cv=2.1.26&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&sid=5Qkk0KZ78Q&pm=false&upapi=true HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:03 UTC	255	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Vary: Origin Date: Thu, 28 Dec 2023 16:22:03 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49798	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	341	OUT	GET /saa.go HTTP/1.1 Host: g.ezoic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:03 UTC	222	IN	HTTP/1.1 400 Bad Request Content-Length: 0 Content-Type: text/plain; charset=utf-8 Date: Thu, 28 Dec 2023 16:22:03 GMT Server: Apache/2.4.39 (Ubuntu) Vary: Accept-Encoding X-Robots-Tag: noindex Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49801	104.19.215.37	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	1115	OUT	GET /Tag.engine?time=-60&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=26604&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=60&fpe=1&bw=1280&bh=907&res=1280x1024&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone HTTP/1.1 Host: otnolatrnup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	1311	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:03 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Vary: Accept-Encoding Cache-Control: private, no-transform P3P: CP="CAO PSA OUR IND" Access-Control-Allow-Origin: * Set-Cookie: IKSR={}; path=/; SameSite=None; secure Set-Cookie: __INF_CC=; expires=Mon, 18-Dec-2023 16:22:03 GMT; path=/ Set-Cookie: INF_DFL8=false; path=/; SameSite=None; secure Set-Cookie: IUID=e52c68bd-2ec0-41bc-8bb4-23ef3441546f; expires=Wed, 28-Dec-2033 16:22:03 GMT; path=/; SameSite=None; secure Set-Cookie: ISSH=704416; path=/; SameSite=None; secure Set-Cookie: VMI=; path=/; SameSite=None; secure Set-Cookie: CHN=#[]; expires=Wed, 28-Dec-2033 16:22:03 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: MSSH=#{}; expires=Wed, 28-Dec-2033 16:22:03 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: MSRH=#{}; expires=Wed, 28-Dec-2033 16:22:03 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: ILP={"Profile":{"Audiences":{"Audience":[],"ThirdPartyAudience":[]}},"CreatedDate":"2023-12-28T16:22:03.9451729Z"}; expires=Wed, 28-Dec-2033 16:22:03 GMT; path=/; SameSite=None; secure
2023-12-28 16:22:04 UTC	1190	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 50 4c 55 3d 23 31 32 2f 32 38 2f 32 30 32 33 20 34 3a 32 32 3a 30 33 20 50 4d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 38 2d 44 65 63 2d 32 30 33 33 20 31 36 3a 32 32 3a 30 33 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 45 41 4c 43 3d 23 31 32 2f 32 38 2f 32 30 32 33 20 34 3a 32 32 3a 30 33 20 50 4d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 38 2d 44 65 63 2d 32 30 33 33 20 31 36 3a 32 32 3a 30 33 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 Data Ascii: Set-Cookie: ILPLU=#12/28/2023 4:22:03 PM; expires=Wed, 28-Dec-2033 16:22:03 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie: ILEALC=#12/28/2023 4:22:03 PM; expires=Wed, 28-Dec-2033 16:22:03 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie
2023-12-28 16:22:04 UTC	1369	IN	Data Raw: 38 34 38 0d 0a 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 4d 65 64 69 61 20 3d 20 7b 22 49 74 65 6d 73 22 3a 5b 5d 2c 22 43 6c 69 65 6e 74 53 69 64 65 46 69 6c 74 65 72 73 22 3a 6e 75 6c 6c 2c 22 44 65 63 69 73 69 6f 6e 50 72 6f 66 69 6c 65 49 64 22 3a 22 35 30 32 38 33 61 32 34 2d 32 39 65 33 2d 34 62 63 31 2d 39 63 31 31 2d 37 38 31 32 35 63 34 62 37 38 36 61 22 2c 22 44 65 63 69 73 69 6f 6e 50 72 6f 66 69 6c 65 22 3a 6e 75 6c 6c 2c 22 53 65 72 76 65 72 22 3a 22 49 4e 46 49 4e 49 54 59 57 45 42 31 22 7d 3b 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 4d 61 70 70 69 6e 67 50 69 78 65 6c 20 3d 20 7b 20 55 73 65 72 49 64 20 3a 20 27 65 Data Ascii: 848 g367CB268B1094004A3689751E7AC568F.Media = {"Items":[],"ClientSideFilters":null,"DecisionProfileId":"50283a24-29e3-4bc1-9c11-78125c4b786a","DecisionProfile":null,"Server":"INFINITYWEB1"}; g367CB268B1094004A3689751E7AC568F.MappingPixel = { UserId : 'e
2023-12-28 16:22:04 UTC	758	IN	Data Raw: 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 52 65 67 69 6f 6e 43 6f 64 65 22 3a 22 54 58 22 2c 22 43 69 74 79 22 3a 22 44 61 6c 6c 61 73 22 2c 22 49 50 22 3a 22 32 31 32 2e 31 30 32 2e 34 31 2e 32 22 2c 22 48 54 54 50 5f 43 46 5f 43 4f 4e 4e 45 43 54 49 4e 47 5f 49 50 22 3a 22 32 31 32 2e 31 30 32 2e 34 31 2e 32 22 2c 22 48 54 54 50 5f 58 5f 46 4f 52 57 41 52 44 45 44 5f 46 4f 52 22 3a 22 32 31 32 2e 31 30 32 2e 34 31 2e 32 22 2c 22 48 54 54 50 5f 58 5f 43 4c 55 53 54 45 52 5f 43 4c 49 45 4e 54 5f 49 50 22 3a 22 31 36 32 2e 31 35 38 2e 31 37 34 2e 31 31 39 22 7d 3b 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 50 75 62 4d 61 74 69 63 4d 61 70 70 69 6e 67 50 69 78 65 6c 20 3d 20 7b 20 53 Data Ascii: ountryCode":"US","RegionCode":"TX","City":"Dallas","IP":"212.102.41.2","HTTP_CF_CONNECTING_IP":"212.102.41.2","HTTP_X_FORWARDED_FOR":"212.102.41.2","HTTP_X_CLUSTER_CLIENT_IP":"162.158.174.119"}; g367CB268B1094004A3689751E7AC568F.PubMaticMappingPixel = { S
2023-12-28 16:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49803	172.64.137.15	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	551	OUT	GET /parsonsmaize/mulvane.js?gcb=195-8&cb=6 HTTP/1.1 Host: go.ezodn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	762	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:04 GMT Content-Type: application/javascript Content-Length: 1132 Connection: close Cache-Control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex Last-Modified: Fri, 08 Dec 2023 21:13:37 GMT CF-Cache-Status: HIT Age: 1710507 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FuPZyhNgN7M2EuPANNWwc0FdZTilXT6E2ol0FsXt0IB%2FsQrPO4oZkg2NkLxrMTvlU%2BfHzaCSENsi9Q9tG6jiy%2FjDQS0IchvZ%2FWnzeg3azcE%2BB2mgy373Mu2YkyfvMHs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23d3de214630-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:04 UTC	607	IN	Data Raw: 74 72 79 20 7b 20 5f 5f 65 7a 2e 62 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 5f 5f 65 7a 2e 64 6f 74 2e 69 73 44 65 66 69 6e 65 64 28 65 29 26 26 5f 5f 65 7a 2e 64 6f 74 2e 69 73 56 61 6c 69 64 28 74 29 26 26 69 2e 70 75 73 68 28 7b 74 79 70 65 3a 22 70 61 67 65 76 69 65 77 22 2c 70 61 67 65 76 69 65 77 5f 69 64 3a 65 2c 64 6f 6d 61 69 6e 5f 69 64 3a 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 44 49 44 28 29 2c 74 5f 65 70 6f 63 68 3a 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 45 70 6f 63 68 28 30 29 2c 64 61 74 61 3a 5f 5f 65 7a 2e 64 6f 74 2e 64 61 74 61 54 6f 53 74 72 28 74 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 Data Ascii: try { __ez.bit=function(){var i=[];function e(e,t){__ez.dot.isDefined(e)&&__ez.dot.isValid(t)&&i.push({type:"pageview",pageview_id:e,domain_id:__ez.dot.getDID(),t_epoch:__ez.dot.getEpoch(0),data:__ez.dot.dataToStr(t)})}function t(){if(void 0===document.vi
2023-12-28 16:22:04 UTC	525	IN	Data Raw: 6e 50 72 6f 70 65 72 74 79 28 22 76 69 73 69 74 5f 75 75 69 64 22 29 26 26 28 64 2b 3d 22 26 76 69 73 69 74 5f 75 75 69 64 3d 22 2b 20 2b 5f 65 7a 61 71 2e 76 69 73 69 74 5f 75 75 69 64 29 2c 5f 5f 65 7a 2e 64 6f 74 2e 46 69 72 65 28 64 29 7d 69 3d 5b 5d 7d 7d 72 65 74 75 72 6e 7b 41 64 64 3a 65 2c 41 64 64 41 6e 64 46 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 64 29 7b 65 28 69 2c 64 29 2c 74 28 29 7d 2c 46 69 72 65 3a 74 7d 7d 28 29 2c 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 65 7a 5f 62 69 74 5f 63 6d 64 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 77 69 6e 64 6f 77 2e 65 7a 5f 62 69 74 5f 63 6d 64 29 26 26 77 69 6e 64 6f 77 2e 65 7a 5f 62 69 74 5f 63 6d 64 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 66 75 6e 63 74 Data Ascii: nProperty("visit_uuid")&&(d+="&visit_uuid="+ +_ezaq.visit_uuid),__ez.dot.Fire(d)}i=[]}}return{Add:e,AddAndFire:function(i,d){e(i,d),t()},Fire:t}}(),void 0!==window.ez_bit_cmd&&Array.isArray(window.ez_bit_cmd)&&window.ez_bit_cmd.forEach((function(i){"funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49804	172.64.137.15	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:03 UTC	554	OUT	GET /detroitchicago/wichita.js?gcb=195-8&cb=12 HTTP/1.1 Host: go.ezodn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	743	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex Last-Modified: Wed, 20 Dec 2023 20:13:15 GMT CF-Cache-Status: HIT Age: 677326 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JsuSJ22HDxr78cdP5AeNMgQe6iUiw3%2BKsh%2BuFuBpP9wXE46e4%2F5iMfQP5i3IsnNcMwOXK%2FVi6pTgPzNN66MedioFyMrXt5NznpDE%2FNef1KqD80y5aIt5Lxe8Y7Kvwx8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23d3ee3d466b-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:04 UTC	626	IN	Data Raw: 61 35 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 69 29 7b 72 65 74 75 72 6e 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 65 28 69 29 7d 5f 5f 65 7a 2e 70 65 6c Data Ascii: a52!function(){function e(i){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(i)}__ez.pel
2023-12-28 16:22:04 UTC	1369	IN	Data Raw: 65 74 41 64 55 6e 69 74 50 61 74 68 28 69 29 2e 73 70 6c 69 74 28 22 2f 22 29 2e 70 6f 70 28 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 5f 65 7a 69 6d 5f 64 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 65 28 5f 65 7a 69 6d 5f 64 29 29 26 26 5f 65 7a 69 6d 5f 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 29 72 65 74 75 72 6e 20 5f 65 7a 69 6d 5f 64 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 5f 65 7a 69 6d 5f 64 29 69 66 28 6f 2e 73 70 6c 69 74 28 22 2f 22 29 2e 70 6f 70 28 29 3d 3d 3d 74 29 72 65 74 75 72 6e 20 5f 65 7a 69 6d 5f 64 5b 6f 5d 3b 72 65 74 75 72 6e 21 31 7d 28 74 29 3b 22 6f 62 6a 65 63 74 22 3d 3d 65 28 7a 29 26 26 28 76 6f 69 64 20 30 21 3d 3d 7a 2e 63 72 65 61 Data Ascii: etAdUnitPath(i).split("/").pop();if("object"===("undefined"==typeof _ezim_d?"undefined":e(_ezim_d))&&_ezim_d.hasOwnProperty(t))return _ezim_d[t];for(var o in _ezim_d)if(o.split("/").pop()===t)return _ezim_d[o];return!1}(t);"object"==e(z)&&(void 0!==z.crea
2023-12-28 16:22:04 UTC	654	IN	Data Raw: 74 69 6f 6e 28 65 2c 69 29 7b 74 28 65 2c 69 2c 30 2c 30 2c 30 2c 30 2c 30 2c 21 30 29 2c 6f 28 29 7d 2c 41 64 64 42 79 49 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 2c 64 2c 6e 29 7b 76 61 72 20 5f 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 3b 69 66 28 34 3d 3d 3d 5f 2e 6c 65 6e 67 74 68 26 26 28 5f 5b 30 5d 3d 5f 5b 30 5d 2b 22 2f 22 2b 5f 5b 31 5d 2c 5f 2e 73 70 6c 69 63 65 28 31 2c 31 29 29 2c 5f 5f 65 7a 2e 64 6f 74 2e 69 73 44 65 66 69 6e 65 64 28 65 29 26 26 33 3d 3d 3d 5f 2e 6c 65 6e 67 74 68 26 26 5f 5f 65 7a 2e 64 6f 74 2e 69 73 56 61 6c 69 64 28 74 29 29 7b 76 61 72 20 72 3d 5f 5b 30 5d 2c 70 3d 7b 74 79 70 65 3a 22 69 6d 70 72 65 73 73 69 6f 6e 22 2c 69 6d 70 72 65 73 73 69 6f 6e 5f 69 64 3a 5f 5b 32 5d 2c 64 6f 6d 61 69 6e 5f 69 64 3a 5f 5f Data Ascii: tion(e,i){t(e,i,0,0,0,0,0,!0),o()},AddById:function(e,t,o,d,n){var _=e.split("/");if(4===_.length&&(_[0]=_[0]+"/"+_[1],_.splice(1,1)),__ez.dot.isDefined(e)&&3===_.length&&__ez.dot.isValid(t)){var r=_[0],p={type:"impression",impression_id:_[2],domain_id:__
2023-12-28 16:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49805	172.64.137.15	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	553	OUT	GET /detroitchicago/raleigh.js?gcb=195-8&cb=7 HTTP/1.1 Host: go.ezodn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	741	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex Last-Modified: Wed, 20 Dec 2023 00:11:28 GMT CF-Cache-Status: HIT Age: 749285 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TQMz2DSTuaI0eI2YCgxhbCyBRcn5fiAGaDo3nlBjRPSJNH70A67Wa%2Bb%2BzE6CYltkxabCESFJSjiT0iQARiQHGIIEUnxpxqZj1ZI7zc0y3Fcny%2BtzbfG9HmmHKzM%2FIYU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23d3f873e95a-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:04 UTC	628	IN	Data Raw: 36 38 39 0d 0a 74 72 79 20 7b 20 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3b 5f 5f 65 7a 2e 61 75 63 65 70 3d 28 69 3d 5b 5d 2c 7b 41 64 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 5f 5f 65 7a 2e 64 6f 74 2e 69 73 44 65 66 69 6e 65 64 28 74 29 26 26 30 21 3d 5f 5f 65 7a 2e 64 6f 74 2e 69 73 41 6e 79 44 65 66 69 6e 65 64 28 74 2e 67 65 74 53 6c 6f 74 45 6c 65 6d 65 6e 74 49 64 2c 74 2e 45 6c 65 6d 65 6e 74 49 64 2c 74 2e 41 64 55 6e 69 74 50 61 74 68 29 29 7b 76 61 72 20 5f 3d 70 61 72 73 65 49 6e 74 28 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 54 61 72 67 65 74 69 6e 67 28 74 2c 22 61 70 22 29 29 2c 6f 3d 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 53 6c 6f 74 49 49 44 28 74 29 2c 64 3d 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 41 64 55 6e 69 74 28 74 Data Ascii: 689try { !function(){var i;__ez.aucep=(i=[],{Add:function(t,e){if(__ez.dot.isDefined(t)&&0!=__ez.dot.isAnyDefined(t.getSlotElementId,t.ElementId,t.AdUnitPath)){var _=parseInt(__ez.dot.getTargeting(t,"ap")),o=__ez.dot.getSlotIID(t),d=__ez.dot.getAdUnit(t
2023-12-28 16:22:04 UTC	1052	IN	Data Raw: 3a 65 2e 62 69 64 5f 66 6c 6f 6f 72 5f 66 69 6c 6c 65 64 2c 61 75 63 74 69 6f 6e 5f 63 6f 75 6e 74 3a 65 2e 61 75 63 74 69 6f 6e 5f 63 6f 75 6e 74 2c 72 65 66 72 65 73 68 5f 61 64 5f 63 6f 75 6e 74 3a 65 2e 72 65 66 72 65 73 68 5f 61 64 5f 63 6f 75 6e 74 2c 61 75 63 74 69 6f 6e 5f 64 75 72 61 74 69 6f 6e 3a 65 2e 61 75 63 74 69 6f 6e 5f 64 75 72 61 74 69 6f 6e 2c 6d 75 6c 74 69 5f 61 64 5f 75 6e 69 74 3a 65 2e 6d 75 6c 74 69 5f 61 64 5f 75 6e 69 74 2c 6d 75 6c 74 69 5f 61 64 5f 63 6f 75 6e 74 3a 65 2e 6d 75 6c 74 69 5f 61 64 5f 63 6f 75 6e 74 2c 69 73 5f 72 6c 3a 65 2e 69 73 5f 72 6c 2c 6e 65 74 77 6f 72 6b 5f 63 6f 64 65 3a 70 61 72 73 65 49 6e 74 28 6e 29 2c 64 61 74 61 3a 5f 5f 65 7a 2e 64 6f 74 2e 64 61 74 61 54 6f 53 74 72 28 5b 6e 65 77 20 5f 5f 65 Data Ascii: :e.bid_floor_filled,auction_count:e.auction_count,refresh_ad_count:e.refresh_ad_count,auction_duration:e.auction_duration,multi_ad_unit:e.multi_ad_unit,multi_ad_count:e.multi_ad_count,is_rl:e.is_rl,network_code:parseInt(n),data:__ez.dot.dataToStr([new __e
2023-12-28 16:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49807	172.64.137.15	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	551	OUT	GET /detroitchicago/vista.js?gcb=195-8&cb=5 HTTP/1.1 Host: go.ezodn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	758	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:04 GMT Content-Type: application/javascript Content-Length: 1067 Connection: close Cache-Control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex Last-Modified: Thu, 30 Nov 2023 11:08:47 GMT CF-Cache-Status: HIT Age: 2428087 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HknaIX9V6NKAmvf8L5IC2yFDJi6FM2PHnyAS%2BetQWMlZoLCZGmVOJU3%2BJn4VrC7d7PkfRm3keV2W4j3Vop%2Bcb34bI6M239biETVDhfOMVQuV%2F74NU9yIXh4sSfLezHI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23d41f093ab6-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:04 UTC	611	IN	Data Raw: 74 72 79 20 7b 20 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 5f 5f 65 7a 2e 65 78 74 72 61 3d 28 65 3d 5b 5d 2c 22 64 69 76 49 64 22 2c 7b 41 64 64 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 5f 5f 65 7a 2e 64 6f 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 65 7a 2e 64 6f 74 2e 69 73 44 65 66 69 6e 65 64 29 7b 69 66 28 5f 5f 65 7a 2e 64 6f 74 2e 69 73 44 65 66 69 6e 65 64 28 69 29 29 7b 69 66 28 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 69 76 49 64 22 29 29 7b 76 61 72 20 74 3d 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 45 7a 69 6d 46 72 6f 6d 45 6c 65 6d 65 6e 74 49 64 28 69 2e 64 69 76 49 64 29 3b 6e 75 6c 6c 21 3d 3d 74 26 26 28 69 2e 67 72 6f 75 70 5f 69 64 3d 74 2e 66 75 6c Data Ascii: try { !function(){var e;__ez.extra=(e=[],"divId",{Add:function(i){if(void 0!==__ez.dot&&"function"==typeof __ez.dot.isDefined){if(__ez.dot.isDefined(i)){if(i.hasOwnProperty("divId")){var t=__ez.dot.getEzimFromElementId(i.divId);null!==t&&(i.group_id=t.ful
2023-12-28 16:22:04 UTC	456	IN	Data Raw: 63 68 69 63 61 67 6f 2f 78 74 72 61 2e 67 69 66 22 29 3b 5f 5f 65 7a 2e 64 6f 74 2e 46 69 72 65 28 64 2c 74 29 7d 65 6c 73 65 20 65 2e 6c 65 6e 67 74 68 3e 30 26 26 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 5f 65 7a 2e 65 78 74 72 61 2e 46 69 72 65 28 29 7d 29 2c 31 65 33 29 7d 7d 29 2c 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 65 7a 5f 65 78 74 72 61 5f 63 6d 64 26 26 77 69 6e 64 6f 77 2e 65 7a 5f 65 78 74 72 61 5f 63 6d 64 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 28 29 7d 29 29 7d 28 29 3b 7d 20 63 61 74 63 68 28 65 72 72 29 20 7b 76 61 72 20 68 52 45 45 44 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 72 29 20 7b 72 65 74 75 72 6e Data Ascii: chicago/xtra.gif");__ez.dot.Fire(d,t)}else e.length>0&&setTimeout((function(){__ez.extra.Fire()}),1e3)}}),void 0!==window.ez_extra_cmd&&window.ez_extra_cmd.forEach((function(e){"function"==typeof e&&e()}))}();} catch(err) {var hREED = function(er) {return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49806	172.64.137.15	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	551	OUT	GET /detroitchicago/tampa.js?gcb=195-8&cb=6 HTTP/1.1 Host: go.ezodn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	750	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:04 GMT Content-Type: application/javascript Content-Length: 976 Connection: close Cache-Control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex Last-Modified: Fri, 22 Dec 2023 08:08:24 GMT CF-Cache-Status: HIT Age: 548017 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jSgxV3FPae8rnMW567akTIkgQ7zSDTndj5NogioTX7I%2BnPRYMghNvH8HeixwMrVaojSkcPX5YHbf3NKVPcMloLy55J0E5UCJ6OFQVuK9ZsHIO4MJH4DbYitAlifPT0g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23d438ed6bd4-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:04 UTC	619	IN	Data Raw: 74 72 79 20 7b 20 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3b 5f 5f 65 7a 2e 76 61 65 70 3d 28 69 3d 5b 5d 2c 7b 41 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 69 66 28 5f 5f 65 7a 2e 64 6f 74 2e 69 73 44 65 66 69 6e 65 64 28 65 29 26 26 5f 5f 65 7a 2e 64 6f 74 2e 69 73 56 61 6c 69 64 28 74 29 29 7b 76 61 72 20 64 3d 7b 74 79 70 65 3a 22 76 69 64 65 6f 2d 61 64 22 2c 76 69 64 65 6f 5f 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 5f 69 64 3a 65 2c 64 6f 6d 61 69 6e 5f 69 64 3a 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 44 49 44 28 29 2c 74 5f 65 70 6f 63 68 3a 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 45 70 6f 63 68 28 30 29 2c 64 61 74 61 3a 5f 5f 65 7a 2e 64 6f 74 2e 64 61 74 61 54 6f 53 74 72 28 74 29 7d 3b 6f 26 26 6f 2e 68 61 73 4f 77 6e 50 72 6f Data Ascii: try { !function(){var i;__ez.vaep=(i=[],{Add:function(e,t,o){if(__ez.dot.isDefined(e)&&__ez.dot.isValid(t)){var d={type:"video-ad",video_ad_impression_id:e,domain_id:__ez.dot.getDID(),t_epoch:__ez.dot.getEpoch(0),data:__ez.dot.dataToStr(t)};o&&o.hasOwnPro
2023-12-28 16:22:04 UTC	357	IN	Data Raw: 6f 6e 2e 67 69 66 22 29 2b 22 3f 6f 72 69 67 3d 22 2b 28 21 30 3d 3d 3d 5f 5f 65 7a 2e 74 65 6d 70 6c 61 74 65 2e 69 73 4f 72 69 67 3f 31 3a 30 29 2b 22 26 76 61 3d 22 2b 62 74 6f 61 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 3b 5f 5f 65 7a 2e 64 6f 74 2e 46 69 72 65 28 6f 29 7d 69 3d 5b 5d 7d 7d 7d 29 7d 28 29 3b 7d 20 63 61 74 63 68 28 65 72 72 29 20 7b 76 61 72 20 68 52 45 45 44 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 72 29 20 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 28 65 72 2c 20 22 2f 64 65 74 72 6f 69 74 63 68 69 63 61 67 6f 2f 74 61 6d 70 61 2e 6a 73 22 29 7d 7d 3b 20 74 79 70 65 6f 66 20 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 52 45 Data Ascii: on.gif")+"?orig="+(!0===__ez.template.isOrig?1:0)+"&va="+btoa(JSON.stringify(t));__ez.dot.Fire(o)}i=[]}}})}();} catch(err) {var hREED = function(er) {return function() {reportEzError(er, "/detroitchicago/tampa.js")}}; typeof reportEzError==="function"?hRE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49802	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	1611	OUT	POST /cdn-cgi/challenge-platform/h/g/jsd/r/83cb23b5ed942cae HTTP/1.1 Host: www.mediafire.com Connection: keep-alive Content-Length: 15837 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _ga=GA1.2.1411026819.1703780523; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1
2023-12-28 16:22:04 UTC	15837	OUT	Data Raw: 7b 22 77 70 22 3a 22 24 2d 73 43 47 37 4b 30 47 31 73 47 6b 54 67 4b 53 4b 2b 61 4c 43 37 50 61 55 52 61 69 76 69 39 39 37 30 4b 57 38 61 46 72 50 78 72 4d 73 61 70 46 79 48 67 72 31 4b 44 61 6b 53 73 56 4e 2d 2d 61 55 68 39 61 5a 61 39 50 39 73 4b 61 63 39 4b 6d 67 58 43 68 31 2d 35 75 66 43 46 72 77 2d 52 55 33 44 2b 54 56 36 43 6d 77 47 74 52 6e 4b 33 38 46 68 69 61 47 73 73 65 69 70 37 35 4e 61 41 56 4e 4d 6c 35 61 6c 43 54 70 61 37 74 73 61 69 43 37 37 43 77 6b 43 69 61 4b 72 61 4c 31 45 61 4b 6e 35 61 4f 4a 30 55 56 2d 79 4b 55 68 4e 73 61 37 4a 35 61 37 67 48 4c 61 48 37 61 4b 35 63 4d 62 73 66 44 52 50 37 56 37 4b 6c 6d 52 2d 38 47 77 6a 34 6c 46 61 76 43 37 69 51 59 2d 61 30 45 2d 72 54 4d 46 32 63 56 61 48 34 6c 68 77 76 55 43 61 62 68 76 4d 69 Data Ascii: {"wp":"$-sCG7K0G1sGkTgKSK+aLC7PaURaivi9970KW8aFrPxrMsapFyHgr1KDakSsVN--aUh9aZa9P9sKac9KmgXCh1-5ufCFrw-RU3D+TV6CmwGtRnK38FhiaGsseip75NaAVNMl5alCTpa7tsaiC77CwkCiaKraL1EaKn5aOJ0UV-yKUhNsa7J5a7gHLaH7aK5cMbsfDRP7V7KlmR-8Gwj4lFavC7iQY-a0E-rTMF2cVaH4lhwvUCabhvMi
2023-12-28 16:22:04 UTC	421	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:04 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; path=/; expires=Fri, 27-Dec-24 16:22:04 GMT; domain=.mediafire.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 83cb23d3991b2d35-DFW
2023-12-28 16:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49800	34.218.121.115	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	636	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1065 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	1065	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 61 31 35 63 63 36 35 31 62 33 33 37 35 33 66 32 32 39 32 39 65 35 37 61 39 34 65 63 33 38 34 39 26 63 6c 69 65 6e 74 3d 32 38 39 31 36 62 36 63 64 36 30 63 37 39 63 30 34 34 37 62 33 63 32 33 61 64 36 39 38 63 39 38 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 59 73 30 72 52 68 43 6a 43 2d 72 68 55 70 6d 46 69 69 62 37 73 73 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 30 33 37 38 30 35 32 32 36 30 30 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 30 33 37 38 30 35 32 32 35 39 39 25 32 43 25 32 32 Data Ascii: checksum=a15cc651b33753f22929e57a94ec3849&client=28916b6cd60c79c0447b3c23ad698c98&e=%5B%7B%22device_id%22%3A%22Ys0rRhCjC-rhUpmFiib7ss%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1703780522600%2C%22event_id%22%3A1%2C%22session_id%22%3A1703780522599%2C%22
2023-12-28 16:22:04 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:04 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0ac-556b4e782b21a4e82cb78eac Strict-Transport-Security: max-age=15768000
2023-12-28 16:22:04 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49810	130.211.23.194	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	347	OUT	GET /country HTTP/1.1 Host: api.btloader.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	300	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=300, stale-while-revalidate=600, stale-if-error=600 Content-Type: application/json Vary: Origin Date: Thu, 28 Dec 2023 16:22:04 GMT Content-Length: 16 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:04 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49820	23.40.70.2	443

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-12-28 16:22:04 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=27862 Date: Thu, 28 Dec 2023 16:22:04 GMT Content-Length: 55 Connection: close X-CID: 2
2023-12-28 16:22:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49818	34.120.63.153	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	621	OUT	POST /rtb/prebid?cid=8CUO2689O HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 3296 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	3296	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 6f 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a Data Ascii: {"site":{"domain":"www.mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe","ref":"","topMostLocation":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe","isTop":true,"og_url":"https:
2023-12-28 16:22:05 UTC	666	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Thu, 28 Dec 2023 16:22:05 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.mediafire.com content-type: application/json;charset=utf-8 date: Thu, 28 Dec 2023 16:22:05 GMT x-envoy-upstream-service-time: 100 vary: Accept-Encoding server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:05 UTC	1252	IN	Data Raw: 35 62 64 0d 0a 7b 22 69 64 22 3a 22 38 35 34 61 33 65 66 35 63 38 63 37 31 33 33 64 64 64 33 30 30 64 34 31 34 39 66 63 38 30 36 39 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 6d 65 64 69 61 6e 65 74 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 24 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 26 67 64 70 72 5f 70 64 3d 31 22 7d Data Ascii: 5bd{"id":"854a3ef5c8c7133ddd300d4149fc8069","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"image","url":"https://x.bidswitch.net/sync?ssp=medianet&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&gdpr_pd=1"}
2023-12-28 16:22:05 UTC	229	IN	Data Raw: 43 33 30 31 37 25 32 43 32 31 34 25 32 43 33 33 36 25 32 43 33 30 31 34 25 32 43 33 33 37 25 32 43 33 33 38 25 32 43 34 35 39 25 32 43 37 37 25 32 43 33 38 25 32 43 31 38 32 25 32 43 32 36 31 25 32 43 31 34 31 25 32 43 32 36 32 25 32 43 34 36 31 25 32 43 32 32 32 25 32 43 33 30 31 25 32 43 32 32 35 25 32 43 34 36 38 25 32 43 31 30 30 30 30 25 32 43 38 30 25 32 43 31 30 38 25 32 43 32 32 39 25 32 43 33 30 37 26 69 74 79 70 65 3d 50 52 45 42 49 44 26 70 75 72 70 6f 73 65 31 3d 31 26 67 64 70 72 63 6f 6e 73 65 6e 74 3d 31 26 67 64 70 72 3d 30 26 63 6f 70 70 61 3d 30 26 75 73 70 5f 73 74 61 74 75 73 3d 30 26 75 73 70 5f 63 6f 6e 73 65 6e 74 3d 31 22 7d 5d 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: C3017%2C214%2C336%2C3014%2C337%2C338%2C459%2C77%2C38%2C182%2C261%2C141%2C262%2C461%2C222%2C301%2C225%2C468%2C10000%2C80%2C108%2C229%2C307&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1"}]}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49814	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1018 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	1018	OUT	Data Raw: 7b 22 69 64 22 3a 22 30 66 34 63 61 65 36 34 2d 63 39 38 39 2d 34 35 63 37 2d 38 35 35 30 2d 37 36 63 65 30 65 39 63 36 65 36 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 6f 6e 6c 69 6e 65 73 74 6f 72 61 67 65 2c 66 72 65 65 73 74 6f 72 61 67 65 2c 63 6c 6f 75 64 53 74 6f 72 61 67 Data Ascii: {"id":"0f4cae64-c989-45c7-8550-76ce0e9c6e65","at":1,"cur":["USD"],"tmax":1000,"site":{"domain":"mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe","ref":null,"keywords":"onlinestorage,freestorage,cloudStorag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49812	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1037 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	1037	OUT	Data Raw: 7b 22 69 64 22 3a 22 30 66 34 63 61 65 36 34 2d 63 39 38 39 2d 34 35 63 37 2d 38 35 35 30 2d 37 36 63 65 30 65 39 63 36 65 36 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 6f 6e 6c 69 6e 65 73 74 6f 72 61 67 65 2c 66 72 65 65 73 74 6f 72 61 67 65 2c 63 6c 6f 75 64 53 74 6f 72 61 67 Data Ascii: {"id":"0f4cae64-c989-45c7-8550-76ce0e9c6e65","at":1,"cur":["USD"],"tmax":1000,"site":{"domain":"mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe","ref":null,"keywords":"onlinestorage,freestorage,cloudStorag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49816	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1037 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	1037	OUT	Data Raw: 7b 22 69 64 22 3a 22 30 66 34 63 61 65 36 34 2d 63 39 38 39 2d 34 35 63 37 2d 38 35 35 30 2d 37 36 63 65 30 65 39 63 36 65 36 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 6f 6e 6c 69 6e 65 73 74 6f 72 61 67 65 2c 66 72 65 65 73 74 6f 72 61 67 65 2c 63 6c 6f 75 64 53 74 6f 72 61 67 Data Ascii: {"id":"0f4cae64-c989-45c7-8550-76ce0e9c6e65","at":1,"cur":["USD"],"tmax":1000,"site":{"domain":"mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe","ref":null,"keywords":"onlinestorage,freestorage,cloudStorag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49815	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1018 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	1018	OUT	Data Raw: 7b 22 69 64 22 3a 22 30 66 34 63 61 65 36 34 2d 63 39 38 39 2d 34 35 63 37 2d 38 35 35 30 2d 37 36 63 65 30 65 39 63 36 65 36 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 6f 6e 6c 69 6e 65 73 74 6f 72 61 67 65 2c 66 72 65 65 73 74 6f 72 61 67 65 2c 63 6c 6f 75 64 53 74 6f 72 61 67 Data Ascii: {"id":"0f4cae64-c989-45c7-8550-76ce0e9c6e65","at":1,"cur":["USD"],"tmax":1000,"site":{"domain":"mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe","ref":null,"keywords":"onlinestorage,freestorage,cloudStorag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49813	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1018 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	1018	OUT	Data Raw: 7b 22 69 64 22 3a 22 30 66 34 63 61 65 36 34 2d 63 39 38 39 2d 34 35 63 37 2d 38 35 35 30 2d 37 36 63 65 30 65 39 63 36 65 36 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 6f 6e 6c 69 6e 65 73 74 6f 72 61 67 65 2c 66 72 65 65 73 74 6f 72 61 67 65 2c 63 6c 6f 75 64 53 74 6f 72 61 67 Data Ascii: {"id":"0f4cae64-c989-45c7-8550-76ce0e9c6e65","at":1,"cur":["USD"],"tmax":1000,"site":{"domain":"mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe","ref":null,"keywords":"onlinestorage,freestorage,cloudStorag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49819	3.231.136.235	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	734	OUT	POST /header/auction?lib=prebid&v=8.10.0&referrer=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&tmax=1000 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 2364 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	2364	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 46 69 72 65 5f 52 4f 53 5f 5a 6f 6e 65 5f 70 72 65 62 69 64 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 35 38 33 39 34 33 39 37 34 32 30 31 2d 30 22 7d 7d 7d 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 35 38 33 39 34 33 39 37 34 32 30 31 2d 30 22 7d 7d 7d 2c 7b 22 69 64 22 3a 31 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 46 69 72 65 5f 52 4f 53 5f 5a 6f 6e 65 5f 70 Data Ascii: {"imp":[{"id":0,"tagid":"MediaFire_ROS_Zone_prebid","banner":{"format":[{"w":728,"h":90}]},"fpd":{"context":{"data":{"pbadslot":"div-gpt-ad-1583943974201-0"}}},"ext":{"data":{"pbadslot":"div-gpt-ad-1583943974201-0"}}},{"id":1,"tagid":"MediaFire_ROS_Zone_p
2023-12-28 16:22:05 UTC	668	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:05 GMT Content-Type: application/json; charset=utf-8 Content-Length: 19 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 15 Oct 1992 20:10:00 GMT Pragma: no-cache X-XSS-Protection: 0 P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Access-Control-Allow-Origin: https://www.mediafire.com Access-Control-Allow-Credentials: true x-auction-status: 29 Set-Cookie: tluid=3339166779008318406558; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:05 GMT; Secure; SameSite=None
2023-12-28 16:22:05 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49817	104.36.115.111	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:04 UTC	634	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2016 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:04 UTC	2016	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 33 37 38 30 35 32 33 34 36 35 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 38 37 66 63 38 39 65 66 33 34 36 31 65 39 22 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 46 69 72 65 5f 5a 6f 6e 65 31 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 35 38 33 39 34 33 39 37 34 32 30 31 2d 30 22 7d 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 31 7d 7d 2c 7b 22 69 64 22 3a 22 39 62 62 61 34 64 35 62 64 66 63 38 36 Data Ascii: {"id":"1703780523465","at":1,"cur":["USD"],"imp":[{"id":"87fc89ef3461e9","tagid":"MediaFire_Zone1","secure":1,"ext":{"data":{"pbadslot":"div-gpt-ad-1583943974201-0"}},"bidfloorcur":"USD","banner":{"w":728,"h":90,"pos":0,"topframe":1}},{"id":"9bba4d5bdfc86
2023-12-28 16:22:05 UTC	231	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: no-cache, no-store, must-revalidate Date: Thu, 28 Dec 2023 16:22:05 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49823	172.64.137.15	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:05 UTC	551	OUT	GET /parsonsmaize/olathe.js?gcb=195-8&cb=23 HTTP/1.1 Host: go.ezodn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:05 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:05 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex Last-Modified: Tue, 28 Nov 2023 00:51:00 GMT CF-Cache-Status: HIT Age: 2612379 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MiGFu21QG4b8p7ZAK3m1jcqgLTrjRTsduJXW%2FbBkHd6F0i%2B2qMuRPwgMBUk8kIHI5A8VB%2F3Ke1iZmg37A2dmcZODobpeHiS5PA5U80gWvCRJHC9ukfR2NHczSGQzbdY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23dc1ba1e94e-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:05 UTC	629	IN	Data Raw: 38 63 66 0d 0a 74 72 79 20 7b 20 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 7a 5f 74 6f 73 5f 74 72 61 63 6b 5f 63 6f 75 6e 74 26 26 28 65 7a 5f 6c 61 73 74 5f 61 63 74 69 76 69 74 79 5f 63 6f 75 6e 74 3d 65 7a 5f 74 6f 73 5f 74 72 61 63 6b 5f 63 6f 75 6e 74 29 7d 5f 5f 65 7a 2e 61 6e 61 6c 79 74 69 63 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 5f 5f 65 7a 2e 64 6f 74 2e 67 65 74 55 52 4c 28 22 2f 64 65 74 72 6f 69 74 63 68 69 63 61 67 6f 2f 69 6d 70 2e 67 69 66 22 29 2c 6e 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 5f 3d 30 2c 6f 3d 30 2c 69 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 69 66 28 69 2b 2b 2c 76 6f 69 64 20 30 3d 3d 3d 64 6f 63 75 6d 65 Data Ascii: 8cftry { !function(){function e(){"undefined"!=typeof ez_tos_track_count&&(ez_last_activity_count=ez_tos_track_count)}__ez.analytics=function(){var t=__ez.dot.getURL("/detroitchicago/imp.gif"),n=Date.now(),_=0,o=0,i=0;function a(){if(i++,void 0===docume
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 20 69 66 28 21 30 21 3d 3d 77 69 6e 64 6f 77 2e 65 7a 41 6e 61 6c 79 74 69 63 73 53 74 61 74 69 63 29 7b 76 61 72 20 63 3d 74 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 5f 65 7a 45 78 74 72 61 51 75 65 72 69 65 73 3f 22 3f 22 2b 5f 65 7a 45 78 74 72 61 51 75 65 72 69 65 73 2e 72 65 70 6c 61 63 65 28 2f 5e 26 2b 2f 2c 22 22 29 3a 22 22 29 3b 5f 5f 65 7a 2e 64 6f 74 2e 46 69 72 65 28 63 2c 5f 65 7a 61 71 29 2c 6f 2b 2b 7d 5f 65 7a 61 71 2e 70 76 5f 65 76 65 6e 74 5f 63 6f 75 6e 74 3d 76 6f 69 64 20 30 3d 3d 3d 5f 65 7a 61 71 2e 70 76 5f 65 76 65 6e 74 5f 63 6f 75 6e 74 3f 31 3a 5f 65 7a 61 71 2e 70 76 5f 65 76 65 6e 74 5f 63 6f 75 6e 74 2b 31 7d 7d 65 6c 73 65 20 69 3c 32 30 26 26 73 65 74 54 69 6d 65 6f 75 74 28 61 2c 35 30 30 29 7d Data Ascii: if(!0!==window.ezAnalyticsStatic){var c=t+("undefined"!=typeof _ezExtraQueries?"?"+_ezExtraQueries.replace(/^&+/,""):"");__ez.dot.Fire(c,_ezaq),o++}_ezaq.pv_event_count=void 0===_ezaq.pv_event_count?1:_ezaq.pv_event_count+1}}else i<20&&setTimeout(a,500)}
2023-12-28 16:22:05 UTC	264	IN	Data Raw: 79 74 69 63 73 2e 69 6e 69 74 28 29 7d 28 29 3b 7d 20 63 61 74 63 68 28 65 72 72 29 20 7b 76 61 72 20 68 52 45 45 44 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 72 29 20 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 28 65 72 2c 20 22 2f 70 61 72 73 6f 6e 73 6d 61 69 7a 65 2f 6f 6c 61 74 68 65 2e 6a 73 22 29 7d 7d 3b 20 74 79 70 65 6f 66 20 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 52 45 45 44 28 65 72 72 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 70 6f 72 74 45 7a 45 72 72 6f 72 44 65 66 69 6e 65 64 27 2c 68 52 45 45 44 28 65 72 72 29 2c 20 7b 6f 6e 63 65 3a 20 74 72 75 65 7d 29 3b 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 Data Ascii: ytics.init()}();} catch(err) {var hREED = function(er) {return function() {reportEzError(er, "/parsonsmaize/olathe.js")}}; typeof reportEzError==="function"?hREED(err):window.addEventListener('reportEzErrorDefined',hREED(err), {once: true}); console.error
2023-12-28 16:22:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49824	172.64.137.15	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:05 UTC	563	OUT	GET /parsonsmaize/chanute.js?a=a&cb=7&dcb=195-8&shcb=34 HTTP/1.1 Host: go.ezodn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:05 UTC	742	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:05 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex Last-Modified: Tue, 28 Nov 2023 09:27:16 GMT CF-Cache-Status: HIT Age: 2616889 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yS2ZfsffK74kMF4KEbjuIeD8SA3%2FY76b%2F7rbwN4GuK9363G2YG6rSASuUitaiAShMUNilhu04baJvSBKDOEEo6FzRIgreVWRW02snoHz3rX%2FIOnsEZZr7W%2FtjULYaRA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23dc2801e922-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:05 UTC	627	IN	Data Raw: 35 34 62 31 0d 0a 74 72 79 20 7b 20 66 75 6e 63 74 69 6f 6e 20 65 7a 5f 61 74 74 61 63 68 45 76 65 6e 74 28 65 6c 65 6d 65 6e 74 2c 65 76 74 2c 66 75 6e 63 29 7b 69 66 28 65 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 65 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 76 74 2c 66 75 6e 63 2c 66 61 6c 73 65 29 3b 7d 65 6c 73 65 7b 65 6c 65 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 65 76 74 2c 66 75 6e 63 29 3b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 7a 5f 61 74 74 61 63 68 45 76 65 6e 74 57 69 74 68 43 61 70 74 75 72 65 28 65 6c 65 6d 65 6e 74 2c 65 76 74 2c 66 75 6e 63 2c 75 73 65 43 61 70 74 75 72 65 29 7b 69 66 28 65 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: 54b1try { function ez_attachEvent(element,evt,func){if(element.addEventListener){element.addEventListener(evt,func,false);}else{element.attachEvent("on"+evt,func);}}function ez_attachEventWithCapture(element,evt,func,useCapture){if(element.addEventList
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 27 69 27 29 3b 76 61 72 20 73 74 72 69 6e 67 3d 72 65 67 2e 65 78 65 63 28 68 72 65 66 29 3b 72 65 74 75 72 6e 20 73 74 72 69 6e 67 3f 73 74 72 69 6e 67 5b 31 5d 3a 6e 75 6c 6c 3b 7d 0a 28 66 75 6e 63 74 69 6f 6e 28 72 6f 6f 74 2c 66 61 63 74 6f 72 79 29 7b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 27 65 7a 52 69 76 65 74 65 64 27 2c 5b 5d 2c 66 61 63 74 6f 72 79 29 3b 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 3d 27 6f 62 6a 65 63 74 27 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 29 7b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 61 63 74 6f 72 79 28 29 3b 7d 65 6c 73 65 7b 72 6f 6f 74 2e 72 69 76 65 74 65 64 3d Data Ascii: 'i');var string=reg.exec(href);return string?string[1]:null;}(function(root,factory){if(typeof define==='function'&&define.amd){define('ezRiveted',[],factory);}else if(typeof module==='object'&&module.exports){module.exports=factory();}else{root.riveted=
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 73 65 74 53 63 72 6f 6c 6c 44 65 70 74 68 28 29 7b 76 61 72 20 68 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 62 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 73 74 3d 27 73 63 72 6f 6c 6c 54 6f 70 27 2c 73 68 3d 27 73 63 72 6f 6c 6c 48 65 69 67 68 74 27 3b 76 61 72 20 70 65 72 63 65 6e 74 3d 30 3b 69 66 28 62 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3c 68 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 7b 70 65 72 63 65 6e 74 3d 31 30 30 2a 28 28 68 5b 73 74 5d 7c 7c 62 5b 73 74 5d 29 2b 62 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 2f 28 68 5b 73 68 5d 7c 7c 62 5b 73 68 5d 29 3b 7d 65 6c 73 65 7b 70 65 72 63 65 6e 74 3d 31 30 30 2a 28 28 68 5b 73 74 5d 7c 7c 62 5b 73 74 5d 29 2b 68 2e 63 6c 69 65 6e Data Ascii: function setScrollDepth(){var h=document.documentElement,b=document.body,st='scrollTop',sh='scrollHeight';var percent=0;if(b.clientHeight<h.clientHeight){percent=100((h[st]\|\|b[st])+b.clientHeight)/(h[sh]\|\|b[sh]);}else{percent=100((h[st]\|\|b[st])+h.clien
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 45 76 65 6e 74 28 63 6c 6f 63 6b 54 69 6d 65 29 3b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 73 74 6f 70 43 6c 6f 63 6b 28 29 7b 73 74 6f 70 70 65 64 3d 74 72 75 65 3b 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 63 6c 6f 63 6b 54 69 6d 65 72 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 75 72 6e 4f 66 66 28 29 7b 73 65 74 49 64 6c 65 28 29 3b 74 75 72 6e 65 64 4f 66 66 3d 74 72 75 65 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 75 72 6e 4f 6e 28 29 7b 74 75 72 6e 65 64 4f 66 66 3d 66 61 6c 73 65 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 72 65 73 74 61 72 74 43 6c 6f 63 6b 28 29 7b 73 74 6f 70 70 65 64 3d 66 61 6c 73 65 3b 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 63 6c 6f 63 6b 54 69 6d 65 72 29 3b 63 6c 6f 63 6b 54 69 6d 65 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 63 6c 6f 63 Data Ascii: Event(clockTime);}}function stopClock(){stopped=true;clearInterval(clockTimer);}function turnOff(){setIdle();turnedOff=true;}function turnOn(){turnedOff=false;}function restartClock(){stopped=false;clearInterval(clockTimer);clockTimer=setInterval(cloc
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 65 77 20 44 61 74 65 28 29 2c 74 69 6d 65 72 2c 74 6f 74 61 6c 73 3d 7b 65 6e 67 61 67 65 64 41 64 64 65 64 3a 30 2c 74 6f 73 41 64 64 65 64 3a 30 7d 2c 75 6e 6c 6f 61 64 65 64 54 69 6d 65 44 65 6c 61 79 4d 73 3d 33 30 30 30 2c 76 69 73 62 69 6c 69 74 79 43 68 61 6e 67 65 46 75 6e 63 3d 6e 75 6c 6c 3b 76 61 72 20 65 76 74 73 3d 7b 63 6f 70 79 50 61 73 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 75 6e 74 73 2e 63 6f 70 79 50 61 73 74 65 2b 2b 3b 7d 2c 6d 6f 75 73 65 4f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 3f 65 3a 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 69 66 28 74 79 70 65 6f 66 20 65 3d 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 7c 7c 74 79 70 65 6f 66 20 65 2e 74 61 72 67 65 74 3d 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 7c 7c 74 79 70 65 Data Ascii: ew Date(),timer,totals={engagedAdded:0,tosAdded:0},unloadedTimeDelayMs=3000,visbilityChangeFunc=null;var evts={copyPaste:function(){counts.copyPaste++;},mouseOut:function(e){e=e?e:window.event;if(typeof e==='undefined'\|\|typeof e.target==='undefined'\|\|type
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 65 43 6f 75 6e 74 3d 63 6f 75 6e 74 73 2e 63 6f 70 79 50 61 73 74 65 3b 7d 7d 2c 61 64 64 44 65 76 69 63 65 53 69 7a 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 6f 67 28 22 53 74 6f 72 69 6e 67 20 64 65 76 69 63 65 20 73 69 7a 65 73 22 29 3b 5f 5f 65 7a 2e 62 69 74 2e 41 64 64 28 70 76 49 44 2c 5b 28 6e 65 77 20 5f 5f 65 7a 44 6f 74 44 61 74 61 28 27 64 65 76 69 63 65 5f 77 69 64 74 68 27 2c 73 63 72 65 65 6e 2e 77 69 64 74 68 29 29 2c 28 6e 65 77 20 5f 5f 65 7a 44 6f 74 44 61 74 61 28 27 64 65 76 69 63 65 5f 68 65 69 67 68 74 27 2c 73 63 72 65 65 6e 2e 68 65 69 67 68 74 29 29 5d 29 3b 7d 2c 61 64 64 45 6e 67 61 67 65 64 54 69 6d 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 21 3d 6c 61 73 74 2e 65 6e 67 61 67 65 64 54 69 6d 65 29 7b 5f 5f 65 Data Ascii: eCount=counts.copyPaste;}},addDeviceSizes:function(){log("Storing device sizes");__ez.bit.Add(pvID,[(new __ezDotData('device_width',screen.width)),(new __ezDotData('device_height',screen.height))]);},addEngagedTimes:function(t){if(t!=last.engagedTime){__e
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 28 22 53 74 6f 72 69 6e 67 20 6c 6f 63 61 6c 20 74 69 6d 65 22 29 3b 76 61 72 20 6e 6f 77 3d 6e 65 77 20 44 61 74 65 28 29 3b 76 61 72 20 74 7a 4f 66 66 73 65 74 3d 6e 6f 77 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 3b 69 66 28 74 7a 4f 66 66 73 65 74 3c 2d 38 34 30 7c 7c 74 7a 4f 66 66 73 65 74 3e 37 32 30 29 7b 72 65 74 75 72 6e 7d 0a 76 61 72 20 6c 44 61 74 65 3d 6e 65 77 20 44 61 74 65 28 6e 6f 77 2d 28 74 7a 4f 66 66 73 65 74 2a 36 30 30 30 30 29 29 3b 69 66 28 28 4d 61 74 68 2e 61 62 73 28 6c 44 61 74 65 2d 6e 6f 77 29 2f 33 36 30 30 30 30 30 29 3e 31 34 29 7b 72 65 74 75 72 6e 7d 0a 69 66 28 21 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 49 53 4f 53 74 72 69 6e 67 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 Data Ascii: ("Storing local time");var now=new Date();var tzOffset=now.getTimezoneOffset();if(tzOffset<-840\|\|tzOffset>720){return}var lDate=new Date(now-(tzOffset*60000));if((Math.abs(lDate-now)/3600000)>14){return}if(!Date.prototype.toISOString){(function(){functi
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 73 74 2e 73 68 61 72 65 43 6f 75 6e 74 3d 63 6f 75 6e 74 73 2e 73 68 61 72 65 73 3b 7d 7d 2c 61 64 64 55 6e 6c 6f 61 64 54 69 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 5f 65 7a 2e 62 69 74 2e 41 64 64 28 70 76 49 44 2c 5b 28 6e 65 77 20 5f 5f 65 7a 44 6f 74 44 61 74 61 28 27 74 5f 75 6e 6c 6f 61 64 27 2c 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 29 29 5d 29 3b 5f 5f 65 7a 2e 62 69 74 2e 46 69 72 65 28 29 3b 7d 2c 75 6e 6c 6f 61 64 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 79 70 65 6f 66 20 74 69 6d 65 72 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 76 61 72 20 74 3d 74 69 6d 65 72 2e 67 65 74 54 69 6d 65 28 29 3b 70 69 78 65 6c 73 2e 61 64 64 45 6e 67 61 67 65 64 54 69 6d 65 73 28 74 29 3b 70 69 78 65 6c 73 2e Data Ascii: st.shareCount=counts.shares;}},addUnloadTime:function(){__ez.bit.Add(pvID,[(new __ezDotData('t_unload',(new Date()).getTime()))]);__ez.bit.Fire();},unloadAll:function(e){if(typeof timer!='undefined'){var t=timer.getTime();pixels.addEngagedTimes(t);pixels.
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 6f 6e 27 2b 65 76 65 6e 74 4e 61 6d 65 5d 3d 68 61 6e 64 6c 65 72 3b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 65 6c 65 6d 65 6e 74 2c 65 76 65 6e 74 4e 61 6d 65 2c 68 61 6e 64 6c 65 72 29 7b 69 66 28 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 76 65 6e 74 4e 61 6d 65 2c 68 61 6e 64 6c 65 72 2c 66 61 6c 73 65 29 3b 7d 65 6c 73 65 20 69 66 28 65 6c 65 6d 65 6e 74 2e 64 65 74 61 63 68 45 76 65 6e 74 29 7b 65 6c 65 6d 65 6e 74 2e 64 65 74 61 63 68 45 76 65 6e 74 28 27 6f 6e 27 2b 65 76 65 6e 74 4e 61 6d 65 2c 68 61 6e 64 6c 65 72 29 3b 7d 65 6c 73 65 7b 64 65 6c 65 74 65 20 65 6c 65 6d 65 6e Data Ascii: on'+eventName]=handler;}}function removeListener(element,eventName,handler){if(element.removeEventListener){element.removeEventListener(eventName,handler,false);}else if(element.detachEvent){element.detachEvent('on'+eventName,handler);}else{delete elemen
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 69 74 79 43 68 61 6e 67 65 45 76 65 6e 74 49 6e 66 6f 28 29 7b 76 61 72 20 68 69 64 64 65 6e 50 72 6f 70 4e 61 6d 65 2c 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 45 76 65 6e 74 4e 61 6d 65 3b 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 68 69 64 64 65 6e 50 72 6f 70 4e 61 6d 65 3d 22 68 69 64 64 65 6e 22 3b 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 45 76 65 6e 74 4e 61 6d 65 3d 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 6d 73 48 69 64 64 65 6e 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 68 69 64 64 65 6e 50 72 6f 70 4e 61 6d 65 3d 22 6d 73 48 69 64 64 65 6e 22 3b 76 69 73 69 Data Ascii: ityChangeEventInfo(){var hiddenPropName,visibilityChangeEventName;if(typeof document.hidden!=="undefined"){hiddenPropName="hidden";visibilityChangeEventName="visibilitychange";}else if(typeof document.msHidden!=="undefined"){hiddenPropName="msHidden";visi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49825	172.64.137.15	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:05 UTC	553	OUT	GET /tardisrocinante/vitals.js?gcb=195-8&cb=3 HTTP/1.1 Host: go.ezodn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:05 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:05 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex Last-Modified: Thu, 14 Dec 2023 15:03:04 GMT CF-Cache-Status: HIT Age: 1214341 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QIMHkGXT1vYHzUsw48sCbMgQWnSOIE4nutFdn7tV240pTCsA9yxCVEaNn42VRB8XVzVlQU%2FRNUrZyNQ7zWaqF4%2Bzx7ZM2JUHJjEUZh%2B2hP1Fq1s6VZXs72QdiDKnTIM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb23dc3fb42cc3-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:05 UTC	629	IN	Data Raw: 31 66 30 35 0d 0a 74 72 79 20 7b 20 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 77 65 62 56 69 74 61 6c 73 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 74 2c 69 2c 72 2c 6f 2c 61 3d 2d 31 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 70 65 72 73 69 73 74 65 64 26 26 28 61 3d 6e 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 6e 29 29 7d 29 2c 21 30 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1f05try { !function(e,n){n((e="undefined"!=typeof globalThis?globalThis:e\|\|self).webVitals={})}(this,(function(e){"use strict";var n,t,i,r,o,a=-1,c=function(e){addEventListener("pageshow",(function(n){n.persisted&&(a=n.timeStamp,e(n))}),!0)},u=function(
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 3d 3d 6e 3f 2d 31 3a 6e 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 69 7d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 74 72 79 7b 69 66 28 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 2e 73 75 70 70 6f 72 74 65 64 45 6e 74 72 79 54 79 70 65 73 2e 69 6e 63 6c 75 64 65 73 28 65 29 29 7b 76 61 72 20 69 3d 6e 65 77 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 28 28 Data Ascii: ==n?-1:n,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:i}},d=function(e,n,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){var i=new PerformanceObserver((
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 3c 30 26 26 28 68 3d 67 28 29 2c 79 28 29 2c 63 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 3d 67 28 29 2c 79 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 68 7d 7d 7d 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 2c 21 30 29 3a 65 28 29 7d 2c 62 3d 5b 31 38 30 30 2c 33 65 33 5d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ction(){return h<0&&(h=g(),y(),c((function(){setTimeout((function(){h=g(),y()}),0)}))),{get firstHiddenTime(){return h}}},L=function(e){document.prerendering?addEventListener("prerenderingchange",(function(){return e()}),!0):e()},b=[1800,3e3],S=function(e
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 2e 74 61 72 67 65 74 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 6e 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 73 74 61 72 74 54 69 6d 65 3a 6e 2e 74 69 6d 65 53 74 61 6d 70 2c 70 72 6f 63 65 73 73 69 6e 67 53 74 61 72 74 3a 6e 2e 74 69 6d 65 53 74 61 6d 70 2b 74 7d 3b 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 28 65 29 7d 29 29 2c 72 3d 5b 5d 7d 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 63 61 6e 63 65 6c 61 62 6c 65 29 7b 76 61 72 20 6e 3d 28 65 2e 74 69 6d 65 53 74 61 6d 70 3e 31 65 31 32 3f 6e 65 77 20 44 61 74 65 3a 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 29 2d 65 2e 74 69 6d 65 53 74 61 6d 70 3b 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 3d 3d 65 2e 74 79 70 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 Data Ascii: .target,cancelable:n.cancelable,startTime:n.timeStamp,processingStart:n.timeStamp+t};r.forEach((function(n){n(e)})),r=[]}},D=function(e){if(e.cancelable){var n=(e.timeStamp>1e12?new Date:performance.now())-e.timeStamp;"pointerdown"==e.type?function(e,n){v
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 7a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 28 29 2d 56 7d 2c 47 3d 5b 5d 2c 4a 3d 7b 7d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 47 5b 47 2e 6c 65 6e 67 74 68 2d 31 5d 2c 74 3d 4a 5b 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 5d 3b 69 66 28 74 7c 7c 47 2e 6c 65 6e 67 74 68 3c 31 30 7c 7c 65 2e 64 75 72 61 74 69 6f 6e 3e 6e 2e 6c 61 74 65 6e 63 79 29 7b 69 66 28 74 29 74 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 74 2e 6c 61 74 65 6e 63 79 3d 4d 61 74 68 2e 6d 61 78 28 74 2e 6c 61 74 65 6e 63 79 2c 65 2e 64 75 72 61 74 69 6f 6e 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 7b 69 64 3a 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 2c 6c 61 74 65 6e 63 79 3a 65 2e 64 75 72 61 74 69 6f 6e 2c 65 6e 74 72 69 65 73 3a Data Ascii: z=function(){return j()-V},G=[],J={},K=function(e){var n=G[G.length-1],t=J[e.interactionId];if(t\|\|G.length<10\|\|e.duration>n.latency){if(t)t.entries.push(e),t.latency=Math.max(t.latency,e.duration);else{var i={id:e.interactionId,latency:e.duration,entries:
2023-12-28 16:22:05 UTC	1369	IN	Data Raw: 28 29 29 7d 2c 61 3d 64 28 22 6c 61 72 67 65 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 2c 6f 29 3b 69 66 28 61 29 7b 74 3d 6c 28 65 2c 72 2c 55 2c 6e 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 3b 76 61 72 20 75 3d 6d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 57 5b 72 2e 69 64 5d 7c 7c 28 6f 28 61 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 61 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 57 5b 72 2e 69 64 5d 3d 21 30 2c 74 28 21 30 29 29 7d 29 29 3b 5b 22 6b 65 79 64 6f 77 6e 22 2c 22 63 6c 69 63 6b 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 75 2c 30 29 7d Data Ascii: ())},a=d("largest-contentful-paint",o);if(a){t=l(e,r,U,n.reportAllChanges);var u=m((function(){W[r.id]\|\|(o(a.takeRecords()),a.disconnect(),W[r.id]=!0,t(!0))}));["keydown","click"].forEach((function(e){addEventListener(e,(function(){return setTimeout(u,0)}
2023-12-28 16:22:05 UTC	475	IN	Data Raw: 5b 28 6e 65 77 20 77 69 6e 64 6f 77 2e 5f 5f 65 7a 44 6f 74 44 61 74 61 28 6d 65 74 72 69 63 4e 61 6d 65 4d 61 70 5b 6d 2e 6e 61 6d 65 5d 2c 6d 2e 64 65 6c 74 61 29 29 5d 29 3b 77 69 6e 64 6f 77 2e 5f 5f 65 7a 2e 62 69 74 2e 46 69 72 65 28 29 3b 7d 0a 77 69 6e 64 6f 77 2e 77 65 62 56 69 74 61 6c 73 2e 6f 6e 43 4c 53 28 65 7a 6c 6f 67 56 69 74 61 6c 29 3b 77 69 6e 64 6f 77 2e 77 65 62 56 69 74 61 6c 73 2e 6f 6e 4c 43 50 28 65 7a 6c 6f 67 56 69 74 61 6c 29 3b 77 69 6e 64 6f 77 2e 77 65 62 56 69 74 61 6c 73 2e 6f 6e 46 49 44 28 65 7a 6c 6f 67 56 69 74 61 6c 29 3b 77 69 6e 64 6f 77 2e 77 65 62 56 69 74 61 6c 73 2e 6f 6e 49 4e 50 28 65 7a 6c 6f 67 56 69 74 61 6c 29 3b 7d 20 63 61 74 63 68 28 65 72 72 29 20 7b 76 61 72 20 68 52 45 45 44 20 3d 20 66 75 6e 63 74 Data Ascii: [(new window.__ezDotData(metricNameMap[m.name],m.delta))]);window.__ez.bit.Fire();}window.webVitals.onCLS(ezlogVital);window.webVitals.onLCP(ezlogVital);window.webVitals.onFID(ezlogVital);window.webVitals.onINP(ezlogVital);} catch(err) {var hREED = funct
2023-12-28 16:22:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49827	142.251.116.104	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:05 UTC	1005	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-829541-1&cid=1411026819.1703780523&jid=2073574725&_u=YEBAAUAAAAAAACAAI~&z=761256898 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:06 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:22:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49830	108.156.245.32	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:05 UTC	534	OUT	GET /c/4545/cc_af.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:06 UTC	565	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 56598 Connection: close Date: Thu, 28 Dec 2023 06:08:08 GMT Last-Modified: Mon, 03 Oct 2022 20:56:51 GMT ETag: "a4ff03e3d8274ebe2833a0a33a541e12" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ac72c6dfa21a23a34396bec16bd466a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW56-P5 X-Amz-Cf-Id: SfTiTPvLIC4gcZl8VFgRvNc0arvAr_MFRkGiJsZu23Mv-Cqy55d76A== Age: 36838
2023-12-28 16:22:06 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 63 4a 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 76 61 72 20 6d 6f 64 65 3d 22 42 43 50 22 3b 76 61 72 20 75 73 65 46 50 43 3d 66 61 6c 73 65 3b 76 61 72 20 69 6e 63 6c 75 64 65 52 65 66 65 72 72 65 72 3d 66 61 6c 73 65 3b 76 61 72 20 72 75 6e 4f 70 74 69 6d 75 73 4f 6e 6c 79 3d 66 61 6c 73 65 3b 76 61 72 20 63 6d 70 3d 7b 64 61 69 73 79 62 69 74 3a 6e 75 6c 6c 2c 77 61 69 74 3a 32 35 30 2c 64 6f 6e 65 3a 30 2c 73 74 61 72 74 3a 30 7d 3b 76 61 72 20 62 61 73 65 44 6f 6d 61 69 6e 3d 22 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 22 3b 76 61 72 20 76 61 6c 69 64 50 72 65 66 69 78 3d 5b 22 62 63 70 22 2c 22 63 6e 22 5d 3b 76 61 72 20 62 63 70 44 6f 6d 61 69 6e 50 72 65 66 69 78 3d 22 62 63 70 Data Ascii: (function(){var ccJs=function(options){var mode="BCP";var useFPC=false;var includeReferrer=false;var runOptimusOnly=false;var cmp={daisybit:null,wait:250,done:0,start:0};var baseDomain=".crwdcntrl.net";var validPrefix=["bcp","cn"];var bcpDomainPrefix="bcp
2023-12-28 16:22:06 UTC	16384	IN	Data Raw: 25 2d 5d 2b 29 28 2e 63 6f 6d 7c 2e 63 6f 6d 2e 69 6e 7c 2e 63 6f 2e 75 6b 7c 2e 69 6e 7c 2e 76 6e 7c 2e 66 6d 7c 2e 6f 72 67 7c 2e 74 76 7c 2e 6d 79 7c 2e 73 67 7c 2e 63 61 7c 2e 6e 65 74 7c 2e 70 6b 7c 2e 61 72 7c 2e 62 72 7c 2e 63 6c 7c 2e 65 63 7c 2e 67 79 7c 2e 65 73 7c 2e 6d 78 29 2f 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2d 5d 2b 29 22 2c 0a 65 6c 65 6d 65 6e 74 3a 22 7b 7b 68 74 6d 6c 7d 7d 22 2c 6f 70 72 3a 34 31 33 33 30 7d 29 3b 61 64 64 54 72 69 67 67 65 72 28 7b 22 6d 65 64 22 3a 5b 22 57 61 73 68 69 6e 67 74 6f 6e 54 69 6d 65 73 20 3a 20 41 72 74 69 63 6c 65 20 3a 20 54 6f 70 69 63 20 3a 20 7b 7b 64 69 76 2e 63 72 75 6d 62 79 20 75 6c 2e 63 72 75 6d 62 73 20 6c 69 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 29 20 61 7d 7d 2e 74 65 78 74 43 6f 6e Data Ascii: %-]+)(.com\|.com.in\|.co.uk\|.in\|.vn\|.fm\|.org\|.tv\|.my\|.sg\|.ca\|.net\|.pk\|.ar\|.br\|.cl\|.ec\|.gy\|.es\|.mx)/([a-zA-Z0-9_-]+)",element:"{{html}}",opr:41330});addTrigger({"med":["WashingtonTimes : Article : Topic : {{div.crumby ul.crumbs li:nth-of-type(2) a}}.textCon
2023-12-28 16:22:06 UTC	16384	IN	Data Raw: 69 6f 6e 20 64 6f 6e 65 6c 6f 61 64 28 29 7b 69 66 28 64 6f 62 63 70 29 62 63 70 66 28 29 3b 6e 61 6d 65 73 70 61 63 65 2e 6c 6f 61 64 65 64 3d 0a 74 72 75 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 41 73 79 6e 63 28 29 7b 69 66 28 61 73 79 6e 63 5f 70 72 6f 70 73 2e 61 73 79 6e 63 29 74 72 79 7b 66 6f 72 28 74 79 70 65 20 69 6e 20 61 73 79 6e 63 5f 70 72 6f 70 73 2e 61 73 79 6e 63 42 65 68 61 76 69 6f 72 73 29 66 6f 72 28 76 61 72 20 69 3d 30 2c 62 3b 62 3d 61 73 79 6e 63 5f 70 72 6f 70 73 2e 61 73 79 6e 63 42 65 68 61 76 69 6f 72 73 5b 74 79 70 65 5d 5b 69 2b 2b 5d 3b 29 61 64 64 28 74 79 70 65 2c 62 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 69 64 3b 69 64 3d 61 73 79 6e 63 5f 70 72 6f 70 73 2e 61 73 79 6e 63 4f 70 70 6f 72 74 75 6e 69 74 79 49 64 73 Data Ascii: ion doneload(){if(dobcp)bcpf();namespace.loaded=true}function loadAsync(){if(async_props.async)try{for(type in async_props.asyncBehaviors)for(var i=0,b;b=async_props.asyncBehaviors[type][i++];)add(type,b);for(var i=0,id;id=async_props.asyncOpportunityIds
2023-12-28 16:22:06 UTC	7446	IN	Data Raw: 75 6c 74 3d 70 65 70 70 79 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 73 65 6c 65 63 74 6f 72 2c 72 6f 6f 74 2c 69 6e 63 6c 75 64 65 52 6f 6f 74 2c 66 6c 61 74 29 3b 65 6c 65 6d 65 6e 74 73 3d 67 72 6f 75 70 73 2e 6c 65 6e 67 74 68 3e 31 3f 65 6c 65 6d 65 6e 74 73 2e 63 6f 6e 63 61 74 28 72 65 73 75 6c 74 29 3a 72 65 73 75 6c 74 7d 7d 69 66 28 67 72 6f 75 70 73 2e 6c 65 6e 67 74 68 3e 0a 31 29 65 6c 65 6d 65 6e 74 73 3d 66 69 6c 74 65 72 28 65 6c 65 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 63 61 63 68 65 5b 63 61 63 68 65 4b 65 79 5d 3d 65 6c 65 6d 65 6e 74 73 2e 73 6c 69 63 65 28 30 29 7d 2c 71 75 65 72 79 43 6f 6d 62 69 6e 61 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 72 2c 63 29 7b 76 61 72 20 72 65 73 75 6c 74 3d 5b 5d 2c 75 69 64 73 3d 7b 7d 2c Data Ascii: ult=peppy.querySelector(selector,root,includeRoot,flat);elements=groups.length>1?elements.concat(result):result}}if(groups.length>1)elements=filter(elements);return cache[cacheKey]=elements.slice(0)},queryCombinator:function(l,r,c){var result=[],uids={},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49829	3.208.124.249	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:05 UTC	615	OUT	GET /5/c=3722/pe=y/callback=g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback?33408082 HTTP/1.1 Host: ad.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:06 UTC	343	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:05 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 131 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.56.182 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:06 UTC	131	IN	Data Raw: 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 4c 6f 74 61 6d 65 2e 43 61 6c 6c 45 78 74 72 61 63 74 69 6f 6e 41 50 49 43 61 6c 6c 62 61 63 6b 28 7b 22 50 72 6f 66 69 6c 65 22 3a 20 7b 22 74 70 69 64 22 3a 22 22 2c 22 70 69 64 22 3a 22 22 2c 22 41 75 64 69 65 6e 63 65 73 22 3a 20 7b 22 41 75 64 69 65 6e 63 65 22 3a 5b 5d 7d 7d 7d 29 3b Data Ascii: g367CB268B1094004A3689751E7AC568F.Lotame.CallExtractionAPICallback({"Profile": {"tpid":"","pid":"","Audiences": {"Audience":[]}}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49833	3.208.124.249	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:05 UTC	634	OUT	GET /map/c=3722/tp=ADSP/tpid=e52c68bd2ec041bc8bb423ef3441546f HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:06 UTC	431	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:05 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.9.10 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://bcp.crwdcntrl.net/map/ct=y/c=3722/tp=ADSP/tpid=e52c68bd2ec041bc8bb423ef3441546f Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49837	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:07 UTC	627	OUT	POST /detroitchicago/imp.gif?ez_orig=1 HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 1219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:07 UTC	1219	OUT	Data Raw: 7b 22 61 62 5f 74 65 73 74 5f 69 64 22 3a 22 6d 6f 64 31 2d 63 22 2c 22 61 64 5f 63 61 63 68 65 5f 6c 65 76 65 6c 22 3a 30 2c 22 61 64 5f 63 6f 75 6e 74 5f 61 64 6a 75 73 74 6d 65 6e 74 22 3a 30 2c 22 61 64 5f 6c 61 7a 79 6c 6f 61 64 5f 76 65 72 73 69 6f 6e 22 3a 30 2c 22 61 64 5f 6c 6f 61 64 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 61 64 5f 6c 6f 63 61 74 69 6f 6e 5f 69 64 73 22 3a 22 22 2c 22 61 64 78 5f 61 64 5f 63 6f 75 6e 74 22 3a 30 2c 22 61 69 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 63 61 63 68 65 5f 6c 65 76 65 6c 22 3a 30 2c 22 61 69 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 70 6c 61 63 65 6d 65 6e 74 5f 63 6e 74 22 3a 2d 31 2c 22 62 69 64 64 65 72 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 62 69 64 64 65 72 5f 76 65 72 73 69 6f 6e 22 3a 33 2c 22 63 69 74 79 Data Ascii: {"ab_test_id":"mod1-c","ad_cache_level":0,"ad_count_adjustment":0,"ad_lazyload_version":0,"ad_load_version":1,"ad_location_ids":"","adx_ad_count":0,"ai_placeholder_cache_level":0,"ai_placeholder_placement_cnt":-1,"bidder_method":0,"bidder_version":3,"city
2023-12-28 16:22:07 UTC	479	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: HEAD, PUT, POST, GET, OPTIONS Access-Control-Allow-Origin: https://www.mediafire.com Access-Control-Max-Age: 1728000 Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Content-Length: 43 Content-Type: image/gif Date: Thu, 28 Dec 2023 16:22:07 GMT Expires: Wed, 27 Dec 2023 16:22:07 GMT Vary: Accept-Encoding X-Middleton-Display: imp_sol Connection: close
2023-12-28 16:22:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49828	3.208.124.249	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:07 UTC	660	OUT	GET /map/ct=y/c=3722/tp=ADSP/tpid=e52c68bd2ec041bc8bb423ef3441546f HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2023-12-28 16:22:08 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:07 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.57.255 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Mon, 23-Sep-2024 16:09:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee;Path=/;Domain=crwdcntrl.net;Expires=Mon, 23-Sep-2024 16:09:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gXrQTQUAABvIwvU";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Mon, 23-Sep-2024 16:09:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4XmNgYGBI7V2wHkhBAQAbxgJC";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Mon, 23-Sep-2024 16:09:00 GMT;Max-Age=23328000;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:08 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49831	108.156.245.32	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:09 UTC	723	OUT	GET /lt/c/16589/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gXrQTQUAABvIwvU"; _cc_aud="ABR4XmNgYGBI7V2wHkhBAQAbxgJC"
2023-12-28 16:22:09 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 39591 Connection: close Last-Modified: Wed, 06 Sep 2023 15:56:57 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 28 Dec 2023 13:16:47 GMT Cache-Control: public, max-age=86400 ETag: "e073e71ed7a44e6f9cdd72904fda5940" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c16ce93675afb47d8d8a79f34b72a906.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW56-P5 X-Amz-Cf-Id: KAE1DdoJ9wqqj-g8PsV5esDBKMuW1K0LPR7AnHinx8Lo-SZIx4I9KA== Age: 11125
2023-12-28 16:22:09 UTC	15820	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2023-12-28 16:22:09 UTC	16384	IN	Data Raw: 2c 61 29 3b 74 68 69 73 2e 68 3d 74 68 69 73 2e 52 3d 74 68 69 73 2e 50 3d 74 68 69 73 2e 6a 3d 6e 75 6c 6c 3b 73 79 6e 63 31 36 35 38 39 5f 68 61 28 74 68 69 73 2c 61 2e 62 65 68 61 76 69 6f 72 49 64 73 29 3b 73 79 6e 63 31 36 35 38 39 5f 69 61 28 74 68 69 73 2c 61 2e 62 65 68 61 76 69 6f 72 73 29 3b 73 79 6e 63 31 36 35 38 39 5f 6a 61 28 74 68 69 73 2c 61 2e 72 75 6c 65 42 75 69 6c 64 65 72 29 3b 61 3d 61 2e 64 65 63 6c 61 72 65 64 49 64 3b 76 61 72 20 62 3b 69 66 28 62 3d 61 29 62 3d 21 31 2c 61 26 26 73 79 6e 63 31 36 35 38 39 5f 78 28 61 29 3f 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 69 64 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 74 79 70 65 3f 73 79 6e 63 31 36 35 38 39 5f 2e 65 72 72 6f Data Ascii: ,a);this.h=this.R=this.P=this.j=null;sync16589_ha(this,a.behaviorIds);sync16589_ia(this,a.behaviors);sync16589_ja(this,a.ruleBuilder);a=a.declaredId;var b;if(b=a)b=!1,a&&sync16589_x(a)?"undefined"===typeof a.id\|\|"undefined"===typeof a.type?sync16589_.erro
2023-12-28 16:22:10 UTC	7387	IN	Data Raw: 63 31 36 35 38 39 5f 4a 61 28 61 2c 62 2c 63 29 7b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 73 79 6e 63 31 36 35 38 39 5f 43 3a 63 3b 73 79 6e 63 31 36 35 38 39 5f 39 28 61 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 73 79 6e 63 31 36 35 38 39 5f 5f 28 73 79 6e 63 31 36 35 38 39 5f 5a 28 73 79 6e 63 31 36 35 38 39 5f 58 28 73 79 6e 63 31 36 35 38 39 5f 59 28 73 79 6e 63 31 36 35 38 39 5f 57 28 73 79 6e 63 31 36 35 38 39 5f 56 28 73 79 6e 63 31 36 35 38 39 5f 53 28 73 79 6e 63 31 36 35 38 39 5f 55 28 73 79 6e 63 31 36 35 38 39 5f 54 28 6e 65 77 20 73 79 6e 63 31 36 35 38 39 5f 52 2c 61 2e 66 2e 61 2e 62 63 70 43 6c 69 65 6e 74 29 2c 21 30 29 2c 21 31 29 2c 61 2e 73 74 6f 72 61 67 65 2e 4d 28 29 29 2c 64 29 2c 61 2e 47 2e 6f 29 2c 73 79 6e Data Ascii: c16589_Ja(a,b,c){c=void 0===c?sync16589_C:c;sync16589_9(a).then(function(d){d=sync16589__(sync16589_Z(sync16589_X(sync16589_Y(sync16589_W(sync16589_V(sync16589_S(sync16589_U(sync16589_T(new sync16589_R,a.f.a.bcpClient),!0),!1),a.storage.M()),d),a.G.o),syn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49841	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	1552	OUT	GET /cdn-cgi/challenge-platform/h/g/jsd/r/83cb23b5ed942cae HTTP/1.1 Host: www.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1703780523.1.0.1703780523.60.0.0; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524
2023-12-28 16:22:10 UTC	356	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Dec 2023 16:22:10 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: a/33Z2hRBFAWKXmxEozXHQ==$V3KdQDAZ/OM7P5iNLNz/rg== Server: cloudflare CF-RAY: 83cb23fa4f90462f-DFW
2023-12-28 16:22:10 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-12-28 16:22:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49852	104.22.52.86	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	531	OUT	GET /api/1.0/esp.js HTTP/1.1 Host: cdn.id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:10 UTC	622	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:10 GMT Content-Type: text/javascript;charset=utf-8 Content-Length: 155646 Connection: close x-amz-id-2: HxyD6tFt8H9NTxmCwMUYwuVAA9xmFCEnL0/H60G2QRqMIMZocSO5gDrwhulnZKNm7SAfwDsM7vezaxsVOxsA2Q== x-amz-request-id: 56BFK5QYHJ46A0R0 Last-Modified: Thu, 07 Dec 2023 12:57:20 GMT ETag: "5fcefeebf5ddc7b2ddf2435967e63de9" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 CF-Cache-Status: HIT Age: 444 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 83cb23fbadfee93a-DFW
2023-12-28 16:22:10 UTC	747	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 69 64 35 69 6f 2f 69 64 35 2d 61 70 69 2e 6a 73 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 30 2e 35 35 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 69 64 35 2e 69 6f 2f 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 41 70 61 63 68 65 2d 32 2e 30 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 69 66 28 72 5b 65 5d 29 72 65 74 75 72 6e 20 72 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 72 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 6f 2e Data Ascii: /** * @id5io/id5-api.js * @version v1.0.55 * @link https://id5.io/ * @license Apache-2.0 */!function(n){var r={};function o(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,o),t.l=!0,t.exports}o.
2023-12-28 16:22:10 UTC	1369	IN	Data Raw: 79 70 74 6f 2e 72 61 6e 64 6f 6d 55 55 49 44 28 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 31 65 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 7d 2c 67 2e 73 65 6d 61 6e 74 69 63 56 65 72 73 69 6f 6e 43 6f 6d 70 61 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 5e 5c 5c 64 2b 28 5c 5c 2e 5c 5c 64 2b 28 5c 5c 2e 5c 5c 64 2b 29 7b 30 2c 31 7d 29 7b 30 2c 31 7d 24 22 3b 69 66 28 21 65 2e 6d 61 74 63 68 28 6e 29 7c 7c 21 74 2e 6d 61 74 63 68 28 6e 29 29 72 65 74 75 72 6e 3b 76 61 72 20 72 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6f 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 29 7c 7c 30 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ypto.randomUUID();return"".concat(1e6*Math.random()\|0)},g.semanticVersionCompare=function(e,t){var n="^\\d+(\\.\\d+(\\.\\d+){0,1}){0,1}$";if(!e.match(n)\|\|!t.match(n))return;var r=e.split("."),o=t.split("."),n=function(e){return parseInt(e)\|\|0},e=function(
2023-12-28 16:22:10 UTC	1369	IN	Data Raw: 2e 68 72 65 66 3d 65 3a 6e 2e 68 72 65 66 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 3b 74 3d 74 26 26 22 64 65 63 6f 64 65 53 65 61 72 63 68 41 73 53 74 72 69 6e 67 22 69 6e 20 74 26 26 74 2e 64 65 63 6f 64 65 53 65 61 72 63 68 41 73 53 74 72 69 6e 67 3b 72 65 74 75 72 6e 7b 68 72 65 66 3a 6e 2e 68 72 65 66 2c 70 72 6f 74 6f 63 6f 6c 3a 28 6e 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 3a 24 2f 2c 22 22 29 2c 68 6f 73 74 6e 61 6d 65 3a 6e 2e 68 6f 73 74 6e 61 6d 65 2c 70 6f 72 74 3a 2b 6e 2e 70 6f 72 74 2c 70 61 74 68 6e 61 6d 65 3a 6e 2e 70 61 74 68 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5e 28 3f 21 5c 2f 29 2f 2c 22 2f 22 29 2c 73 65 61 72 63 68 3a 74 3f 6e 2e 73 65 61 72 63 68 3a 66 75 6e 63 74 69 Data Ascii: .href=e:n.href=decodeURIComponent(e);t=t&&"decodeSearchAsString"in t&&t.decodeSearchAsString;return{href:n.href,protocol:(n.protocol\|\|"").replace(/:$/,""),hostname:n.hostname,port:+n.port,pathname:n.pathname.replace(/^(?!\/)/,"/"),search:t?n.search:functi
2023-12-28 16:22:10 UTC	1369	IN	Data Raw: 6e 2e 73 65 61 72 63 68 7c 7c 22 22 29 2c 68 61 73 68 3a 28 6e 2e 68 61 73 68 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 23 2f 2c 22 22 29 2c 68 6f 73 74 3a 6e 2e 68 6f 73 74 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 7d 7d 28 65 2c 6f 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 73 2e 73 65 61 72 63 68 2c 6e 29 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 68 74 74 70 22 29 2b 22 3a 2f 2f 22 2b 28 65 2e 68 6f 73 74 7c 7c 65 2e 68 6f 73 74 6e 61 6d 65 2b 28 65 2e 70 6f 72 74 3f 22 3a 22 2e 63 6f 6e 63 61 74 28 65 2e 70 6f 72 74 29 3a 22 22 29 29 2b 28 65 2e 70 61 74 68 6e 61 6d 65 7c 7c 22 22 29 2b 28 65 2e 73 65 61 72 63 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 66 75 Data Ascii: n.search\|\|""),hash:(n.hash\|\|"").replace(/^#/,""),host:n.host\|\|window.location.host}}(e,o),Object.assign(s.search,n),e=function(e){return(e.protocol\|\|"http")+"://"+(e.host\|\|e.hostname+(e.port?":".concat(e.port):""))+(e.pathname\|\|"")+(e.search?"?".concat(fu
2023-12-28 16:22:10 UTC	1369	IN	Data Raw: 72 72 61 79 28 6e 29 3b 66 6f 72 28 3b 6e 2d 2d 3b 29 72 5b 6e 5d 3d 5b 74 5b 6e 5d 2c 65 5b 74 5b 6e 5d 5d 5d 3b 72 65 74 75 72 6e 20 72 7d 3b 76 61 72 20 75 3d 6d 28 31 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 72 65 74 75 72 6e 28 6c 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e Data Ascii: rray(n);for(;n--;)r[n]=[t[n],e[t[n]]];return r};var u=m(1);function l(e){return(l="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.
2023-12-28 16:22:10 UTC	1369	IN	Data Raw: 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 7c 7c 21 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 29 72 65 74 75 72 6e 21 31 3b 69 66 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 72 6f 78 79 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 Data Ascii: fined"==typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}();return function(){va
2023-12-28 16:22:10 UTC	1369	IN	Data Raw: 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 26 26 72 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 6e 26 26 72 28 65 2c 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 7d 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 63 28 74 68 69 73 2c 65 29 7d 72 65 74 75 72 6e 20 75 Data Ascii: )}}function u(e,t,n){return t&&r(e.prototype,t),n&&r(e,n),Object.defineProperty(e,"prototype",{writable:!1}),e}n.d(t,"a",function(){return l}),n.d(t,"c",function(){return f}),n.d(t,"b",function(){return d});var l=function(){function e(){c(this,e)}return u
2023-12-28 16:22:10 UTC	1369	IN	Data Raw: 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 28 65 3d 74 68 69 73 2e 5f 64 65 6c 65 67 61 74 65 29 2e 65 72 72 6f 72 2e 61 70 70 6c 79 28 65 2c 5b 74 68 69 73 2e 5f 70 72 65 66 69 78 5d 2e 63 6f 6e 63 61 74 28 6e 29 29 7d 7d 5d 29 2c 6f 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 30 3b 72 65 74 75 72 6e 20 69 2e 6d 2e 5f 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 3d 6e 26 26 74 28 65 29 7d 29 2c 6e 7d 2c 74 2e 71 3d 67 2c 74 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 3d 21 21 65 7d 2c 74 2e 6c 3d 62 2c 74 2e 6d 3d 66 75 6e 63 74 69 Data Ascii: ),r=0;r<t;r++)n[r]=arguments[r];(e=this._delegate).error.apply(e,[this._prefix].concat(n))}}]),o}()},function(e,t,n){"use strict";t.c=function(e,t){var n=!0;return i.m._each(e,function(e){return n=n&&t(e)}),n},t.q=g,t.r=function(e){y=!!e},t.l=b,t.m=functi
2023-12-28 16:22:10 UTC	1369	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e Data Ascii: on(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function a(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defin
2023-12-28 16:22:10 UTC	1369	IN	Data Raw: 6f 6e 20 68 28 65 29 7b 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 6f 28 65 29 7c 7c 6e 75 6c 6c 3d 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 65 29 3b 74 3d 6e 2e 63 61 6c 6c 28 65 2c 74 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 Data Ascii: on h(e){e=function(e,t){if("object"!==o(e)\|\|null===e)return e;var n=e[Symbol.toPrimitive];if(void 0===n)return("string"===t?String:Number)(e);t=n.call(e,t\|\|"default");if("object"!==o(t))return t;throw new TypeError("@@toPrimitive must return a primitive v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49856	34.96.70.87	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	565	OUT	GET /encrypted-signals/encrypted-tag-g.js HTTP/1.1 Host: invstatic101.creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:10 UTC	397	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 last-modified: Thu, 03 Aug 2023 03:28:51 GMT etag: fc4e6bfe266081c4873c6f08c8298e5c x-cloud-trace-context: 5453331e4a224d5cd0ec79b43af5d83c date: Thu, 28 Dec 2023 16:22:10 GMT server: Google Frontend Content-Length: 1207 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:10 UTC	855	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 45 53 50 20 2d 20 52 54 42 48 6f 75 73 65 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 32 2e 34 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 74 62 68 6f 75 73 65 2e 63 6f 6d 2f 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 74 62 68 6f 75 73 65 2d 65 73 70 22 29 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 74 62 68 6f 75 73 65 2d 73 65 67 6d 65 6e 74 73 22 29 2c 74 3d 70 62 6a 73 2e 67 65 74 55 73 65 72 49 64 73 28 29 3f 2e 70 75 62 63 69 64 3b 72 65 74 75 72 6e 20 73 69 67 6e 61 6c 5f 64 Data Ascii: /** * ESP - RTBHouse * @version v1.2.4 * @link https://www.rtbhouse.com/ */!function(){async function e(){var e=window.localStorage.getItem("rtbhouse-esp"),n=window.localStorage.getItem("rtbhouse-segments"),t=pbjs.getUserIds()?.pubcid;return signal_d
2023-12-28 16:22:10 UTC	352	IN	Data Raw: 73 6f 6e 28 29 29 2e 6d 65 73 73 61 67 65 7d 28 73 69 67 6e 61 6c 5f 64 65 63 72 79 70 74 65 64 29 2e 74 68 65 6e 28 65 3d 3e 65 29 7d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 68 69 73 2c 65 29 7d 73 65 6e 64 5f 73 69 67 6e 61 6c 28 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 65 6e 63 72 79 70 74 65 64 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 7c 7c 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 65 6e 63 72 79 70 74 65 64 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 3d 5b 5d 29 2c 6e 75 6c 6c 21 3d 67 6f 6f 67 6c 65 74 61 67 2e 65 6e 63 72 79 70 74 65 64 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 6e 63 72 79 70 74 Data Ascii: son()).message}(signal_decrypted).then(e=>e)}new class{constructor(e){Object.assign(this,e)}send_signal(){window.googletag.encryptedSignalProviders\|\|(window.googletag.encryptedSignalProviders=[]),null!=googletag.encryptedSignalProviders&&googletag.encrypt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49854	74.119.118.134	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	543	OUT	GET /js/ld/publishertag.ids.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:10 UTC	483	IN	HTTP/1.1 200 OK server: nginx date: Thu, 28 Dec 2023 16:22:10 GMT content-type: text/javascript content-length: 43448 last-modified: Thu, 21 Dec 2023 07:50:16 GMT etag: "6583ee38-a9b8" expires: Fri, 29 Dec 2023 16:22:10 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2023-12-28 16:22:10 UTC	15901	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 65 3b 28 65 3d 69 3d 69 7c 7c 7b 7d 29 5b 65 2e 45 72 72 6f 72 3d 30 5d 3d 22 45 72 72 6f 72 22 2c 65 5b 65 2e 57 61 72 6e 69 6e 67 3d 31 5d 3d 22 57 61 72 6e 69 6e 67 22 2c 65 5b 65 2e 44 65 62 75 67 3d 32 5d 3d 22 44 65 62 75 67 22 3b 76 61 72 20 73 3d 5b 22 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 38 66 31 63 3b 22 2c 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 22 2c 22 70 61 64 64 69 6e 67 3a 20 31 70 78 20 34 70 78 3b 22 2c 22 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 22 5d 2e 6a 6f 69 6e 28 22 20 22 29 2c 68 3d 28 61 2e 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 Data Ascii: !function(){"use strict";var i,e;(e=i=i\|\|{})[e.Error=0]="Error",e[e.Warning=1]="Warning",e[e.Debug=2]="Debug";var s=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),h=(a.Log=function(e,t)
2023-12-28 16:22:10 UTC	16319	IN	Data Raw: 22 2e 22 29 3b 69 66 28 21 28 2d 31 3c 74 68 69 73 2e 70 75 62 6c 69 63 54 6f 70 54 6c 64 73 2e 69 6e 64 65 78 4f 66 28 70 29 29 29 74 72 79 7b 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 53 74 72 69 6e 67 28 65 2c 74 2c 63 2c 70 2c 69 29 3b 76 61 72 20 64 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 65 2c 6e 29 3b 69 66 28 64 26 26 64 3d 3d 3d 74 29 72 65 74 75 72 6e 20 70 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 73 7d 2c 50 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 21 31 29 2c 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 65 2c 22 22 2c 30 2c 74 2c 6f 29 7d 2c 50 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6f 6b Data Ascii: ".");if(!(-1<this.publicTopTlds.indexOf(p)))try{this.setCookieString(e,t,c,p,i);var d=this.getCookie(e,n);if(d&&d===t)return p}catch(e){}}return s},P.prototype.deleteCookie=function(e,t,o){void 0===o&&(o=!1),this.setCookie(e,"",0,t,o)},P.prototype.getCook
2023-12-28 16:22:10 UTC	11228	IN	Data Raw: 4c 45 52 7d 72 65 74 75 72 6e 20 6e 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 48 41 4e 44 4c 45 52 7d 2c 6e 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 55 52 4c 3d 22 68 74 74 70 73 3a 2f 2f 62 69 64 64 65 72 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 22 2c 6e 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 48 41 4e 44 4c 45 52 3d 22 63 64 62 22 2c 6e 65 2e 43 52 49 54 45 4f 5f 43 4f 4d 4d 45 52 43 45 5f 45 58 50 45 52 49 45 4e 43 45 5f 33 5f 48 41 4e 44 4c 45 52 3d 22 65 78 70 65 72 69 65 6e 63 65 73 2f 32 30 32 33 2d 31 30 2f 64 79 6e 61 6d 69 63 2d 62 75 74 74 6f 6e 73 22 2c 6e 65 2e 43 52 49 54 45 4f 5f 43 4f 4d 4d 45 52 43 45 5f 45 58 50 45 52 49 45 4e 43 45 5f 34 5f 48 41 4e 44 4c 45 52 3d 22 65 78 70 65 72 69 65 6e 63 65 73 2f 32 30 32 33 2d 31 Data Ascii: LER}return ne.CRITEO_BIDDER_HANDLER},ne.CRITEO_BIDDER_URL="https://bidder.criteo.com/",ne.CRITEO_BIDDER_HANDLER="cdb",ne.CRITEO_COMMERCE_EXPERIENCE_3_HANDLER="experiences/2023-10/dynamic-buttons",ne.CRITEO_COMMERCE_EXPERIENCE_4_HANDLER="experiences/2023-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49851	151.101.1.229	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	565	OUT	GET /gh/prebid/shared-id/pubcid.js/docs/pubcid.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:10 UTC	754	IN	HTTP/1.1 200 OK Connection: close Content-Length: 732 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: master X-JSD-Version-Type: branch ETag: W/"2dc-IrZxm/sP4aqtIfs1EfEw6Dg5q1Y" Accept-Ranges: bytes Date: Thu, 28 Dec 2023 16:22:10 GMT Age: 23919 X-Served-By: cache-fra-eddf8230042-FRA, cache-dfw-kdfw8210140-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2023-12-28 16:22:10 UTC	732	IN	Data Raw: 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 22 70 75 62 63 69 64 2e 6f 72 67 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3f 28 6f 5e 28 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 3f 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 29 29 5b 30 5d 25 31 36 3a 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3e 3e 6f 2f 34 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 28 5b 31 65 37 5d 2b 2d 31 65 33 2b 2d 34 65 33 2b 2d 38 65 33 2b 2d 31 65 31 31 29 2e 72 65 70 6c 61 63 65 28 2f 5b 30 31 38 5d 2f 67 2c 65 29 7d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 Data Ascii: (()=>{const o="pubcid.org";function e(o){return o?(o^(window&&window.crypto&&window.crypto.getRandomValues?crypto.getRandomValues(new Uint8Array(1))[0]%16:16*Math.random())>>o/4).toString(16):([1e7]+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g,e)}window.googlet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49853	34.102.146.192	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	522	OUT	GET /esp.js HTTP/1.1 Host: oa.openxcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:10 UTC	802	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPphxNkBCL_2FlXWZ9zS6rBz9JDrerudpzVdfPB38eipMCn4oWrPJOi6gfoRrUNnFwRuhL7OhmTlRUmuv-GpZVcqlceYrZdM x-goog-generation: 1622140251693895 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 7927 Content-Encoding: gzip x-goog-hash: crc32c=f21hYg== x-goog-hash: md5=31VCuIvA42jGmZdUpbniug== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 7927 Server: UploadServer Date: Wed, 27 Dec 2023 07:51:52 GMT Expires: Thu, 26 Dec 2024 07:51:52 GMT Cache-Control: no-transform Age: 117018 Last-Modified: Thu, 27 May 2021 18:30:51 GMT ETag: "df5542b88bc0e368c6999754a5b9e2ba" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:10 UTC	450	IN	Data Raw: 1f 8b 08 08 5b e5 af 60 02 ff 74 6d 70 6d 74 39 72 5f 31 74 7a 00 cd 3c 0b 7b db 36 92 7f 45 e2 75 65 62 0d d3 56 d2 47 4a 85 d1 ba ae db 64 37 89 bd b1 d3 6d 4f 51 7d b4 04 49 6c 68 52 25 21 3b ae c5 fb ed 37 33 00 48 90 a2 ec 74 9b de 5d bf c6 e2 03 18 0c 06 f3 c6 80 37 51 32 4d 6f bc f4 c3 85 c8 97 c1 6c 95 4c 64 94 26 ae 64 77 d7 61 d6 11 c1 5d 31 30 0f 3b 99 9b b0 bb 68 e6 8a 51 32 66 99 90 ab 2c e9 e0 b5 27 3e 2c d3 4c e6 03 ec 92 06 f8 28 b8 8b fc 84 c7 7e b7 cf f5 4b ff ae 28 06 ba 93 c4 4e 93 30 8e dd d4 f4 e5 29 af ae 33 06 37 71 d0 3d a8 9e 15 ba 6b e6 5d 05 92 67 de 24 10 f0 77 6a 61 cc 05 07 f4 32 2f c5 4b b6 5e 9f 5c fe 22 26 d2 9b 8a 59 94 88 d3 2c 5d 8a 4c de 52 b3 3b 91 ac ae 44 16 5e c6 c2 87 31 e6 42 fa 49 c1 0a 80 97 d5 28 e0 ac 12 d5 Data Ascii: [`tmpmt9r_1tz<{6EuebVGJd7mOQ}IlhR%!;73Ht]7Q2MolLd&dwa]10;hQ2f,'>,L(~K(N0)37q=k]g$wja2/K^\"&Y,]LR;D^1BI(
2023-12-28 16:22:10 UTC	1252	IN	Data Raw: ee 85 df f2 b2 64 64 c4 4b 70 27 74 80 fa 5c e0 70 69 63 49 74 43 4d a2 65 96 ca 14 27 e9 2d c2 fc e4 26 31 c4 52 c2 80 1d 10 c6 32 70 1c 9e 01 75 f3 a0 ff 88 15 ee a8 c6 e4 19 bb 93 46 2a 60 99 a1 01 af 0f 69 c9 2b b5 e7 48 b9 88 87 d0 2f bb 25 0a e4 81 1c 45 63 37 64 7c 15 e4 1e ad 46 31 09 e5 64 81 24 d2 18 5f a7 d1 14 21 b0 22 f7 a6 69 22 86 c2 5d 31 1f 10 be 8a 72 e1 65 22 4f e3 6b 7c e4 c9 85 48 70 71 58 51 a1 65 93 5c c3 b3 c8 a8 17 61 11 e5 3c 09 c2 6c 0e ac 91 80 f6 30 ab 26 6e 3a 7a 18 d7 2d 7b c1 0c 54 c7 30 90 5e b8 5c c6 b7 2e ca 7b a5 9c 72 1a cb 0d 69 ae 39 5f 71 27 11 1f 80 f5 60 02 65 9b d5 46 1b b9 c8 d2 1b 6a 94 bb 34 e3 03 56 30 56 14 bc 9c 8b 61 84 a0 7c 62 bd ab 78 08 94 55 7d 1d 70 9d 94 f0 d4 55 4a 2e 3a c8 ee 20 7f 03 45 87 26 6b Data Ascii: ddKp't\picItCMe'-&1R2puF*`i+H/%Ec7d\|F1d$_!"i"]1re"Ok\|HpqXQe\a<l0&n:z-{T0^\.{ri9_q'`eFj4V0Va\|bxU}pUJ.: E&k
2023-12-28 16:22:10 UTC	1252	IN	Data Raw: 1a 23 86 33 c0 47 dd 3f 86 b6 a4 80 00 ee 71 02 4e a2 c8 bd e5 2a 5f 80 82 ab c6 bf b0 82 2e 4f 1b 29 78 be 5e 83 62 17 b4 9a 41 69 63 70 16 52 74 88 0c dc 6e 1d 88 0a e0 09 02 6c 0c 1b 8c cc dc 9c 2c 4d a5 53 80 ce 2a 15 ef 07 42 52 a3 0a 44 14 d2 ed 1e 58 18 1e 23 40 94 9d 12 4f d0 79 c8 76 16 9f a9 e8 4c 31 e3 a6 1f ae 98 a3 16 67 77 a3 fc 75 f8 1a e4 31 16 c9 5c 2e 98 f1 07 f7 fa e0 65 96 43 0b 50 cd e8 82 0d 76 77 93 a7 a6 ed 80 51 60 ad 03 c2 84 55 58 68 55 35 4a 70 21 90 6d 03 cc ae 0c 1a ef b5 5c 9b 16 70 55 54 de 2a 31 73 54 68 d1 bb c3 5b ff d0 d2 4d 87 a5 b1 d0 0e 88 86 46 1e 08 b8 e6 46 66 63 cb 34 5e c3 4a 81 2b 9d ad 26 c0 a6 c1 82 2f 6a f7 31 8f c9 19 8b c3 5b 94 ac 20 77 17 a0 44 2b 77 f6 3b 43 4e 86 c2 9f 6f 3c 6f 89 de db 96 00 03 7a 6b Data Ascii: #3G?qN_.O)x^bAicpRtnl,MSBRDX#@OyvL1gwu1\.eCPvwQ`UXhU5Jp!m\pUT*1sTh[MFFfc4^J+&/j1[ wD+w;CNo<ozk
2023-12-28 16:22:10 UTC	1252	IN	Data Raw: 86 d7 eb 75 4a 7f 23 fa 8b 99 a6 3f 8e da 76 82 a2 81 72 a5 bd 75 02 a1 52 c5 97 56 de e2 28 4c 30 4f 81 7a be 13 76 26 71 98 e7 9d 10 fe 2f b7 3e 9c 4f 83 69 7d b3 b3 12 5f 58 4e 5c 3f e3 4f e3 32 1a 97 1a 17 32 f1 aa fd a8 c0 be 59 af c1 6b 4d 3c 7b 7f 0a fd 68 87 5c 68 07 1c 4e f4 9c 12 cf ec 57 c1 bb ed 5b f7 09 c6 09 1c f9 b5 9d 9e 96 bf 86 39 69 d7 de 04 04 15 9a d0 33 68 a4 e2 be 3f 69 51 2d 8d a0 1c ea e1 a7 dd cc f3 d5 c6 dc 27 99 83 2d 33 8f b7 09 07 f0 28 49 30 04 99 4a 92 25 63 96 c0 fc 69 a4 54 56 fc 9e 92 11 54 46 f0 70 a4 cb 41 8c c2 1d af d7 e6 8d bd 65 5b 56 d8 a8 c9 cc 20 ba fe 34 d8 7f 04 11 b5 a8 eb 29 e9 ea 8c 2a d9 62 91 93 eb 78 3f db d8 c6 2e a3 6a 93 3d d3 81 d7 13 be d7 37 d1 b0 73 62 f6 07 82 ac 91 c1 01 29 cb 82 da 13 95 98 e1 Data Ascii: uJ#?vruRV(L0Ozv&q/>Oi}_XN\?O22YkM<{h\hNW[9i3h?iQ-'-3(I0J%ciTVTFpAe[V 4)*bx?.j=7sb)
2023-12-28 16:22:10 UTC	1252	IN	Data Raw: d0 af 57 7b ab 2c 16 c9 24 9d 8a 69 73 6a 58 3f 6d 52 58 97 c8 fe 0d 2b 26 83 2b 7a a9 d2 eb b5 6d fe fa 84 36 75 af aa 3c 6a b4 aa 77 b4 f8 63 5b ff 87 39 b4 0e d2 c8 e2 e6 46 c2 24 5d a1 7b 90 4a d2 fc 1d d3 b0 83 bd 30 3b 83 d3 77 4a 9d f7 31 78 20 43 8e 69 b7 5c 65 00 2b 66 b7 a8 b8 75 c2 0d fa 1a d2 02 f7 6e 3a 6d 5b 40 0c b7 53 db 86 a1 84 5f 6b fe 2d 4d 40 eb 9f cc 66 c0 19 fc a1 06 bb db 1b 68 bb b1 59 29 df 8e 7e 99 df 2d d9 cf ec 7d 7f 30 f6 de 43 a9 dc 60 4a 55 da 6c b3 66 52 86 e5 db 59 d3 ec d7 9a e7 7c 8b 91 e5 c6 ba e2 fa 92 59 fd dd 5c db 9e 53 df b0 a0 30 a0 95 73 35 59 59 98 d9 c1 20 a9 d2 77 c9 ee 2e cb f0 58 91 d6 8c 18 e9 1f 81 18 1f 81 40 ab e3 48 d5 89 8c 5f d2 28 71 b1 66 7c 1b c9 3f 95 b4 e0 ba 6c 97 96 ba 8c 80 84 2c 8d 92 99 19 Data Ascii: W{,$isjX?mRX+&+zm6u<jwc[9F$]{J0;wJ1x Ci\e+fun:m[@S_k-M@fhY)~-}0C`JUlfRY\|Y\S0s5YY w.X@H_(qf\|?l,
2023-12-28 16:22:10 UTC	1252	IN	Data Raw: a5 f2 af d5 5f bc 09 93 79 73 0f 51 21 d4 41 61 ab 82 95 16 d4 45 49 94 bb 38 55 f9 13 ac 24 67 0a d3 b3 20 f7 40 66 ca 1a 55 2a e7 41 28 67 d5 de 93 7b d6 ea 3f 8b 3c 0f e7 58 45 a7 ea c3 f0 10 80 d0 41 86 42 55 6a 3f 03 10 99 bc 47 a5 83 bf e0 c6 6c 2b 84 a7 5e 36 d7 9c d9 5c 63 9d 3d 38 ab f4 c8 cb da 69 fc f6 64 b6 75 54 58 b3 34 ee 6e 53 0d a3 32 8d 60 db f4 95 17 5e a6 99 ac d2 ed 09 69 eb 33 f0 9f d4 73 70 1c e9 8a 50 75 f4 f6 64 44 60 7f 7c f5 f2 b9 94 cb 37 ca da 0d 6a e7 f4 22 05 17 14 7d d4 92 53 37 71 7f 12 98 35 8b 5a 58 3d 6a e3 73 17 6b 13 c1 8c 1c c6 f1 1b 91 83 ba cd c5 73 f5 ca a5 dd 26 9d 07 c0 63 37 95 26 cf 86 ef 92 d1 3b d9 19 1b 95 6e ac c3 3b 98 12 46 29 ad f5 f9 07 54 15 68 d8 d3 79 97 38 b8 71 92 af 2e 61 59 dc 3e 2f 0b af f0 f3 Data Ascii: _ysQ!AaEI8U$g @fU*A(g{?<XEABUj?Gl+^6\c=8iduTX4nS2`^i3spPudD`\|7j"}S7q5ZX=jsks&c7&;n;F)Thy8q.aY>/
2023-12-28 16:22:10 UTC	1217	IN	Data Raw: 14 a0 86 5e 48 a7 93 ab c5 26 3e 25 c6 c2 7d c1 ea 04 53 48 9f 60 71 37 b6 e3 06 03 96 83 97 82 91 9b 3a e0 a9 4f b1 df 4d 30 77 72 e0 97 df a0 00 2f e3 39 a6 e0 e9 60 cf 13 7d 04 cb 54 c5 04 ed 91 14 29 bb 1b f5 65 c1 8b 8b 55 be 0c 97 d1 d0 fd cc 23 5e 73 9d b7 67 d0 27 ba 0e 27 b7 9d 38 ba cc c2 ec 16 3f 6b b0 c4 13 a8 09 7e d0 c0 74 71 b1 f0 f3 ed d9 29 15 30 f2 3e 6f 84 6a c9 f0 1f 6e e6 41 53 c5 61 10 66 b8 cc b7 46 c9 45 d6 59 84 ea 7b 09 f3 08 cc 2f b1 2a 0c e1 e1 47 13 5c f0 c9 98 2f e8 e4 30 04 23 f4 ab 37 23 1f 9a 90 9c cc ea 13 3a 3f fa ee f0 f4 45 fb 64 1a bd 68 4e e7 47 6a 4a 8f 36 a7 d4 cd bc f9 74 99 1d a2 c7 26 c0 bd ca 3c 40 7c 9a 66 9e c6 3d 1f 7d f9 f5 18 4f d0 2d 57 d9 32 cd 45 f5 bc 3f fe b7 09 c0 11 68 45 85 e4 a3 a8 30 b9 5a 5a 24 Data Ascii: ^H&>%}SH`q7:OM0wr/9`}T)eU#^sg''8?k~tq)0>ojnASafFEY{/*G\/0#7#:?EdhNGjJ6t&<@\|f=}O-W2E?hE0ZZ$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49855	18.245.110.16	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	539	OUT	GET /uid2SecureSignal.js HTTP/1.1 Host: cdn.prod.uidapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:10 UTC	591	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2776 Connection: close Date: Wed, 27 Dec 2023 19:21:09 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 19 Oct 2023 06:40:11 GMT ETag: "a3a9a9ee8e72db69d54e805f0586c651" x-amz-server-side-encryption: AES256 x-amz-version-id: KP_OVZMS6roEW_XJdOd.KnSEmM8GWiP3 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 bae72bda9f84e663ac409610a5d87f6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW57-P8 X-Amz-Cf-Id: DxKu764CFHbOchSezH1XMCjthbwFBx2l6MryLRL_bkqy8q8hXfekJg== Age: 75662
2023-12-28 16:22:10 UTC	2776	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 7b 35 35 31 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 77 61 69 74 65 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 69 2c 65 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 69 29 7b 74 72 79 7b 63 28 6f 2e 6e 65 78 74 28 69 29 29 7d 63 61 74 63 68 28 69 29 7b 74 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 69 29 7b 74 72 79 7b 63 28 6f 2e 74 68 72 6f 77 28 69 29 29 7d 63 61 74 63 68 28 69 29 7b 74 28 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 69 29 7b 76 61 72 20 65 3b 69 2e 64 6f 6e 65 3f 72 28 69 2e 76 61 6c 75 Data Ascii: (()=>{"use strict";({551:function(i,e){var n=this&&this.__awaiter\|\|function(i,e,n,o){return new(n\|\|(n=Promise))((function(r,t){function d(i){try{c(o.next(i))}catch(i){t(i)}}function g(i){try{c(o.throw(i))}catch(i){t(i)}}function c(i){var e;i.done?r(i.valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49857	142.250.138.132	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	861	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 76e5953c04163876c34343aa73551e05.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:10 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Thu, 28 Dec 2023 16:22:10 GMT Expires: Fri, 27 Dec 2024 16:22:10 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:10 UTC	545	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2023-12-28 16:22:10 UTC	1252	IN	Data Raw: 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 Data Ascii: .createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=functi
2023-12-28 16:22:10 UTC	1252	IN	Data Raw: 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 Data Ascii: this.i="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"st
2023-12-28 16:22:10 UTC	1252	IN	Data Raw: 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c Data Ascii: ();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),
2023-12-28 16:22:10 UTC	1252	IN	Data Raw: 5b 32 5d 2c 45 3d 43 5b 33 5d 3b 69 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c Data Ascii: [2],E=C[3];if(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hl
2023-12-28 16:22:10 UTC	609	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b Data Ascii: .location.href,!1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49847	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	682	OUT	GET /sync? HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:10 UTC	449	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:10 GMT Content-Length: 0 Connection: close Location: /sync?&ld=1 Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:10 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49858	3.208.124.249	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	798	OUT	POST /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive Content-Length: 439 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gXrQTQUAABvIwvU"; _cc_aud="ABR4XmNgYGBI7V2wHkhBAQAbxgJC"
2023-12-28 16:22:10 UTC	439	OUT	Data Raw: 7b 22 72 22 3a 7b 22 72 69 64 22 3a 74 72 75 65 7d 2c 22 6d 22 3a 7b 22 64 63 63 22 3a 31 36 35 38 39 2c 22 73 72 63 22 3a 22 53 59 4e 43 4a 53 22 2c 22 63 68 22 3a 7b 22 62 72 61 6e 64 73 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 43 68 72 6f 6d 69 75 6d 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 5d 2c 22 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 7d Data Ascii: {"r":{"rid":true},"m":{"dcc":16589,"src":"SYNCJS","ch":{"brands":[{"brand":"Google Chrome","version":"117"},{"brand":"Not;A=Brand","version":"8"},{"brand":"Chromium","version":"117"}],"fullVersionList":[{"brand":"Google Chrome","version":"117.0.5938.132"}
2023-12-28 16:22:10 UTC	541	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:10 GMT Content-Type: application/json;charset=utf-8 Content-Length: 235 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.50.177 Set-Cookie: _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee;Path=/;Domain=crwdcntrl.net;Expires=Mon, 23-Sep-2024 16:09:00 GMT;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.mediafire.com Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:10 UTC	235	IN	Data Raw: 7b 22 70 69 64 22 3a 22 35 65 32 32 31 62 31 62 61 32 65 34 62 66 31 31 36 63 35 36 61 65 63 64 61 66 38 37 31 36 65 65 22 2c 22 63 22 3a 5b 7b 22 6b 22 3a 22 5f 63 63 5f 69 64 22 2c 22 76 22 3a 22 35 65 32 32 31 62 31 62 61 32 65 34 62 66 31 31 36 63 35 36 61 65 63 64 61 66 38 37 31 36 65 65 22 2c 22 65 22 3a 32 33 33 32 38 30 30 30 7d 5d 2c 22 69 64 73 22 3a 5b 7b 22 69 22 3a 22 35 65 61 31 39 35 31 33 63 63 33 31 62 35 31 37 32 30 32 35 63 34 33 39 62 64 64 34 61 39 66 62 39 32 37 61 30 64 66 33 35 32 61 64 36 33 36 33 37 63 34 34 61 62 38 37 34 65 62 61 36 62 30 36 22 2c 22 74 22 3a 22 63 22 2c 22 63 22 3a 22 63 6f 72 65 22 2c 22 65 22 3a 22 31 37 30 33 38 36 36 39 33 30 37 35 33 22 7d 5d 7d Data Ascii: {"pid":"5e221b1ba2e4bf116c56aecdaf8716ee","c":[{"k":"_cc_id","v":"5e221b1ba2e4bf116c56aecdaf8716ee","e":23328000}],"ids":[{"i":"5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06","t":"c","c":"core","e":"1703866930753"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49848	35.166.142.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:10 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Dec 2023 16:22:10 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0b2-0de150cc24f909660815c225 Strict-Transport-Security: max-age=15768000
2023-12-28 16:22:10 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49859	34.120.63.153	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	364	OUT	GET /rtb/prebid?cid=8CUO2689O HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:11 UTC	390	IN	HTTP/1.1 405 Method Not Allowed content-type: text/html;charset=utf-8 content-language: en Content-Length: 449 date: Thu, 28 Dec 2023 16:22:10 GMT x-envoy-upstream-service-time: 4 vary: Accept-Encoding server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:11 UTC	449	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 35 20 e2 80 93 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 405 Method Not Allowed</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49860	142.251.116.99	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	768	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-829541-1&cid=1411026819.1703780523&jid=2073574725&_u=YEBAAUAAAAAAACAAI~&z=761256898 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:11 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:22:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49866	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:10 UTC	725	OUT	GET /sync?&ld=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:11 UTC	751	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1343 Connection: close P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: sync=CgoIoQEQkfjuicsxCgoIkQIQkfjuicsxCgoItAIQkfjuicsxCgoI5gEQkfjuicsxCgoIhwIQkfjuicsxCgoItwIQkfjuicsxCgkIOhCR-O6JyzEKCgiMAhCR-O6JyzEKCQhfEJH47onLMQoJCB8Qkfjuicsx; Path=/sync; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:11 GMT; Secure; SameSite=None Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:11 GMT; Secure; SameSite=None
2023-12-28 16:22:11 UTC	1343	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 69 64 3d 35 38 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 76 78 39 74 35 30 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 31 36 31 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 73 79 6e 63 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 32 33 30 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 Data Ascii: <!DOCTYPE html><html><body><img id=58 src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent="><img id=161 src="https://eb2.3lift.com/ebda?sync=1&gdpr=0&gdpr_consent="><img id=230 src="https://cm.g.doubleclick.ne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49867	34.120.107.143	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:11 UTC	648	OUT	GET /esp?url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:11 UTC	551	IN	HTTP/1.1 302 Found X-Powered-By: Express Access-Control-Allow-Origin: https://www.mediafire.com Vary: Origin Access-Control-Allow-Credentials: true Location: /esp?url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&rid=esp&cc=1 Set-Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531;Domain=.openx.net;Path=/;Max-Age=31536000;SameSite=None;Secure; Date: Thu, 28 Dec 2023 16:22:11 GMT Via: 1.1 google Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49865	44.220.113.151	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:11 UTC	584	OUT	GET /map/ct=y/c=3722/tp=ADSP/tpid=e52c68bd2ec041bc8bb423ef3441546f HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gXrQTQUAABvIwvU"; _cc_aud="ABR4XmNgYGBI7V2wHkhBAQAbxgJC"
2023-12-28 16:22:11 UTC	314	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:11 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.8.208 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:11 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49868	104.36.113.112	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:11 UTC	673	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=96230842&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:11 UTC	902	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=158936:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 28 Dec 2023 16:22:10 GMT Transfer-Encoding: chunked Connection: close
2023-12-28 16:22:11 UTC	2324	IN	Data Raw: 39 30 38 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 51 75 58 52 41 76 7a 48 51 48 6d 75 73 73 72 74 6c 50 48 32 51 67 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 Data Ascii: 908PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=QuXRAvzHQHmussrtlPH2Qg%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49869	44.220.113.151	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:11 UTC	528	OUT	GET /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gXrQTQUAABvIwvU"; _cc_aud="ABR4XmNgYGBI7V2wHkhBAQAbxgJC"
2023-12-28 16:22:11 UTC	239	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 28 Dec 2023 16:22:11 GMT Content-Type: text/html;charset=iso-8859-1 Content-Length: 484 Connection: close Cache-Control: must-revalidate,no-cache,no-store Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:11 UTC	484	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 36 2f 6d 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 3e 34 30 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/6/map</td></tr><tr><th>STATUS:</th><td>40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49870	162.19.138.120	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:11 UTC	605	OUT	GET /api/esp/increment?counter=no-config HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:11 UTC	345	IN	HTTP/1.1 204 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers access-control-allow-origin: https://www.mediafire.com vary: Origin access-control-allow-credentials: true date: Thu, 28 Dec 2023 16:22:11 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49874	34.120.107.143	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:11 UTC	712	OUT	GET /esp?url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&rid=esp&cc=1 HTTP/1.1 Host: oajs.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531
2023-12-28 16:22:11 UTC	391	IN	HTTP/1.1 200 OK X-Powered-By: Express Access-Control-Allow-Origin: https://www.mediafire.com Vary: Origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 85 ETag: W/"55-xGx2QttGaIMkPJIUl63tiQCGfFE" Date: Thu, 28 Dec 2023 16:22:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:11 UTC	85	IN	Data Raw: 7b 22 65 73 70 22 3a 22 65 79 4a 70 49 6a 6f 69 64 32 68 31 56 6b 5a 7a 4e 44 64 54 51 6e 56 74 4d 58 46 4e 4d 6a 6c 31 53 6a 46 49 5a 7a 30 39 49 6e 30 3d 22 2c 22 69 22 3a 22 77 68 75 56 46 73 34 37 53 42 75 6d 31 71 4d 32 39 75 4a 31 48 67 3d 3d 22 7d Data Ascii: {"esp":"eyJpIjoid2h1VkZzNDdTQnVtMXFNMjl1SjFIZz09In0=","i":"whuVFs47SBum1qM29uJ1Hg=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49872	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:11 UTC	651	OUT	GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?&ld=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:12 UTC	566	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:11 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MjUwNTcyMTE3NTA3MzM3NTY3NjM2OQ%3D%3D Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:11 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49873	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:11 UTC	828	OUT	GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?&ld=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync=CgoIoQEQkfjuicsxCgoIkQIQkfjuicsxCgoItAIQkfjuicsxCgoI5gEQkfjuicsxCgoIhwIQkfjuicsxCgoItwIQkfjuicsxCgkIOhCR-O6JyzEKCgiMAhCR-O6JyzEKCQhfEJH47onLMQoJCB8Qkfjuicsx; tluid=2505721175073375676369
2023-12-28 16:22:12 UTC	574	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:11 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MjUwNTcyMTE3NTA3MzM3NTY3NjM2OQ%3D%3D Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:11 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49888	74.119.118.138	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:11 UTC	783	OUT	GET /dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=${GPP_STRING_28}&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	441	IN	HTTP/1.1 200 OK content-type: image/gif date: Thu, 28 Dec 2023 16:22:11 GMT server: Kestrel cache-control: no-cache expires: Thu, 28 Dec 2023 00:00:00 GMT pragma: no-cache transfer-encoding: chunked x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 322245 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-28 16:22:12 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49883	3.33.220.150	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	637	OUT	GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	500	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Length: 209 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent= set-cookie: TDID=bd07a8c2-839a-4fb2-aff9-b3a4e1a150a3; expires=Sat, 28 Dec 2024 16:22:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI5rKbjPzywzwQBTgB; expires=Sat, 28 Dec 2024 16:22:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-28 16:22:12 UTC	209	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 76 78 39 74 35 30 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 76 78 39 74 35 30 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49889	104.254.148.251	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	680	OUT	GET /getuid?https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D3335%26xuid%3D%24UID%26dongle%3D4d58%26gdpr=0%26gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	1119	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Feb2.3lift.com%252Fxuid%253Fmid%253D3335%2526xuid%253D%2524UID%2526dongle%253D4d58%2526gdpr%3D0%2526gdpr_consent%3D AN-X-Request-Uuid: 3b2dc197-47b0-4626-a9dd-9bad98881fa0 Set-Cookie: uuid2=3643551440069563451; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:12 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 212.102.41.2; 212.102.41.2; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49890	104.254.148.251	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	655	OUT	GET /prebid/setuid?bidder=triplelift_native&gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	1232	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 77fd1bfb-7a57-4241-84b2-732b771a85e4 Set-Cookie: anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!@wnf-Te9(SNOfY2^u31Es8]fG5VUvFTvUrHN]0/G4dCvGmB0$oq!V+GdD1J%q)3RO.<Q:; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:12 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTJaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:12 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 212.102.41.2; 212.102.41.2; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2023-12-28 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49887	35.211.178.172	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	658	OUT	GET /sync?ssp=triplelift&user_id=2505721175073375676369&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	817	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=triplelift&user_id=2505721175073375676369&gdpr=0&gdpr_consent=${GDPR_CONSENT} Set-Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; path=/; expires=Fri, 27-Dec-2024 16:22:12 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1703780532; path=/; expires=Fri, 27-Dec-2024 16:22:12 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1703780532; path=/; expires=Fri, 27-Dec-2024 16:22:12 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1703780532; path=/; expires=Fri, 27-Dec-2024 16:22:12 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49902	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	699	OUT	GET /xuid?mid=7976&xuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:12 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:12 GMT; Secure; SameSite=None
2023-12-28 16:22:12 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49886	54.197.142.67	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	635	OUT	GET /sync/triplelift/2505721175073375676369?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	868	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Length: 0 Connection: close Location: https://eb2.3lift.com/xuid?mid=2662&xuid=y-70F2tLRE2oQISqEcJ6nwgdDkSCU1vR1wcB.wZmm8rw--~A&dongle=0883 Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLSgjWUCECWxq28gTT9yYU10qLC3xZkFEgEBAQHyjmWXZQAAAAAA_eMAAA&S=AQAAAsxuQ4dkvFJapM6sdWSwxFg; Expires=Fri, 27 Dec 2024 22:22:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49897	52.46.128.147	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	800	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	815	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Length: 0 Connection: close x-amz-rid: N9TXPV8RADD8T2S1SPM8 Set-Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac\|t; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 16:22:12 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&redir=true&gdpr=0&gdpr_consent=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49910	34.111.113.62	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	663	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	1087	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:12 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1703780532515;Expires=Mon, 26 Feb 2024 16:22:12 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b;Expires=Mon, 26 Feb 2024 16:22:12 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3371&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49900	54.160.195.52	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	716	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	388	IN	HTTP/1.1 303 See Other Date: Thu, 28 Dec 2023 16:22:12 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Thu, 28 Dec 2023 16:32:12 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49913	34.200.65.202	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	680	OUT	GET /ups/58292/sync?_origin=1&uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	624	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&redir=true&gdpr=0&gdpr_consent=&verify=true Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc; Expires=Fri, 27 Dec 2024 22:22:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49906	54.197.142.67	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	650	OUT	GET /sync/pubmatic/42E5D102-FCC7-4079-AEB2-CAED94F1F642?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLSgjWUCEKcW8RQZEygESZczPm5i0akFEgEBAQHyjmWXZQAAAAAA_eMAAA&S=AQAAAon37F-DVJqIQLpqTurDZFQ; Expires=Fri, 27 Dec 2024 22:22:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2023-12-28 16:22:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49905	3.33.220.150	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	641	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	501	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Length: 211 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= set-cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; expires=Sat, 28 Dec 2024 16:22:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI-LeVkPzywzwQBTgB; expires=Sat, 28 Dec 2024 16:22:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-28 16:22:12 UTC	211	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 70 75 62 6d 61 74 69 63 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 70 75 62 6d 61 74 69 63 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49912	34.170.123.2	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	961	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=53579F87497840889870425CB87FCFFF; Path=/; domain=simpli.fi; Expires=Sat, 28-Dec-24 16:22:12 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=53579F87497840889870425CB87FCFFF; Path=/; domain=simpli.fi; Expires=Sat, 28-Dec-24 16:22:12 GMT; Secure; Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:53579F87497840889870425CB87FCFFF Expires: Wed, 27 Dec 2023 16:22:12 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2023-12-28 16:22:12 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49911	40.76.134.238	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%2042E5D102-FCC7-4079-AEB2-CAED94F1F642&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:12 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Thu, 28 Dec 2023 16:22:12 GMT Content-Type: text/html Content-Length: 581 Connection: close
2023-12-28 16:22:12 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49916	35.244.159.8	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	762	OUT	GET /w/1.0/pd?plm=5 HTTP/1.1 Host: google-bidout-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531
2023-12-28 16:22:13 UTC	620	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; Version=1; Expires=Fri, 27-Dec-2024 16:22:13 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1703780533\|vMgavPkWgy; Version=1; Expires=Fri, 12-Jan-2024 16:22:13 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Thu, 28 Dec 2023 16:22:13 GMT Content-Type: text/html Content-Length: 725 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:13 UTC	725	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 72 2d 62 68 2e 79 62 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 79 6e 63 2f 6f 70 65 6e 78 2f 38 35 37 30 63 63 30 62 2d 66 37 31 30 2d 65 35 61 35 2d 63 64 64 37 2d 37 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://pr-bh.ybp.yahoo.com/sync/openx/8570cc0b-f710-e5a5-cdd7-7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49914	52.46.128.147	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:12 UTC	847	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac\|t
2023-12-28 16:22:13 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Dec 2023 16:22:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: WHXAF20CEX9BTBXSXH04 Set-Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 16:22:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2029 16:22:13 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-28 16:22:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49922	142.251.116.104	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:13 UTC	837	OUT	GET /pagead/drt/ui HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:13 UTC	426	IN	HTTP/1.1 302 Found Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 28 Dec 2023 16:22:13 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49923	54.160.195.52	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:13 UTC	758	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2023-12-28 16:22:13 UTC	795	IN	HTTP/1.1 303 See Other Date: Thu, 28 Dec 2023 16:22:13 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFEa0VVN0xHMEVBQUJhZnRMcFhvdw&gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AADkEU7LG0EAABaftLpXow; Domain=bidr.io; expires=Sun, 26 Jan 2025 11:22:13 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Sun, 26 Jan 2025 11:22:13 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49919	52.45.111.235	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:13 UTC	752	OUT	GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:13 UTC	549	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 28 Dec 2023 16:22:13 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=bb8b2075-04f6-4e39-a178-835d11d8840f&gdpr=0&gdpr_consent= Set-Cookie: cu=bb8b2075-04f6-4e39-a178-835d11d8840f\|1703780533557; Path=/; Domain=ipredictive.com; Expires=Fri, 27 Dec 2024 16:22:13 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 787e1551-ccce-4ed6-bc4a-fba4a3c1f1c8 Content-Length: 205 Connection: Close
2023-12-28 16:22:13 UTC	205	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 62 62 38 62 32 30 37 35 2d 30 34 66 36 2d 34 65 33 39 2d 61 31 37 38 2d 38 33 35 64 31 31 64 38 38 34 30 66 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=bb8b2075-04f6-4e39-a178-835d11d8840f&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49931	142.251.116.104	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:14 UTC	837	OUT	GET /pagead/drt/ui HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:14 UTC	426	IN	HTTP/1.1 302 Found Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 28 Dec 2023 16:22:14 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49943	54.160.195.52	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:14 UTC	881	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=sas%2Cpp%2Csyn%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AADkEU7LG0EAABaftLpXow; bitoIsSecure=ok
2023-12-28 16:22:15 UTC	637	IN	HTTP/1.1 303 See Other Date: Thu, 28 Dec 2023 16:22:15 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AADkEU7LG0EAABaftLpXow&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AADkEU7LG0EAABaftLpXow; Domain=bidr.io; expires=Sun, 26 Jan 2025 11:22:15 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49875	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:14 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XetNvCDs+12R5fE&MD=h7gNdP2A HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-12-28 16:22:15 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1375bfb6-a987-4391-8a03-4942f00c18a0 MS-RequestId: e30a07ae-92ec-450b-9ea2-e60c5b663661 MS-CV: 47yxTTrOhk+5RLZa.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 28 Dec 2023 16:22:14 GMT Connection: close Content-Length: 24490
2023-12-28 16:22:15 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2023-12-28 16:22:15 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49950	34.111.113.62	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	749	OUT	GET /idsync/ex/receive/check?partner_id=3371&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b
2023-12-28 16:22:15 UTC	1227	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:15 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1703780532515;Expires=Mon, 26 Feb 2024 16:22:15 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b;Expires=Mon, 26 Feb 2024 16:22:15 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 26 Feb 2024 16:22:15 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%252C%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49954	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	701	OUT	GET /xuid?mid=5989&xuid=CAESEERw7M-QJkibFE6HzPvu_4I&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:15 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:15 GMT; Secure; SameSite=None
2023-12-28 16:22:15 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49959	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	687	OUT	GET /xuid?mid=2662&xuid=y-70F2tLRE2oQISqEcJ6nwgdDkSCU1vR1wcB.wZmm8rw--~A&dongle=0883 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:15 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:15 GMT; Secure; SameSite=None
2023-12-28 16:22:15 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49952	34.200.65.202	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	799	OUT	GET /ups/58292/sync?_origin=1&uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&redir=true&gdpr=0&gdpr_consent=&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc
2023-12-28 16:22:15 UTC	740	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=18z8~2fv4;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 27-Dec-2024 16:22:15 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-fNV4yyJE2uXLaY_PXOsvYoxyc0h2cn4-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc; Expires=Fri, 27 Dec 2024 22:22:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49958	104.254.148.251	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	1050	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Feb2.3lift.com%252Fxuid%253Fmid%253D3335%2526xuid%253D%2524UID%2526dongle%253D4d58%2526gdpr%3D0%2526gdpr_consent%3D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!@wnf-Te9(SNOfY2^u31Es8]fG5VUvFTvUrHN]0/G4dCvGmB0$oq!V+GdD1J%q)3RO.<Q:; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTJaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=; uuid2=3643551440069563451
2023-12-28 16:22:15 UTC	1032	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://eb2.3lift.com/xuid?mid=3335&xuid=3643551440069563451&dongle=4d58&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 561c8dfc-dde7-4b1e-a2c1-7b72047a67c5 Set-Cookie: uuid2=3643551440069563451; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:15 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 212.102.41.2; 212.102.41.2; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49961	52.46.128.147	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	727	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=4961d632-7b16-cc16-3c0e-e949faf68d03 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; ad-privacy=0
2023-12-28 16:22:15 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 9RFTHRSYVK8FYCCQMFD3 Set-Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 16:22:15 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2029 16:22:15 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-28 16:22:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49957	54.197.142.67	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	749	OUT	GET /sync/openx/8570cc0b-f710-e5a5-cdd7-7d2b6d928baa?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc
2023-12-28 16:22:15 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc; Expires=Fri, 27 Dec 2024 22:22:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2023-12-28 16:22:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49972	8.28.7.84	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	806	OUT	GET /AdServer/SPug?partnerID=158936&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
2023-12-28 16:22:15 UTC	287	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:15 GMT Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49971	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	879	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
2023-12-28 16:22:15 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49970	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	937	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEItecgeyae_P2TGuxmFr4WA&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
2023-12-28 16:22:15 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:15 GMT; path=/ Set-Cookie: PugT=1703780535; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49969	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	911	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:53579F87497840889870425CB87FCFFF HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
2023-12-28 16:22:15 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:15 GMT; path=/ Set-Cookie: PugT=1703780535; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49974	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	948	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=4357227210337848260&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
2023-12-28 16:22:15 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:14 GMT; path=/ Set-Cookie: PugT=1703780534; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:14 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:15 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49973	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	941	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=bb8b2075-04f6-4e39-a178-835d11d8840f&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
2023-12-28 16:22:15 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:15 GMT; path=/ Set-Cookie: PugT=1703780535; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:15 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49951	3.33.220.150	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	724	OUT	GET /track/cmb/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAEYBSgCMgsI-LeVkPzywzwQBTgB
2023-12-28 16:22:15 UTC	557	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Length: 251 Connection: close server: Kestrel location: https://eb2.3lift.com/xuid?mid=3658&xuid=3c35df97-b65a-42b9-abca-61d06d8e5fc4&dongle=0cfd&gdpr=0&gdpr_consent= set-cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; expires=Sat, 28 Dec 2024 16:22:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHc3Z4OXQ1MBILCPiYv4Hm8sM8EAUYBSABKAIyCwj4t5WQ_PLDPBAFOAE.; expires=Sat, 28 Dec 2024 16:22:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-28 16:22:15 UTC	251	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://eb2.3lift.com/xuid?mid=3658&xuid=3c35df97-b65a-42b9-abca-61d06d8e5fc4&dongle=0cfd&gdpr=0&gdpr_consent=">https://eb2.3lift.com/xuid?mid=3658&xuid=3c35df97-b65a-42b9-abca-61d06d8e5fc4&dongle=0cfd&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49955	3.33.220.150	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	736	OUT	GET /track/cmf/openx?oxid=11b7aa4f-67bc-77ec-fc00-6bde92c546e3&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAEYBSgCMgsI-LeVkPzywzwQBTgB
2023-12-28 16:22:15 UTC	567	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Length: 335 Connection: close server: Kestrel location: https://us-u.openx.net/w/1.0/sd?id=537072971&val=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=11b7aa4f-67bc-77ec-fc00-6bde92c546e3&gdpr=0&gdpr_consent= set-cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; expires=Sat, 28 Dec 2024 16:22:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwj4t5WQ_PLDPBAFOAE.; expires=Sat, 28 Dec 2024 16:22:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-28 16:22:15 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 26 74 74 64 5f 70 75 69 64 3d 31 31 62 37 61 61 34 66 2d 36 37 62 63 2d 37 37 65 63 2d 66 63 30 30 2d 36 62 64 65 39 32 63 35 34 36 65 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=11b7aa4f-67bc-77ec-fc00-6bde92c546e3&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=3c35df97-b65a-42b9-abca-61d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49964	3.33.220.150	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	728	OUT	GET /track/cmb/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAEYBSgCMgsI-LeVkPzywzwQBTgB
2023-12-28 16:22:15 UTC	609	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent= set-cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; expires=Sat, 28 Dec 2024 16:22:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFGAUgASgCMgsI-LeVkPzywzwQBTgB; expires=Sat, 28 Dec 2024 16:22:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-28 16:22:15 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49956	35.211.178.172	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	751	OUT	GET /ul_cb/sync?ssp=triplelift&user_id=2505721175073375676369&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; c=1703780532; tuuid_lu=1703780532
2023-12-28 16:22:15 UTC	593	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Dec 2023 16:22:15 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //beacon.lynx.cognitivlabs.com/bidSwitch.gif?bidswitch_ssp_id=triplelift&bsw_custom_parameter=d541ebb4-9aad-4c87-b8e0-e665e8aef738 Set-Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; path=/; expires=Fri, 27-Dec-2024 16:22:15 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1703780535; path=/; expires=Fri, 27-Dec-2024 16:22:15 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49975	147.135.94.220	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	970	OUT	GET /redir?partneruserid=AADkEU7LG0EAABaftLpXow&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Csyn%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:16 UTC	815	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 28 Dec 2023 16:22:15 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=pp%2Csyn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=3121188971179636291&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: pid=3121188971179636291; expires=Mon, 27 Jan 2025 16:22:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: TestIfCookieP=ok; expires=Mon, 27 Jan 2025 16:22:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: csync=127:AADkEU7LG0EAABaftLpXow; expires=Sat, 28 Dec 2024 16:22:15 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49977	104.36.113.112	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:15 UTC	893	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=33002690&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
2023-12-28 16:22:16 UTC	947	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=158936:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 28 Dec 2023 16:22:14 GMT Transfer-Encoding: chunked Connection: close
2023-12-28 16:22:16 UTC	2180	IN	Data Raw: 38 37 38 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 34 32 45 35 44 31 30 32 2d 46 43 43 37 2d 34 30 37 39 2d 41 45 42 32 2d 43 41 45 44 39 34 46 31 46 36 34 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 34 32 45 35 44 31 30 32 2d 46 43 43 37 2d 34 30 37 39 2d 41 45 42 32 2d 43 41 45 44 39 34 Data Ascii: 878PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=42E5D102-FCC7-4079-AEB2-CAED94

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49980	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:16 UTC	933	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
2023-12-28 16:22:16 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:16 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:16 GMT; path=/ Set-Cookie: PugT=1703780536; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:16 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49982	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:16 UTC	633	OUT	GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:16 UTC	172	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:16 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2023-12-28 16:22:16 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49979	3.33.220.150	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:16 UTC	817	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFGAUgASgCMgsI-LeVkPzywzwQBTgB
2023-12-28 16:22:16 UTC	655	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:16 GMT Content-Length: 359 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2C%2C set-cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; expires=Sat, 28 Dec 2024 16:22:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRgBIAEoAjILCLbChLX88sM8EAU4AVoFdGFwYWRgAg..; expires=Sat, 28 Dec 2024 16:22:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-28 16:22:16 UTC	359	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 26 74 74 64 5f 70 75 69 64 3d 35 32 36 62 61 35 36 64 2d 63 35 37 64 2d 34 62 32 64 2d 61 62 30 32 2d 66 64 34 62 31 63 34 64 32 61 32 62 25 32 43 25 32 43 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2C%2C">https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49983	54.160.195.52	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:16 UTC	906	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=pp%2Csyn%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=2&userid=3121188971179636291&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AADkEU7LG0EAABaftLpXow; bitoIsSecure=ok
2023-12-28 16:22:16 UTC	646	IN	HTTP/1.1 303 See Other Date: Thu, 28 Dec 2023 16:22:16 GMT location: https://bh.contextweb.com/bh/rtset?ev=AADkEU7LG0EAABaftLpXow&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 Server: gunicorn set-cookie: bito=AADkEU7LG0EAABaftLpXow; Domain=bidr.io; expires=Sun, 26 Jan 2025 11:22:16 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49981	104.36.113.111	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:16 UTC	877	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-fNV4yyJE2uXLaY_PXOsvYoxyc0h2cn4-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; chkChromeAb67Sec=1; DPSync3=1704931200%3A201_263%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A54_71_104_166_220_21_13_250%7C1704326400%3A223_2
2023-12-28 16:22:16 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:16 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1703780536; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:16 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49989	34.111.113.62	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	814	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=
2023-12-28 16:22:17 UTC	1101	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:17 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1703780532515;Expires=Mon, 26 Feb 2024 16:22:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b;Expires=Mon, 26 Feb 2024 16:22:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!8704;Expires=Mon, 26 Feb 2024 16:22:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:17 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49988	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	696	OUT	GET /xuid?mid=3658&xuid=3c35df97-b65a-42b9-abca-61d06d8e5fc4&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:17 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:17 GMT; Secure; SameSite=None
2023-12-28 16:22:17 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49985	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	679	OUT	GET /xuid?mid=3335&xuid=3643551440069563451&dongle=4d58&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:17 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:17 GMT; Secure; SameSite=None
2023-12-28 16:22:17 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49996	35.244.159.8	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	738	OUT	GET /w/1.0/sd?id=537072991&val=CAESENsJZHGl8ALruYxKoIjbX0E&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy
2023-12-28 16:22:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49991	104.254.148.251	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	1140	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!@wnf-Te9(SNOfY2^u31Es8]fG5VUvFTvUrHN]0/G4dCvGmB0$oq!V+GdD1J%q)3RO.<Q:; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTJaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=; uuid2=3643551440069563451
2023-12-28 16:22:17 UTC	1084	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3643551440069563451&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 9ba51bdd-7655-4c60-9514-bc147c847e24 Set-Cookie: uuid2=3643551440069563451; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:17 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 212.102.41.2; 212.102.41.2; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49995	35.244.159.8	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	800	OUT	GET /w/1.0/sd?id=537072971&val=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=11b7aa4f-67bc-77ec-fc00-6bde92c546e3&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy
2023-12-28 16:22:17 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780537483015; Version=1; Expires=Fri, 12-Jan-2024 16:22:17 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49999	34.120.107.143	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	533	OUT	GET /esp?url=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe&rid=esp&cc=1 HTTP/1.1 Host: oajs.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy
2023-12-28 16:22:17 UTC	335	IN	HTTP/1.1 200 OK X-Powered-By: Express Vary: Origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 85 ETag: W/"55-xGx2QttGaIMkPJIUl63tiQCGfFE" Date: Thu, 28 Dec 2023 16:22:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:17 UTC	85	IN	Data Raw: 7b 22 65 73 70 22 3a 22 65 79 4a 70 49 6a 6f 69 64 32 68 31 56 6b 5a 7a 4e 44 64 54 51 6e 56 74 4d 58 46 4e 4d 6a 6c 31 53 6a 46 49 5a 7a 30 39 49 6e 30 3d 22 2c 22 69 22 3a 22 77 68 75 56 46 73 34 37 53 42 75 6d 31 71 4d 32 39 75 4a 31 48 67 3d 3d 22 7d Data Ascii: {"esp":"eyJpIjoid2h1VkZzNDdTQnVtMXFNMjl1SjFIZz09In0=","i":"whuVFs47SBum1qM29uJ1Hg=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	50000	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	463	OUT	GET /xuid?mid=7976&xuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:17 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:17 GMT; Secure; SameSite=None
2023-12-28 16:22:17 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49992	44.199.51.202	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	684	OUT	GET /bidSwitch.gif?bidswitch_ssp_id=triplelift&bsw_custom_parameter=d541ebb4-9aad-4c87-b8e0-e665e8aef738 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:17 UTC	604	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://x.bidswitch.net/sync?dsp_id=425&user_group=1&expires=365&user_id=e71ba19d-7bbb-496d-b970-b82e9389cf8b&ssp=triplelift&bsw_param=d541ebb4-9aad-4c87-b8e0-e665e8aef738 Set-Cookie: UID=e71ba19d-7bbb-496d-b970-b82e9389cf8b; expires=Sat, 28 Dec 2024 16:22:17 GMT; path=/; secure; samesite=none Set-Cookie: ss=GOE7Odo1Mk01wQYQp7kx1pGh0Zq23PhqCib60VYtgHWEmYXT%2BatsrVw%2FUB5j4rtieZA2H8tWvBc55uIeFX2IYA%3D%3D; expires=Sat, 28 Dec 2024 16:22:17 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	50007	3.234.129.75	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	521	OUT	GET /sync/pubmatic/42E5D102-FCC7-4079-AEB2-CAED94F1F642?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc
2023-12-28 16:22:17 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc; Expires=Fri, 27 Dec 2024 22:22:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2023-12-28 16:22:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49998	74.119.119.150	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	550	OUT	GET /dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=${GPP_STRING_28}&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b HTTP/1.1 Host: dis.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:17 UTC	441	IN	HTTP/1.1 200 OK content-type: image/gif date: Thu, 28 Dec 2023 16:22:17 GMT server: Kestrel cache-control: no-cache expires: Thu, 28 Dec 2023 00:00:00 GMT pragma: no-cache transfer-encoding: chunked x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 365101 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-28 16:22:17 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	50011	198.148.27.131	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	979	OUT	GET /bh/rtset?ev=AADkEU7LG0EAABaftLpXow&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dsyn%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:17 UTC	1157	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-db744d8c7-556fc Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=kViit6MQmQ8v;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 22-Dec-2024 16:22:17 GMT;Max-Age=31104000;SameSite=None Set-Cookie: pb_rtb_ev=3-1osz\|7dN.0.AADkEU7LG0EAABaftLpXow;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 27-Dec-2024 16:22:17 GMT;Max-Age=31536000;SameSite=None Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=3121188971179636291&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AADkEU7LG0EAABaftLpXow&pid=558502&do=add&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=cb46d1714d9491de; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	50017	38.91.45.7	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	716	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:17 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_3c93ec9c5d044eca9dba8; Max-Age=47260800; SameSite=None; Expires=Fri, 27 Jun 2025 16:22:17 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220231228%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 27 Jun 2025 16:22:17 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 28 Dec 2023 16:22:17 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	50018	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	468	OUT	GET /xuid?mid=5989&xuid=CAESEERw7M-QJkibFE6HzPvu_4I&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:17 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:17 GMT; Secure; SameSite=None
2023-12-28 16:22:17 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	50019	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	454	OUT	GET /xuid?mid=2662&xuid=y-70F2tLRE2oQISqEcJ6nwgdDkSCU1vR1wcB.wZmm8rw--~A&dongle=0883 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:17 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:17 GMT; Secure; SameSite=None
2023-12-28 16:22:17 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	50001	104.254.151.36	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	750	OUT	GET /prebid/setuid?bidder=triplelift_native&gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!@wnf-Te9(SNOfY2^u31Es8]fG5VUvFTvUrHN]0/G4dCvGmB0$oq!V+GdD1J%q)3RO.<Q:; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTJaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=; uuid2=3643551440069563451
2023-12-28 16:22:17 UTC	1392	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: a95908d4-6eb5-4983-97ee-c75b81b09216 Set-Cookie: anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!A#FZ.CK$wNl!cB/Crbn=CgO/cxv2ai-YVycyiWulxoV)gm40?D0BDGG^3rPQEVk`!26hU20$^Q; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:17 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:17 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=3643551440069563451; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:17 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 212.102.41.2; 212.102.41.2; 897.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2023-12-28 16:22:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50022	8.28.7.83	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	1584	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEItecgeyae_P2TGuxmFr4WA&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
2023-12-28 16:22:18 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:17 GMT; path=/ Set-Cookie: PugT=1703780537; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:17 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	50030	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	1588	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=bb8b2075-04f6-4e39-a178-835d11d8840f&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
2023-12-28 16:22:18 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:17 GMT; path=/ Set-Cookie: PugT=1703780537; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:17 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:18 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50020	3.234.129.75	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	504	OUT	GET /sync/openx/8570cc0b-f710-e5a5-cdd7-7d2b6d928baa?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc
2023-12-28 16:22:18 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc; Expires=Fri, 27 Dec 2024 22:22:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2023-12-28 16:22:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50024	8.28.7.83	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	1526	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
2023-12-28 16:22:18 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:16 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	50023	8.28.7.83	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	1558	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:53579F87497840889870425CB87FCFFF HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
2023-12-28 16:22:18 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:18 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:18 GMT; path=/ Set-Cookie: PugT=1703780538; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:18 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	50029	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:17 UTC	1595	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=4357227210337848260&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
2023-12-28 16:22:18 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:16 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:16 GMT; path=/ Set-Cookie: PugT=1703780536; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:16 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:18 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	50031	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:18 UTC	1902	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3643551440069563451&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; PugT=1703780536; SPugT=1703780536
2023-12-28 16:22:18 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 11:27:33 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 11:27:33 GMT; path=/ Set-Cookie: PugT=1703762853; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 11:27:33 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	50027	209.54.182.161	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:18 UTC	482	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=4961d632-7b16-cc16-3c0e-e949faf68d03 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; ad-privacy=0
2023-12-28 16:22:18 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Dec 2023 16:22:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: T49H15DV38B2ZJJSZ6ZG Set-Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 16:22:18 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2029 16:22:18 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-28 16:22:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	50033	54.160.195.52	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:18 UTC	951	OUT	GET /cookie-sync?gdpr=0&userid=3121188971179636291&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=3&ev=AADkEU7LG0EAABaftLpXow&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AADkEU7LG0EAABaftLpXow; bitoIsSecure=ok
2023-12-28 16:22:18 UTC	634	IN	HTTP/1.1 303 See Other Date: Thu, 28 Dec 2023 16:22:18 GMT location: https://sync.technoratimedia.com/services?uid=AADkEU7LG0EAABaftLpXow&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 Server: gunicorn set-cookie: bito=AADkEU7LG0EAABaftLpXow; Domain=bidr.io; expires=Sun, 26 Jan 2025 11:22:18 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	50037	35.244.159.8	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:18 UTC	818	OUT	GET /w/1.0/sd?id=540245193&val=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy; univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780537483015
2023-12-28 16:22:19 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 28 Dec 2023 16:22:19 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	50035	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	1652	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; PugT=1703762853
2023-12-28 16:22:19 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:17 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:17 GMT; path=/ Set-Cookie: PugT=1703780537; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:17 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50036	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	400	OUT	GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:19 UTC	172	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:19 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2023-12-28 16:22:19 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50034	35.211.178.172	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	806	OUT	GET /sync?dsp_id=425&user_group=1&expires=365&user_id=e71ba19d-7bbb-496d-b970-b82e9389cf8b&ssp=triplelift&bsw_param=d541ebb4-9aad-4c87-b8e0-e665e8aef738 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; c=1703780532; tuuid_lu=1703780535
2023-12-28 16:22:19 UTC	542	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Dec 2023 16:22:19 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //eb2.3lift.com/xuid?mid=2409&xuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738&dongle=d3d3&gdpr=&gdpr_consent=&gdpr_pd= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50048	150.136.156.92	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	967	OUT	GET /services?uid=AADkEU7LG0EAABaftLpXow&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:19 UTC	1477	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Thu, 28 Dec 2023 16:22:19 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://ssum-sec.casalemedia.com/usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D56DE60CA3D45485394325E0AA6AE4072%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D3121188971179636291%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D Set-Cookie: tads_uidp_73=AADkEU7LG0EAABaftLpXow; Max-Age=63072000; Expires=Sat, 27 Dec 2025 16:22:19 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=56DE60CA3D45485394325E0AA6AE4072; Max-Age=63072000; Expires=Sat, 27 Dec 2025 16:22:19 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20231228162219+0000; Max-Age=63072000; Expires=Sat, 27 Dec 2025 16:22:19 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Sat, 27 Dec 2025 16:22:19 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 143475484 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50050	207.198.113.204	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	624	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:19 UTC	253	IN	HTTP/1.1 204 cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" date: Thu, 28 Dec 2023 16:22:19 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50049	38.98.69.175	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	604	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:19 UTC	720	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R33646_10E688CAC_3EE3278F&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R33646_10E688CAC_3EE3278F.1.0000000000000000658DA0BB; domain=mxptint.net; expires=Sun, 28-Dec-2025 16:22:19 GMT; path=/; secure; SameSite=None Date: Thu, 28 Dec 2023 16:22:18 GMT Connection: close Content-Length: 302 Strict-Transport-Security: max-age=-386785339; includeSubDomains
2023-12-28 16:22:19 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 33 33 36 34 36 5f 31 30 45 36 38 38 43 41 43 5f 33 45 45 33 32 37 38 46 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R33646_10E688CAC_3EE3278F&r=https://pmp.mxptint.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50039	34.230.139.192	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	655	OUT	GET /api/v1/dsync/Martin?exid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:19 UTC	456	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=5b81a9fb-79bc-089f-5625-a79b2bc11e27; Path=/; Domain=kargo.com; Expires=Fri, 27 Dec 2024 16:22:19 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2023-12-28 16:22:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50043	173.231.178.81	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	731	OUT	GET /bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.adgrx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:19 UTC	620	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:19 GMT Content-Type: image/gif Content-Length: 0 Connection: close server: Cowboy set-cookie: ADGRX_UID=45e73c86-a59d-11ee-a23b-06900a68fba8; Version=1; Expires=Sun, 26-Jan-2025 16:22:19 GMT; Max-Age=34128000; Domain=.adgrx.com; Path=/; Secure; SameSite=None Location: https://cm.adgrx.com/bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= X-RealServer-NX: lga-delivery-4 Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate Pragma: no-cache Expires: Thu, 23 Sep 2004 17:42:04 GMT P3P: CP="NOI OTC OTP OUR NOR" Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50040	54.158.15.169	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:19 UTC	570	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&vxii_pid=12&vxii_pid1=10067&vxii_rcid=615d9f76-6c39-4dc6-b81a-085a08461685 P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjYxNWQ5Zjc2LTZjMzktNGRjNi1iODFhLTA4NWEwODQ2MTY4NSIsImwiOjE3MDM3ODA1Mzk2MzMsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Thu, 28 Dec 2023 16:22:19 GMT; Max-Age=17280000; Secure; SameSite=None
2023-12-28 16:22:19 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 34 32 45 35 44 31 30 32 2d 46 43 43 37 2d 34 30 37 39 2d 41 45 42 32 2d 43 41 45 44 39 34 46 31 46 36 34 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 36 31 35 64 39 66 37 36 2d 36 63 33 39 2d 34 64 63 36 2d 62 38 31 61 2d 30 38 35 61 30 38 34 36 31 36 38 35 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&vxii_pid=12&vxii_pid1=10067&vxii_rcid=615d9f76-6c39-4dc6-b81a-085a08461685">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50044	192.184.69.239	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	737	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:19 UTC	828	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:19 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EIgBCwHiKvijAA; expires=Wed, 27-Mar-2024 16:22:19 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=658da0bb-9ba30-67587-6b68c; expires=Mon, 27-Jan-2025 16:22:19 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50038	52.3.7.191	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	648	OUT	GET /sync?pid=187&uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:19 UTC	420	IN	HTTP/1.1 204 Date: Thu, 28 Dec 2023 16:22:19 GMT Set-Cookie: __187_cid=42E5D102-FCC7-4079-AEB2-CAED94F1F642; Domain=.bfmio.com; Max-Age=31536000; Expires=Fri, 27-Dec-2024 11:22:19 GMT-0500; Path=/; SameSite=None; Secure Set-Cookie: __io_cid=354f5651cbae37b8564853b3b4b31a3cbfcd6503; Domain=.bfmio.com; Max-Age=31536000; Expires=Fri, 27-Dec-2024 11:22:19 GMT-0500; Path=/; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50041	54.147.24.55	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	848	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:20 UTC	711	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 28 Dec 2023 16:22:19 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-04ddd8e0d22313c99@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=gkU8EdmD1RiT9h5; Domain=.w55c.net; Expires=Mon, 27-Jan-2025 02:22:19 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50042	173.231.178.81	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:19 UTC	778	OUT	GET /bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.adgrx.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADGRX_UID=45e73c86-a59d-11ee-a23b-06900a68fba8
2023-12-28 16:22:20 UTC	849	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:20 GMT Content-Type: image/gif Content-Length: 0 Connection: close server: Cowboy set-cookie: ADGRX_UID=45e73c86-a59d-11ee-a23b-06900a68fba8; Version=1; Expires=Sun, 26-Jan-2025 16:22:20 GMT; Max-Age=34128000; Domain=.adgrx.com; Path=/; Secure; SameSite=None set-cookie: ADGRX_CM_PUBMATIC_BRIDGED=1; Version=1; Expires=Fri, 29-Dec-2023 16:22:20 GMT; Max-Age=86400; Domain=.adgrx.com; Path=/; Secure; SameSite=None Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=45e73c86-a59d-11ee-a23b-06900a68fba8 X-RealServer-NX: lga-delivery-4 Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate Pragma: no-cache Expires: Thu, 23 Sep 2004 17:42:04 GMT P3P: CP="NOI OTC OTP OUR NOR" Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50053	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:20 UTC	1980	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; PugT=1703780537
2023-12-28 16:22:20 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:19 GMT; path=/ Set-Cookie: PugT=1703780539; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50055	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:20 UTC	1952	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1813050727983315911 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; PugT=1703780537
2023-12-28 16:22:20 UTC	583	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-1813050727983315911; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:19 GMT; path=/ Set-Cookie: PugT=1703780539; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50045	54.147.24.55	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:20 UTC	890	OUT	GET /ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=gkU8EdmD1RiT9h5
2023-12-28 16:22:20 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 28 Dec 2023 16:22:19 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:gkU8EdmD1RiT9h5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-08680844020733eca@us-east-1d@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=gkU8EdmD1RiT9h5; Domain=.w55c.net; Expires=Tue, 28-Jan-2025 16:22:20 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Sat, 27-Jan-2024 16:22:20 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50057	104.18.36.155	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:20 UTC	1114	OUT	GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D56DE60CA3D45485394325E0AA6AE4072%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D3121188971179636291%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:20 UTC	1145	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:20 GMT Content-Length: 0 Connection: close Location: /usermatchredir?cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D56DE60CA3D45485394325E0AA6AE4072%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D3121188971179636291%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D&s=191740&C=1 CF-Ray: 83cb243bd9cf6b4c-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZY2gvMDEXz3I22USnudDoQAA; Path=/; Domain=casalemedia.com; Expires=Fri, 27 Dec 2024 16:22:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=2030; Path=/; Domain=casalemedia.com; Expires=Wed, 27 Mar 2024 16:22:20 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=2030; Path=/; Domain=casalemedia.com; Expires=Wed, 27 Mar 2024 16:22:20 GMT; Max-Age=7776000; Secure; SameSite=None
2023-12-28 16:22:20 UTC	400	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 33 3f 73 3d 76 68 50 6b 78 32 63 49 6b 4a 38 55 59 5a 44 78 54 53 25 32 42 56 63 64 4c 6c 75 57 51 39 59 4e 75 43 42 5a 5a 35 48 79 70 4c 68 55 4c 55 33 36 58 72 76 58 78 55 65 76 32 7a 38 75 35 33 25 32 42 42 30 74 63 7a 63 37 6e 25 32 42 4e 49 6b 45 38 34 72 73 45 65 48 68 75 53 78 75 50 45 72 4c 6f 6c 46 30 39 25 32 42 7a 6c 37 77 4e 57 42 50 61 6c 64 63 50 6d 45 4c 4a 6b 34 4e 6b 4b 76 66 49 25 32 46 58 36 39 43 4b 37 4a 25 32 46 78 6c 4f 64 7a 54 72 69 6b 4e 51 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vhPkx2cIkJ8UYZDxTS%2BVcdLluWQ9YNuCBZZ5HypLhULU36XrvXxUev2z8u53%2BB0tczc7n%2BNIkE84rsEeHhuSxuPErLolF09%2Bzl7wNWBPaldcPmELJk4NkKvfI%2FX69CK7J%2FxlOdzTrikNQw%3D%3D"}],"group":"cf-n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50058	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:20 UTC	1970	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=45e73c86-a59d-11ee-a23b-06900a68fba8 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; PugT=1703780537
2023-12-28 16:22:21 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:19 GMT; path=/ Set-Cookie: PugT=1703780539; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50056	104.18.36.155	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:20 UTC	1180	OUT	GET /usermatchredir?cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3D56DE60CA3D45485394325E0AA6AE4072%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526userid%253D3121188971179636291%2526gdpr%253D0%2526gdpr%253D0%2526bee_sync_partners%253Dpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D4%26uid%3D&s=191740&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZY2gvMDEXz3I22USnudDoQAA; CMPS=2030; CMPRO=2030
2023-12-28 16:22:21 UTC	1336	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:21 GMT Content-Length: 0 Connection: close Location: https://sync.technoratimedia.com/services?srv=cs&nuid=56DE60CA3D45485394325E0AA6AE4072&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZY2gvMDEXz3I22USnudDoQAA%262030 CF-Ray: 83cb243d09c06c68-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZY2gvMDEXz3I22USnudDoQAA; Path=/; Domain=casalemedia.com; Expires=Fri, 27 Dec 2024 16:22:21 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2030; Path=/; Domain=casalemedia.com; Expires=Wed, 27 Mar 2024 16:22:21 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g9gpCAaI2pL1coz7m9JuVgODGbL5PU7rpy8%2BVwyZBioxUPDMBcPDKhyDh7Q%2BfUoMOexCMgH8jlGsSZ4BCC4F%2F4vTJhCOobhPMD4v%2B%2B47zjaNveg9ALvG2YqIjy54ozbcDN8rxEmxhk3EqA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50059	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	2233	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:gkU8EdmD1RiT9h5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; PugT=1703780539; KRTBCOOKIE_18=22947-1813050727983315911
2023-12-28 16:22:21 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:20 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:20 GMT; path=/ Set-Cookie: PugT=1703780540; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:20 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50061	54.158.15.169	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	824	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&vxii_pid=12&vxii_pid1=10067&vxii_rcid=615d9f76-6c39-4dc6-b81a-085a08461685 HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjYxNWQ5Zjc2LTZjMzktNGRjNi1iODFhLTA4NWEwODQ2MTY4NSIsImwiOjE3MDM3ODA1Mzk2MzMsInQiOjF9
2023-12-28 16:22:21 UTC	353	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjYxNWQ5Zjc2LTZjMzktNGRjNi1iODFhLTA4NWEwODQ2MTY4NSIsImwiOjE3MDM3ODA1NDE1MTMsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Mon, 15 Jul 2024 16:22:21 GMT; Secure; SameSite=None
2023-12-28 16:22:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50062	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	2162	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R33646_10E688CAC_3EE3278F&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; PugT=1703780539; KRTBCOOKIE_18=22947-1813050727983315911
2023-12-28 16:22:21 UTC	657	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Dec 2023 14:58:12 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 14:57:45 GMT; path=/ Set-Cookie: PugT=1703775492; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 14:57:45 GMT; path=/ Location: https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50063	8.28.7.84	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	2020	OUT	GET /AdServer/SPug?partnerID=158936&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; PugT=1703780539; KRTBCOOKIE_18=22947-1813050727983315911
2023-12-28 16:22:21 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:21 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1703780541; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50064	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	704	OUT	GET /xuid?mid=2409&xuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738&dongle=d3d3&gdpr=&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:21 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:21 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:21 GMT; Secure; SameSite=None
2023-12-28 16:22:21 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50065	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	463	OUT	GET /xuid?mid=3658&xuid=3c35df97-b65a-42b9-abca-61d06d8e5fc4&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:21 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:21 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:21 GMT; Secure; SameSite=None
2023-12-28 16:22:21 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50067	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	446	OUT	GET /xuid?mid=3335&xuid=3643551440069563451&dongle=4d58&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:21 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:21 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:21 GMT; Secure; SameSite=None
2023-12-28 16:22:21 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50066	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	1905	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=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 HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:21 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:22:21 GMT Expires: Wed, 27 Dec 2023 16:22:21 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50069	34.111.113.62	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	584	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=1!8704
2023-12-28 16:22:21 UTC	1101	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:21 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1703780532515;Expires=Mon, 26 Feb 2024 16:22:21 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b;Expires=Mon, 26 Feb 2024 16:22:21 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!8704;Expires=Mon, 26 Feb 2024 16:22:21 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:21 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50072	35.244.159.8	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	566	OUT	GET /w/1.0/sd?id=537072991&val=CAESENsJZHGl8ALruYxKoIjbX0E&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy; univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780537483015
2023-12-28 16:22:21 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 28 Dec 2023 16:22:21 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50070	35.244.159.8	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	628	OUT	GET /w/1.0/sd?id=537072971&val=3c35df97-b65a-42b9-abca-61d06d8e5fc4&ttd_puid=11b7aa4f-67bc-77ec-fc00-6bde92c546e3&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy; univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780537483015
2023-12-28 16:22:21 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780541654279; Version=1; Expires=Fri, 12-Jan-2024 16:22:21 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 28 Dec 2023 16:22:21 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50071	35.244.159.8	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	582	OUT	GET /w/1.0/sd?id=540245193&val=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy; univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780537483015
2023-12-28 16:22:21 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 28 Dec 2023 16:22:21 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50068	8.28.7.84	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	1855	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-fNV4yyJE2uXLaY_PXOsvYoxyc0h2cn4-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; SPugT=1703780536; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; PugT=1703780539; KRTBCOOKIE_18=22947-1813050727983315911
2023-12-28 16:22:21 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 06:05:57 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1703743557; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 06:05:57 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50073	150.136.156.92	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	1147	OUT	GET /services?srv=cs&nuid=56DE60CA3D45485394325E0AA6AE4072&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D3121188971179636291%26gdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&uid=ZY2gvMDEXz3I22USnudDoQAA%262030 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AADkEU7LG0EAABaftLpXow; tads_uid=56DE60CA3D45485394325E0AA6AE4072; tads_uid_cd=20231228162219+0000; tads_zora=2
2023-12-28 16:22:21 UTC	1202	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Thu, 28 Dec 2023 16:22:21 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=3121188971179636291&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 Set-Cookie: tads_uidp_82=ZY2gvMDEXz3I22USnudDoQAA&2030; Max-Age=259200; Expires=Sun, 31 Dec 2023 16:22:21 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=56DE60CA3D45485394325E0AA6AE4072; Max-Age=63072000; Expires=Sat, 27 Dec 2025 16:22:21 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20231228162219+0000; Max-Age=63072000; Expires=Sat, 27 Dec 2025 16:22:21 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Sat, 27 Dec 2025 16:22:21 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 142440112 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50074	34.230.139.192	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=5b81a9fb-79bc-089f-5625-a79b2bc11e27
2023-12-28 16:22:21 UTC	456	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=5b81a9fb-79bc-089f-5625-a79b2bc11e27; Path=/; Domain=kargo.com; Expires=Fri, 27 Dec 2024 16:22:21 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2023-12-28 16:22:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50076	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	471	OUT	GET /xuid?mid=2409&xuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738&dongle=d3d3&gdpr=&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:22 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:22 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:22 GMT; Secure; SameSite=None
2023-12-28 16:22:22 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50075	38.98.69.175	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	655	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R33646_10E688CAC_3EE3278F.1.0000000000000000658DA0BB
2023-12-28 16:22:22 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Thu, 28 Dec 2023 16:22:21 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-386785342; includeSubDomains
2023-12-28 16:22:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50077	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:21 UTC	2481	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJcUrmU_I7JgNthe1VAAAAAAA&expiration=1703866941&nuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; SPugT=1703780541; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; PugT=1703775492
2023-12-28 16:22:22 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:20 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:20 GMT; path=/ Set-Cookie: PugT=1703780540; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:20 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50079	54.160.195.52	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:22 UTC	888	OUT	GET /cookie-sync?gdpr=0&userid=3121188971179636291&gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=4 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AADkEU7LG0EAABaftLpXow; bitoIsSecure=ok
2023-12-28 16:22:22 UTC	454	IN	HTTP/1.1 303 See Other Date: Thu, 28 Dec 2023 16:22:22 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AADkEU7LG0EAABaftLpXow&gdpr=0 Server: gunicorn set-cookie: bito=AADkEU7LG0EAABaftLpXow; Domain=bidr.io; expires=Sun, 26 Jan 2025 11:22:22 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50078	52.200.3.94	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:22 UTC	588	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&vxii_pid=12&vxii_pid1=10067&vxii_rcid=615d9f76-6c39-4dc6-b81a-085a08461685 HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6IjYxNWQ5Zjc2LTZjMzktNGRjNi1iODFhLTA4NWEwODQ2MTY4NSIsImwiOjE3MDM3ODA1NDE1MTMsInQiOjF9
2023-12-28 16:22:22 UTC	353	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6IjYxNWQ5Zjc2LTZjMzktNGRjNi1iODFhLTA4NWEwODQ2MTY4NSIsImwiOjE3MDM3ODA1NDIyOTAsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Mon, 15 Jul 2024 16:22:22 GMT; Secure; SameSite=None
2023-12-28 16:22:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50080	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:22 UTC	2411	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAJcUrmU_I7JgNthe1VAAAAAAA&expiration=1703866941&nuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; PugT=1703780540
2023-12-28 16:22:22 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:21 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:21 GMT; path=/ Set-Cookie: PugT=1703780541; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:21 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50081	38.98.69.175	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:22 UTC	419	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R33646_10E688CAC_3EE3278F.1.0000000000000000658DA0BB
2023-12-28 16:22:23 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Thu, 28 Dec 2023 16:22:22 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-386785342; includeSubDomains
2023-12-28 16:22:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50082	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:23 UTC	829	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI5NWQ0ODllYi0xNWUyLTQxYWQtNGU2Ni1lZTBkNTljNGVlNDAiLCJkb21haW5faWQiOiI0ODQ0NzAiLCJ0X2Vwb2NoIjoxNzAzNzgwNTIxLCJkYXRhIjpbeyJuYW1lIjoidF91bmxvYWQiLCJ2YWwiOiIxNzAzNzgwNTQxOTY2In1dfV0= HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:23 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:22:23 GMT Expires: Wed, 27 Dec 2023 16:22:23 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50083	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:23 UTC	2651	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AADkEU7LG0EAABaftLpXow&gdpr=0 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; PugT=1703780540
2023-12-28 16:22:23 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:23 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:23 GMT; path=/ Set-Cookie: PugT=1703780543; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:23 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50087	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:24 UTC	881	OUT	GET /?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE HTTP/1.1 Host: pcapp.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Attribution-Reporting-Eligible: navigation-source=event-source;trigger sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:24 UTC	1175	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Set-Cookie: _fcid=1703780544699264; expires=Fri, 27-Dec-2024 16:22:24 GMT; Max-Age=31536000; path=/ Set-Cookie: default_lp=lpd_appstore_r7 Set-Cookie: ml_model=AlpAll5; expires=Fri, 27-Dec-2024 16:22:24 GMT; Max-Age=31536000; path=/; domain=.pcapp.store Set-Cookie: ml_prediction_type=max; expires=Fri, 27-Dec-2024 16:22:24 GMT; Max-Age=31536000; path=/; domain=.pcapp.store Set-Cookie: ml_strategy_details=%7B%22intro%22%3A%22ML%22%2C%22intro_model%22%3A%22AlpAll5%22%2C%22intro_prediction_type%22%3A%22max%22%2C%22strategy_name%22%3A%22ML_AlpAll5_max%22%2C%22intro_state%22%3A%22init%22%7D; expires=Fri, 27-Dec-2024 16:22:24 GMT; Max-Age=31536000; path=/; domain=.pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:24 UTC	15209	IN	Data Raw: 31 62 64 63 0d 0a 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 43 20 41 70 70 20 53 74 6f 72 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 66 61 73 74 2d 6c 6f 61 64 65 72 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 Data Ascii: 1bdc <!DOCTYPE html><html> <head> <title>PC App Store</title> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <style> .fast-loader { display: block; position: absolu
2023-12-28 16:22:24 UTC	1289	IN	Data Raw: 20 20 20 20 20 2f 2f 61 6c 65 72 74 28 27 70 72 65 64 69 63 74 69 6f 6e 20 73 75 63 63 65 73 73 66 75 6c 3a 20 27 20 2b 20 6f 52 65 73 70 6f 6e 73 65 2e 72 65 73 75 6c 74 2e 70 72 65 64 69 63 74 69 6f 6e 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 72 65 61 74 65 43 6f 6f 6b 69 65 28 22 6d 6c 5f 6c 70 5f 70 72 65 64 69 63 74 69 6f 6e 5f 22 20 2b 20 61 73 2c 20 6f 52 65 73 70 0d 0a 34 37 61 0d 0a 6f 6e 73 65 2e 72 65 73 75 6c 74 2e 70 72 65 64 69 63 74 69 6f 6e 73 2c 20 33 36 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 6f 52 65 73 70 6f 6e 73 65 2e 72 65 73 75 6c 74 2e 6d 6c 5f 73 74 72 61 74 65 67 79 5f 64 65 74 61 69 6c 73 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 Data Ascii: //alert('prediction successful: ' + oResponse.result.predictions) createCookie("ml_lp_prediction_" + as, oResp47aonse.result.predictions, 365); if(oResponse.result.ml_strategy_details !== undefined) { c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50089	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:25 UTC	2392	OUT	GET / HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _ga_K68XP6D85D=GS1.1.1703780523.1.0.1703780531.52.0.0; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=15
2023-12-28 16:22:25 UTC	519	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb24591e784757-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0 Expires: 0 Strict-Transport-Security: max-age=0 Vary: Accept-Encoding Content-Security-Policy: frame-ancestors *.mediafire.com Pragma: no-cache X-Frame-Options: SAMEORIGIN Server: cloudflare
2023-12-28 16:22:25 UTC	850	IN	Data Raw: 37 64 39 32 0d 0a 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 73 68 61 72 69 6e 67 20 61 6e 64 20 73 74 6f 72 61 67 65 20 6d 61 64 65 20 73 69 6d 70 6c 65 3c 2f 74 69 74 Data Ascii: 7d92 <!DOCTYPE html> <html lang="en-US" xmlns:fb="http://www.facebook.com/2008/fbml" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /><title>File sharing and storage made simple</tit
2023-12-28 16:22:25 UTC	1369	IN	Data Raw: 4c 4c 4f 57 22 20 2f 3e 0a 3c 4d 45 54 41 20 4e 41 4d 45 3d 22 47 4f 4f 47 4c 45 42 4f 54 22 20 43 4f 4e 54 45 4e 54 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 4d 45 54 41 20 4e 41 4d 45 3d 22 53 4c 55 52 50 22 20 43 4f 4e 54 45 4e 54 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 74 72 61 6e 73 6c 61 74 65 2d 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 35 35 38 37 63 31 62 30 61 39 35 38 62 66 30 37 2d 36 32 61 38 65 33 30 39 64 65 36 38 36 65 38 37 2d 67 63 39 32 66 36 31 32 37 39 61 32 63 38 35 32 34 2d 31 31 22 3e 3c 2f 6d 65 74 61 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 22 20 63 6f Data Ascii: LLOW" /><META NAME="GOOGLEBOT" CONTENT="INDEX,FOLLOW" /><META NAME="SLURP" CONTENT="INDEX,FOLLOW" /><meta name="google-translate-customization" content="5587c1b0a958bf07-62a8e309de686e87-gc92f61279a2c8524-11"></meta><meta http-equiv="Cache-Control" co
2023-12-28 16:22:25 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 66 62 3a 61 70 70 5f 69 64 22 20 63 6f 6e 74 65 6e 74 3d 22 31 32 34 35 37 38 38 38 37 35 38 33 35 37 35 22 20 2f 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 35 35 35 36 34 36 31 39 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 54 69 Data Ascii: ontent="https://www.mediafire.com" /><meta property="fb:app_id" content="124578887583575" /><meta name="apple-itunes-app" content="app-id=555646196" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta name="msapplication-Ti
2023-12-28 16:22:25 UTC	1369	IN	Data Raw: 73 73 61 67 65 2b 27 22 20 20 27 3b 7d 4b 75 28 35 2c 76 55 29 3b 7d 3b 76 61 72 20 49 75 3d 27 46 69 6c 65 20 73 68 61 72 69 6e 67 20 61 6e 64 20 73 74 6f 72 61 67 65 20 6d 61 64 65 20 73 69 6d 70 6c 65 27 3b 20 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 31 2e 37 2e 32 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 20 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 4a 61 76 61 53 63 72 69 70 74 22 3e 74 72 79 7b 69 66 28 74 Data Ascii: ssage+'" ';}Ku(5,vU);};var Iu='File sharing and storage made simple'; </script> <script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js"> </script> <script language="JavaScript" type="text/JavaScript">try{if(t
2023-12-28 16:22:25 UTC	1369	IN	Data Raw: 70 73 3a 2f 2f 63 64 6e 2e 61 6d 70 6c 69 74 75 64 65 2e 63 6f 6d 2f 6c 69 62 73 2f 61 6d 70 6c 69 74 75 64 65 2d 38 2e 35 2e 30 2d 6d 69 6e 2e 67 7a 2e 6a 73 22 0a 20 20 20 20 3b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 2e 61 6d 70 6c 69 74 75 64 65 2e 72 75 6e 51 75 65 75 65 64 46 75 6e 63 74 69 6f 6e 73 29 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 5b 41 6d 70 6c 69 74 75 64 65 5d 20 45 72 72 6f 72 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 53 44 4b 22 29 7d 7d 0a 20 20 20 20 3b 76 61 72 20 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 69 29 0a 20 Data Ascii: ps://cdn.amplitude.com/libs/amplitude-8.5.0-min.gz.js" ;r.onload=function(){if(!e.amplitude.runQueuedFunctions){ console.log("[Amplitude] Error: could not load SDK")}} ;var i=t.getElementsByTagName("script")[0];i.parentNode.insertBefore(r,i)
2023-12-28 16:22:25 UTC	1369	IN	Data Raw: 6e 73 74 61 6e 63 65 22 3a 65 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 0a 20 20 20 20 3b 69 66 28 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2e 5f 69 71 2c 65 29 29 7b 6e 2e 5f 69 71 5b 65 5d 3d 7b 5f 71 3a 5b 5d 7d 3b 76 28 6e 2e 5f 69 71 5b 65 5d 29 0a 20 20 20 20 7d 72 65 74 75 72 6e 20 6e 2e 5f 69 71 5b 65 5d 7d 3b 65 2e 61 6d 70 6c 69 74 75 64 65 3d 6e 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3b 0a 0a 20 20 20 20 76 61 72 20 61 6d 70 20 3d 20 61 6d 70 6c 69 74 75 64 65 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 3b 0a 20 20 20 20 61 6d 70 2e 69 6e 69 74 28 27 32 38 39 31 36 62 36 63 64 36 30 63 37 39 63 30 34 34 37 62 33 63 32 33 61 64 36 39 38 63 39 38 27 29 Data Ascii: nstance":e).toLowerCase() ;if(!Object.prototype.hasOwnProperty.call(n._iq,e)){n._iq[e]={_q:[]};v(n._iq[e]) }return n._iq[e]};e.amplitude=n})(window,document); var amp = amplitude.getInstance(); amp.init('28916b6cd60c79c0447b3c23ad698c98')
2023-12-28 16:22:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 4d 59 46 5f 57 49 44 47 45 54 5f 53 54 4f 52 41 47 45 5f 74 6f 74 61 6c 53 74 6f 72 61 67 65 3d 20 31 30 37 33 37 34 31 38 32 34 30 3b 4d 59 46 5f 57 49 44 47 45 54 5f 53 54 4f 52 41 47 45 5f 75 73 65 64 53 74 6f 72 61 67 65 3d 20 30 3b 4d 59 46 5f 57 49 44 47 45 54 5f 53 54 4f 52 41 47 45 5f 75 73 65 64 53 74 6f 72 61 67 65 50 65 72 63 65 6e 74 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 4d 61 74 68 2e 6d 69 6e 28 70 61 72 73 65 46 6c 6f 61 74 28 4d 59 46 5f 57 49 44 47 45 54 5f 53 54 4f 52 41 47 45 5f 75 73 65 64 53 74 6f 72 61 67 65 2f 4d 59 46 5f 57 49 44 47 45 54 5f 53 54 4f 52 41 47 45 5f Data Ascii: } </script><script type="text/javascript">var MYF_WIDGET_STORAGE_totalStorage= 10737418240;MYF_WIDGET_STORAGE_usedStorage= 0;MYF_WIDGET_STORAGE_usedStoragePercent=Math.round(Math.min(parseFloat(MYF_WIDGET_STORAGE_usedStorage/MYF_WIDGET_STORAGE_
2023-12-28 16:22:25 UTC	1369	IN	Data Raw: 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 36 30 30 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 2e 39 35 3b 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 74 61 74 75 73 6d 65 73 73 61 67 65 5f 77 72 61 70 70 65 72 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 32 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 22 3e 20 3c 64 69 76 20 69 64 3d 22 73 74 61 74 75 73 6d 65 73 73 61 67 65 5f 74 65 78 74 22 20 6e 61 6d 65 3d 22 73 74 61 74 75 73 6d 65 73 73 61 67 65 5f 74 65 78 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 72 75 64 65 22 3e 3c 2f 64 69 76 3e 20 3c 64 69 76 20 69 64 3d 22 64 69 73 6d 69 73 Data Ascii: le="display:none;"> <div style="width:600px;margin:auto;padding:10px;opacity:0.95;"> <div class="statusmessage_wrapper" style="padding:20px;text-align:center;"> <div id="statusmessage_text" name="statusmessage_text" aria-live="rude"></div> <div id="dismis
2023-12-28 16:22:25 UTC	1369	IN	Data Raw: 75 74 3d 22 4e 48 3d 66 61 6c 73 65 3b 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 74 69 66 79 5f 6d 73 67 77 72 61 70 70 65 72 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 72 75 64 65 22 3e 20 3c 70 3e 20 3c 73 70 61 6e 20 69 64 3d 22 6e 6f 74 69 66 79 5f 6d 73 67 74 69 74 6c 65 5f 6d 69 6e 22 20 63 6c 61 73 73 3d 22 6e 6f 74 69 66 79 5f 6d 73 67 74 69 74 6c 65 5f 6d 69 6e 22 3e 31 30 30 20 52 65 63 65 6e 74 20 4d 65 73 73 61 67 65 73 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 69 64 3d 22 6e 6f 74 69 66 79 5f 6d 73 67 74 69 74 6c 65 22 20 63 6c 61 73 73 3d 22 6e 6f 74 69 66 79 5f 6d 73 67 74 69 74 6c 65 22 3e 4d 65 73 73 61 67 65 20 74 69 74 6c 65 20 67 6f 65 73 20 68 65 72 65 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 69 64 3d 22 6e 6f 74 69 66 79 5f 6d Data Ascii: ut="NH=false;"> <div class="notify_msgwrapper" aria-live="rude"> <p> <span id="notify_msgtitle_min" class="notify_msgtitle_min">100 Recent Messages</span> <span id="notify_msgtitle" class="notify_msgtitle">Message title goes here</span> <span id="notify_m
2023-12-28 16:22:25 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 61 64 64 69 74 69 6f 6e 61 6c 48 65 6c 70 4c 69 6e 6b 73 22 3e 41 64 64 69 74 69 6f 6e 61 6c 20 68 65 6c 70 20 6c 69 6e 6b 73 3a 20 3c 61 20 68 72 65 66 3d 22 2f 68 65 6c 70 2f 73 75 62 6d 69 74 5f 61 5f 74 69 63 6b 65 74 2e 70 68 70 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6f 6e 74 61 63 74 20 55 73 3c 2f 61 3e 20 3c 2f 70 3e 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 65 78 70 61 6e 64 48 65 6c 70 43 6c 6f 73 65 22 20 6f 6e 43 6c 69 63 6b 3d 22 24 28 27 23 68 65 6c 70 43 6f 6e 74 61 69 6e 65 72 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 65 78 70 61 6e 64 48 65 6c 70 27 29 3b 22 3e 20 43 6c 6f 73 65 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 2f 66 6f 72 6d 3e 20 3c 2f 64 69 Data Ascii: class="additionalHelpLinks">Additional help links: <a href="/help/submit_a_ticket.php" target="_blank">Contact Us</a> </p> <button type="button" class="expandHelpClose" onClick="$('#helpContainer').removeClass('expandHelp');"> Close </button> </form> </di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50093	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:25 UTC	837	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI5NWQ0ODllYi0xNWUyLTQxYWQtNGU2Ni1lZTBkNTljNGVlNDAiLCJkb21haW5faWQiOiI0ODQ0NzAiLCJ0X2Vwb2NoIjoxNzAzNzgwNTIxLCJkYXRhIjpbeyJuYW1lIjoibGNwX3ZhbHVlIiwidmFsIjoiNDkzMS43OTk5OTk5OTk5ODgifV19XQ== HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:25 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:22:25 GMT Expires: Wed, 27 Dec 2023 16:22:25 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50091	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:25 UTC	841	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI5NWQ0ODllYi0xNWUyLTQxYWQtNGU2Ni1lZTBkNTljNGVlNDAiLCJkb21haW5faWQiOiI0ODQ0NzAiLCJ0X2Vwb2NoIjoxNzAzNzgwNTIxLCJkYXRhIjpbeyJuYW1lIjoiY2xzX3ZhbHVlIiwidmFsIjoiMC4wMDA2NzcyMzYwNTA2NTg4OTI2In1dfV0= HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:25 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:22:25 GMT Expires: Wed, 27 Dec 2023 16:22:25 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50092	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:25 UTC	1637	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=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 HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:25 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:22:24 GMT Expires: Wed, 27 Dec 2023 16:22:24 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50094	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:25 UTC	1031	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 811 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_strategy_details=%7B%22intro%22%3A%22ML%22%2C%22intro_model%22%3A%22AlpAll5%22%2C%22intro_prediction_type%22%3A%22max%22%2C%22strategy_name%22%3A%22ML_AlpAll5_max%22%2C%22intro_state%22%3A%22init%22%7D
2023-12-28 16:22:25 UTC	811	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 6c 70 2f 6c 70 4d 6c 22 2c 22 61 22 3a 22 6c 70 50 61 67 65 22 2c 22 70 22 3a 7b 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 22 2c 22 67 70 75 22 3a 22 47 6f 6f 67 6c 65 2c 20 56 75 6c 6b 61 6e 20 31 2e 33 2e 30 20 28 53 77 69 66 74 53 68 61 64 65 72 20 44 65 76 69 63 65 20 28 53 75 62 7a 65 72 6f 29 20 28 30 78 30 30 30 30 43 30 44 45 29 29 2c 20 53 77 69 66 74 53 68 61 64 65 72 20 64 72 69 76 65 72 29 22 2c 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 74 22 3a 31 30 32 34 2c 22 62 72 6f 77 73 65 72 22 3a 22 43 48 22 2c 22 62 72 6f 77 73 65 72 76 65 72 22 3a 31 31 37 2c 22 6f 73 22 3a 22 31 30 22 2c 22 63 6f 6f 6b 69 65 73 22 3a 31 2c 22 Data Ascii: {"c":"front/lp/lpMl","a":"lpPage","p":{"referrer":"https://www.mediafire.com/","gpu":"Google, Vulkan 1.3.0 (SwiftShader Device (Subzero) (0x0000C0DE)), SwiftShader driver)","width":1280,"height":1024,"browser":"CH","browserver":117,"os":"10","cookies":1,"
2023-12-28 16:22:26 UTC	534	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:26 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:26 UTC	246	IN	Data Raw: 65 62 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 70 72 65 64 69 63 74 69 6f 6e 73 22 3a 22 6c 70 33 36 5f 66 61 72 73 73 5f 64 6c 5f 6c 61 73 74 5f 6d 69 6e 69 5f 33 36 22 2c 22 6d 6c 5f 73 74 72 61 74 65 67 79 5f 64 65 74 61 69 6c 73 22 3a 7b 22 69 6e 74 72 6f 22 3a 22 4d 4c 22 2c 22 69 6e 74 72 6f 5f 6d 6f 64 65 6c 22 3a 22 41 6c 70 41 6c 6c 35 22 2c 22 69 6e 74 72 6f 5f 70 72 65 64 69 63 74 69 6f 6e 5f 74 79 70 65 22 3a 22 6d 61 78 22 2c 22 73 74 72 61 74 65 67 79 5f 6e 61 6d 65 22 3a 22 4d 4c 5f 41 6c 70 41 6c 6c 35 5f 6d 61 78 22 2c 22 69 6e 74 72 6f 5f 73 74 61 74 65 22 3a 22 73 75 63 63 65 73 73 22 7d 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: eb{"state":"ok","result":{"status":"success","predictions":"lp36_farss_dl_last_mini_36","ml_strategy_details":{"intro":"ML","intro_model":"AlpAll5","intro_prediction_type":"max","strategy_name":"ML_AlpAll5_max","intro_state":"success"}}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50095	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:25 UTC	998	OUT	GET /favicon.ico HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_strategy_details=%7B%22intro%22%3A%22ML%22%2C%22intro_model%22%3A%22AlpAll5%22%2C%22intro_prediction_type%22%3A%22max%22%2C%22strategy_name%22%3A%22ML_AlpAll5_max%22%2C%22intro_state%22%3A%22init%22%7D
2023-12-28 16:22:26 UTC	341	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 28 Dec 2023 16:22:26 GMT Content-Type: text/html Content-Length: 4211 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding ETag: "6344345d-1073" Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:26 UTC	4211	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 43 20 41 50 50 20 53 54 4f 52 45 e2 84 a2 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 34 30 30 2c 34 30 30 69 74 61 6c 69 63 2c 35 30 30 2c 35 30 30 69 74 61 6c Data Ascii: <!DOCTYPE html><html><head> <title>PC APP STORE</title> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link href='https://fonts.googleapis.com/css?family=Roboto:400,400italic,500,500ital

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50101	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:25 UTC	2251	OUT	GET /css/mfv3_121918.php?ver=ssl HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:26 UTC	406	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:26 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Pragma: public Cache-Control: max-age= Expires: Thu, 11 Jan 2024 11:38:46 GMT Access-Control-Allow-Origin: * Last-Modified: Thu, 28 Dec 2023 11:38:46 GMT CF-Cache-Status: HIT Age: 9619 Server: cloudflare CF-RAY: 83cb245d3ebf4792-DFW
2023-12-28 16:22:26 UTC	963	IN	Data Raw: 37 65 30 39 0d 0a 20 2f 2a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2a 2f 20 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 20 2f 2a 20 4d 65 64 69 61 46 69 72 65 20 2d 20 4d 61 73 74 65 72 20 53 74 79 6c 65 73 68 65 65 74 20 56 65 72 73 69 6f 6e 3a 20 32 30 31 30 2e 36 2e 30 32 20 2a 2f 20 2f 2a 20 4c 45 47 41 43 59 20 46 4f 52 4d 20 53 54 59 4c 45 53 20 2a 2f 20 2e 66 6f 72 6d 20 7b 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 7d 20 2e 66 6f 72 6d 5f 65 72 72 6f 72 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 65 63 65 66 3b 20 70 61 64 64 Data Ascii: 7e09 /@charset "UTF-8";/ /* CSS Document / / MediaFire - Master Stylesheet Version: 2010.6.02 / / LEGACY FORM STYLES */ .form { margin: 0px 0px 0px 0px; font-size: 13px; font-weight: bold; } .form_error { font-size: 12px; background: #ffecef; padd
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 34 34 34 34 34 34 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 20 7d 20 2e 64 65 6c 65 74 65 5f 6c 69 6e 6b 20 61 20 7b 20 63 6f 6c 6f 72 3a 23 32 31 64 35 34 38 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 20 2e 64 65 6c 65 74 65 5f 6c 69 6e 6b 20 61 3a 68 6f 76 65 72 20 7b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 23 32 31 64 35 34 38 20 64 6f 74 74 65 64 3b 20 7d 20 2f 2a 43 52 45 41 54 45 20 41 43 43 54 20 46 4f 52 20 53 4f 43 49 41 4c 20 4e 45 54 57 4f 52 4b 53 3f 2a 2f 20 23 75 70 6c 6f 61 64 5f 63 72 65 61 74 65 2e 75 70 6c 6f 61 64 5f 63 72 65 61 74 65 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 7d 20 23 75 70 6c 6f 61 64 5f 63 72 65 61 74 65 20 7b 20 64 69 73 70 6c 61 79 3a Data Ascii: 444444; font-size: 12px; } .delete_link a { color:#21d548; text-decoration: none; } .delete_link a:hover { border-bottom: 2px #21d548 dotted; } /CREATE ACCT FOR SOCIAL NETWORKS?/ #upload_create.upload_create { display: block; } #upload_create { display:
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 72 65 70 65 61 74 20 6c 65 66 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 7d 20 2e 72 65 70 6f 72 74 5f 6f 70 74 69 6f 6e 20 61 2c 20 2e 74 69 6d 65 5f 6f 70 74 69 6f 6e 20 61 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 35 35 70 78 3b 20 7d 20 2e 72 65 70 6f 72 74 5f 6f 70 74 69 6f 6e 20 61 3a 68 6f 76 65 72 2c 20 2e 74 69 6d 65 5f 6f 70 74 69 6f 6e 20 61 3a 68 6f 76 65 72 20 7b 20 7d 20 2e 74 69 6d 65 5f 6f 70 74 69 6f 6e 20 7b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 34 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 20 7d 20 2e 73 74 61 74 73 2d 66 69 6c 74 65 72 2d 6f 70 74 69 6f 6e 73 20 3e 20 64 69 76 2c 20 2e 73 74 61 74 73 2d 66 69 6c 74 65 72 2d Data Ascii: repeat left; font-weight: bold; } .report_option a, .time_option a { display: block; padding-left: 55px; } .report_option a:hover, .time_option a:hover { } .time_option { line-height: 34px; margin-right: 10px; } .stats-filter-options > div, .stats-filter-
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 70 6f 72 74 5f 66 6f 72 6d 20 6c 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 20 7d 20 23 63 75 73 74 6f 6d 69 7a 65 5f 72 65 70 6f 72 74 5f 66 6f 72 6d 20 6c 69 2e 73 74 61 74 73 2d 66 69 6c 74 65 72 2d 72 65 67 69 6f 6e 20 7b 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 7d 20 23 63 75 73 74 6f 6d 69 7a 65 5f 72 65 70 6f 72 74 5f 66 6f 72 6d 20 6c 69 2e 73 74 61 74 73 2d 66 69 6c 74 65 72 2d 72 65 67 69 6f 6e 20 73 65 6c 65 63 74 20 7b 20 77 69 64 74 68 3a 20 33 30 34 70 78 3b 20 7d 20 23 63 75 73 74 6f 6d 69 7a 65 5f 72 65 70 6f 72 74 5f 66 6f 72 6d 20 6c 69 2e 73 74 61 74 73 2d 66 69 6c 74 65 72 2d 66 69 6c 65 73 69 7a 65 20 73 65 6c 65 63 74 Data Ascii: port_form li input[type="text"] { font-size: 16px; padding: 1px; } #customize_report_form li.stats-filter-region { float: left; } #customize_report_form li.stats-filter-region select { width: 304px; } #customize_report_form li.stats-filter-filesize select
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 7b 20 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 20 7d 20 2e 73 74 61 74 73 5f 74 61 62 6c 65 20 74 61 62 6c 65 20 74 72 20 74 64 20 7b 20 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 20 7d 20 2e 70 6f 70 75 70 5f 74 61 62 6c 65 20 74 61 62 6c 65 20 74 72 20 74 64 20 7b 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 20 7d 20 23 72 65 70 6f 72 74 5f 63 6f 6e 74 65 6e 74 73 20 74 61 62 6c 65 20 74 72 20 74 64 20 7b 20 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 20 7d 20 2f 2a 20 4c 45 47 41 43 59 3a 20 43 6f 6c 6f 72 20 53 65 6c 65 63 74 6f 72 20 53 74 79 6c 65 73 20 28 6f 6e 6c 79 20 64 72 6f 70 62 6f 78 20 73 65 74 74 69 6e 67 73 20 75 73 65 73 20 74 68 69 73 20 6e 6f 77 2e 20 73 68 6f 75 6c 64 20 73 77 69 74 63 68 20 74 6f 20 6a 73 20 63 6f 6c 6f 72 20 70 69 63 6b 65 72 Data Ascii: { padding: 5px; } .stats_table table tr td { padding: 5px; } .popup_table table tr td { padding: 10px; } #report_contents table tr td { padding: 5px; } /* LEGACY: Color Selector Styles (only dropbox settings uses this now. should switch to js color picker
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 74 5f 36 35 30 70 78 20 68 33 2e 74 65 78 74 5f 74 69 74 6c 65 20 7b 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 30 20 31 38 70 78 20 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 20 7d 20 2e 63 6f 6e 74 65 6e 74 5f 36 35 30 70 78 20 70 20 7b 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 38 70 78 20 30 3b 20 7d 20 2e 63 6f 6e 74 65 6e 74 5f 36 35 30 70 78 20 75 6c 20 7b 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 38 70 78 20 30 3b 20 7d 20 2e 63 6f 6e 74 65 6e 74 5f 36 35 30 70 78 20 75 6c 2e 6c 69 73 74 5f 64 69 73 63 20 7b 20 70 61 64 64 69 6e 67 3a 20 30 20 30 20 30 20 31 65 6d 3b 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 64 69 73 63 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 3b 20 7d 20 2e 63 6f 6e 74 65 Data Ascii: t_650px h3.text_title { margin: 0px 0 18px 0; font-size: 16px; } .content_650px p { margin: 0 0 18px 0; } .content_650px ul { list-style: none; margin: 0 0 18px 0; } .content_650px ul.list_disc { padding: 0 0 0 1em; list-style: disc outside none; } .conte
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 76 34 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 73 2f 61 73 5f 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 70 6e 67 29 20 30 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 20 7d 20 23 61 73 5f 61 6c 65 78 61 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 76 34 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 73 2f 61 73 5f 61 6c 65 78 61 2e 70 6e 67 29 20 30 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 20 7d 20 23 61 73 5f 74 65 63 68 63 72 75 6e 63 68 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 76 Data Ascii: c.mediafire.com/images/v4images/backgrounds/as_doubleclick.png) 0 0 no-repeat; } #as_alexa { background: url(//static.mediafire.com/images/v4images/backgrounds/as_alexa.png) 0 0 no-repeat; } #as_techcrunch { background: url(//static.mediafire.com/images/v
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 20 7b 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 35 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 45 39 46 32 46 42 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 20 7d 20 23 72 65 73 65 6c 6c 65 72 5f 6c 69 73 74 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 68 33 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 20 23 72 65 73 65 6c 6c 65 72 5f 6c 69 73 74 20 68 33 20 69 6d 67 20 7b 20 6d 61 72 67 69 6e 3a 20 30 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 23 72 65 73 65 6c 6c 65 72 5f 6c 69 73 74 20 64 69 76 20 7b 20 6f 76 Data Ascii: { float: left; clear: both; width: 100%; padding-right: 0; margin: 0 0 5px; background: #E9F2FB; border-radius: 6px; } #reseller_list:first-child h3 { background: transparent; } #reseller_list h3 img { margin: 0 10px !important; } #reseller_list div { ov
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 6d 79 61 63 63 6f 75 6e 74 2f 63 68 61 6e 67 65 5f 70 61 79 5f 63 63 5f 6c 6f 67 6f 73 2e 70 6e 67 29 20 30 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 20 7d 20 23 6e 65 77 5f 63 61 72 64 5f 69 6e 66 6f 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 34 66 34 66 35 3b 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 33 30 70 78 20 31 30 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 7d 20 23 6e 65 77 5f 63 61 72 64 5f 69 6e 66 6f 20 70 20 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 Data Ascii: margin-top: 5px; background: url(//static.mediafire.com/images/myaccount/change_pay_cc_logos.png) 0 0 no-repeat; } #new_card_info { background: #f4f4f5; padding: 30px 30px 10px; margin-bottom: 10px; box-sizing: border-box; } #new_card_info p { margin-bott
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 69 6f 6e 73 5f 74 69 74 6c 65 20 7b 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 77 69 64 74 68 3a 20 33 32 70 78 3b 20 6d 61 72 67 69 6e 3a 20 36 70 78 20 31 35 70 78 20 30 20 35 70 78 3b 20 68 65 69 67 68 74 3a 20 33 33 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 63 68 65 63 6b 2d 67 72 65 65 6e 2d 63 69 72 63 6c 65 2d 33 32 78 33 32 2e 70 6e 67 29 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 20 7d 20 2e 75 6c 5f 6f 70 74 69 6f 6e 73 5f 69 6e 6e 65 72 20 7b 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 30 3b 20 77 69 64 74 68 3a 20 35 38 35 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 3b Data Ascii: ions_title { float: left; width: 32px; margin: 6px 15px 0 5px; height: 33px; background: url(//static.mediafire.com/images/icons/check-green-circle-32x32.png) center no-repeat; } .ul_options_inner { float: left; padding-bottom: 0; width: 585px; margin: 0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50104	142.251.116.104	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:25 UTC	817	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:26 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 28 Dec 2023 16:22:26 GMT Date: Thu, 28 Dec 2023 16:22:26 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:26 UTC	724	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2023-12-28 16:22:26 UTC	505	IN	Data Raw: 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 75 2d 78 63 71 33 50 4f 43 57 46 6c 43 72 33 78 38 5f 49 50 78 67 50 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 43 44 6b 6f 66 71 4d 6f 36 68 53 41 50 52 Data Ascii: mV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-CDkofqMo6hSAPR
2023-12-28 16:22:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50102	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:26 UTC	2267	OUT	GET /css/mfv4_121918.php?ver=ssl&date=2023-12-28 HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:26 UTC	406	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:26 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Pragma: public Cache-Control: max-age= Expires: Thu, 11 Jan 2024 14:00:02 GMT Access-Control-Allow-Origin: * Last-Modified: Thu, 28 Dec 2023 14:00:02 GMT CF-Cache-Status: HIT Age: 8490 Server: cloudflare CF-RAY: 83cb245d5d1a2e1e-DFW
2023-12-28 16:22:26 UTC	963	IN	Data Raw: 37 65 30 39 0d 0a 2f 2a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2a 2f 20 2f 2a 2a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 64 65 66 69 6e 65 20 4d 65 64 69 61 46 69 72 65 27 73 20 63 6f 72 65 20 74 68 65 6d 65 2e 20 2a 20 41 6e 79 20 73 69 74 65 2d 77 69 64 65 20 73 74 79 6c 69 6e 67 20 66 6f 72 20 65 6c 65 6d 65 6e 74 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 6c 65 67 61 63 79 20 61 6e 64 20 74 65 6d 70 6c 61 74 65 20 73 79 73 74 65 6d 2c 20 73 68 6f 75 6c 64 20 6c 69 76 65 20 2a 20 68 65 72 65 20 73 6f 20 74 68 61 74 20 74 68 65 79 20 63 61 6e 20 62 65 20 61 64 6a 75 73 74 65 64 20 65 61 73 69 6c 79 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 20 28 65 78 63 6c 75 64 69 6e 67 20 52 65 61 63 74 2f 61 70 70 Data Ascii: 7e09/@charset "UTF-8";/ /** * This file is intended to define MediaFire's core theme. * Any site-wide styling for elements, including legacy and template system, should live * here so that they can be adjusted easily in the future (excluding React/app
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 2d 6d 66 2d 62 6c 75 65 38 3a 20 23 46 35 46 41 46 46 3b 20 2d 2d 6d 66 2d 67 72 65 65 6e 31 3a 20 23 30 38 32 31 31 38 3b 20 2d 2d 6d 66 2d 67 72 65 65 6e 32 3a 20 23 31 36 35 41 33 41 3b 20 2d 2d 6d 66 2d 67 72 65 65 6e 33 3a 20 23 32 35 39 33 35 35 3b 20 2d 2d 6d 66 2d 67 72 65 65 6e 34 3a 20 23 33 33 43 43 36 36 3b 20 2f 2a 20 42 61 73 65 20 67 72 65 65 6e 3a 20 43 54 41 73 2c 20 73 74 61 74 75 73 2c 20 64 65 63 6f 72 61 74 69 76 65 2e 20 55 73 65 20 74 6f 67 65 74 68 65 72 20 77 69 74 68 20 47 72 61 79 32 20 6f 72 20 64 61 72 6b 65 72 20 2a 2f 20 2d 2d 6d 66 2d 67 72 65 65 6e 35 3a 20 23 36 43 44 41 38 45 3b 20 2d 2d 6d 66 2d 67 72 65 65 6e 36 3a 20 23 41 35 45 39 42 37 3b 20 2d 2d 6d 66 2d 67 72 65 65 6e 37 3a 20 23 44 45 46 37 45 34 3b 20 2d 2d 6d Data Ascii: -mf-blue8: #F5FAFF; --mf-green1: #082118; --mf-green2: #165A3A; --mf-green3: #259355; --mf-green4: #33CC66; /* Base green: CTAs, status, decorative. Use together with Gray2 or darker */ --mf-green5: #6CDA8E; --mf-green6: #A5E9B7; --mf-green7: #DEF7E4; --m
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 47 4c 4f 42 41 4c 20 43 53 53 20 67 6c 6f 62 61 6c 2e 63 73 73 2e 70 68 70 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 43 4f 4e 43 41 54 45 4e 41 54 45 44 20 46 49 4c 45 2c 20 50 41 52 54 20 4f 46 3a 20 2f 63 73 73 2f 6d 66 76 34 5f 28 62 75 69 6c 64 20 6e 75 6d 62 65 72 29 2e 70 68 70 3f 76 65 72 3d 6e 6f 6e 73 73 6c 26 61 6d 70 3b 64 61 74 65 3d 28 62 75 69 6c 64 20 64 61 74 65 29 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: --------------------------- GLOBAL CSS global.css.php ---------------------------------------------------------------------- CONCATENATED FILE, PART OF: /css/mfv4_(build number).php?ver=nonssl&date=(build date) ----------------------------------------
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 3a 61 66 74 65 72 2c 20 71 3a 62 65 66 6f 72 65 2c 20 71 3a 61 66 74 65 72 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 20 63 6f 6e 74 65 6e 74 3a 20 6e 6f 6e 65 3b 20 7d 20 2f 2a 20 72 65 6d 65 6d 62 65 72 20 74 6f 20 64 65 66 69 6e 65 20 66 6f 63 75 73 20 73 74 79 6c 65 73 21 20 2a 2f 20 3a 66 6f 63 75 73 20 7b 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 20 7d 20 2e 73 68 6f 77 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 73 20 3a 66 6f 63 75 73 20 7b 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 32 70 78 20 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 2e 39 29 2c 20 30 20 30 20 30 20 32 70 78 20 23 30 30 32 33 36 39 3b 20 62 6f 78 2d 73 68 61 Data Ascii: before, blockquote:after, q:before, q:after { content: ''; content: none; } /* remember to define focus styles! */ :focus { outline: 0; } .show-focus-outlines :focus { outline: 0; box-shadow: inset 0 0 0 2px hsla(0,0%,100%,0.9), 0 0 0 2px #002369; box-sha
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 6c 65 73 5f 63 6f 6e 74 72 6f 6c 62 61 72 5f 77 72 61 70 2c 20 2e 6c 69 6e 75 78 2e 6c 69 67 68 74 62 6f 78 20 23 6d 79 66 69 6c 65 73 5f 63 6f 6e 74 72 6f 6c 62 61 72 5f 77 72 61 70 2c 20 2e 77 69 64 6f 77 73 2e 6c 69 67 68 74 62 6f 78 20 23 68 65 61 64 65 72 2c 20 2e 6c 69 6e 75 78 2e 6c 69 67 68 74 62 6f 78 20 23 68 65 61 64 65 72 20 7b 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 20 7d 20 2e 64 69 73 70 6c 61 79 2c 20 2e 68 31 2c 20 2e 68 32 2c 20 2e 68 33 2c 20 2e 68 34 2c 20 2e 68 35 2c 20 2e 68 36 2c 20 2e 68 37 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 64 69 73 70 6c Data Ascii: les_controlbar_wrap, .linux.lightbox #myfiles_controlbar_wrap, .widows.lightbox #header, .linux.lightbox #header { padding-right:20px; } .display, .h1, .h2, .h3, .h4, .h5, .h6, .h7 { font-weight: normal !important; margin-bottom: 1rem !important; } .displ
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 20 2f 2a 20 31 31 70 78 20 2f 20 31 37 2e 37 70 78 20 2a 2f 20 2e 66 6f 6e 74 2d 77 65 69 67 68 74 2d 6e 6f 72 6d 61 6c 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 66 6f 6e 74 2d 77 65 69 67 68 74 2d 62 6f 6c 64 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 74 65 78 74 2d 63 65 6e 74 65 72 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 75 70 70 65 72 63 61 73 65 20 7b 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 20 7d 20 2e 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6e 6f 6e 65 20 Data Ascii: /* 11px / 17.7px */ .font-weight-normal { font-weight: normal !important; } .font-weight-bold { font-weight: bold !important; } .text-center { text-align: center !important; } .text-transform-uppercase { text-transform: uppercase; } .text-transform-none
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 6d 62 2d 31 30 20 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 6d 62 2d 61 75 74 6f 20 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 6d 6c 2d 30 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 6d 6c 2d 31 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 6d 6c 2d 32 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 6d 6c 2d 33 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 2e 35 72 65 6d 20 21 69 Data Ascii: 5rem !important; } .mb-10 { margin-bottom: 5rem !important; } .mb-auto { margin-bottom: auto !important; } .ml-0 { margin-left: 0 !important; } .ml-1 { margin-left: .5rem !important; } .ml-2 { margin-left: 1rem !important; } .ml-3 { margin-left: 1.5rem !i
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 6d 79 2d 34 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 6d 79 2d 35 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 6d 79 2d 36 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 6d 79 2d 37 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 2e 35 72 Data Ascii: !important; } .my-4 { margin-top: 2rem !important; margin-bottom: 2rem !important; } .my-5 { margin-top: 2.5rem !important; margin-bottom: 2.5rem !important; } .my-6 { margin-top: 3rem !important; margin-bottom: 3rem !important; } .my-7 { margin-top: 3.5r
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 68 74 3a 20 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 6d 78 2d 61 75 74 6f 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 70 74 2d 30 20 7b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 70 74 2d 31 20 7b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 70 74 2d 32 20 7b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 70 74 2d 33 20 7b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 Data Ascii: ht: 5rem !important; } .mx-auto { margin-left: auto !important; margin-right: auto !important; } .pt-0 { padding-top: 0 !important; } .pt-1 { padding-top: .5rem !important; } .pt-2 { padding-top: 1rem !important; } .pt-3 { padding-top: 1.5rem !important;
2023-12-28 16:22:26 UTC	1369	IN	Data Raw: 6e 67 2d 6c 65 66 74 3a 20 34 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 70 6c 2d 39 20 7b 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 34 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 70 6c 2d 31 30 20 7b 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 70 72 2d 30 20 7b 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 70 72 2d 31 20 7b 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 70 72 2d 32 20 7b 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 20 2e 70 72 2d 33 20 7b 20 70 61 64 64 69 6e 67 2d 72 69 Data Ascii: ng-left: 4rem !important; } .pl-9 { padding-left: 4.5rem !important; } .pl-10 { padding-left: 5rem !important; } .pr-0 { padding-right: 0 !important; } .pr-1 { padding-right: .5rem !important; } .pr-2 { padding-right: 1rem !important; } .pr-3 { padding-ri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50106	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:26 UTC	1228	OUT	GET /?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE HTTP/1.1 Host: pcapp.store Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; ml_strategy_details={"intro":"ML","intro_model":"AlpAll5","intro_prediction_type":"max","strategy_name":"ML_AlpAll5_max","intro_state":"success"}
2023-12-28 16:22:27 UTC	612	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Set-Cookie: ml_strategy_details=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:27 UTC	15772	IN	Data Raw: 31 65 30 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 44 6f 77 6e 6c 6f 61 64 20 50 63 41 70 70 53 74 6f 72 65 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 5c 6c 70 5c 61 70 70 73 74 6f 72 65 5c 69 6d 67 5c 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e Data Ascii: 1e0f<!DOCTYPE html><html lang="en"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta name="description" content="Download PcAppStore" /> <link rel="icon" href="\lp\appstore\img\favicon.ico" /> <title>
2023-12-28 16:22:27 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2e 73 65 6c 65 63 74 65 64 5f 5f 69 6d 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 33 70 78 2c 20 31 32 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 0d 0a 32 30 30 30 0d 0a 33 37 35 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2e 74 68 75 6d 62 6e 61 69 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 20 Data Ascii: height: auto; } .selected__img { transform: translate(3px, 12px); width: 2000375px; height: auto; } .thumbnail-container { flex-direction: row;
2023-12-28 16:22:27 UTC	16384	IN	Data Raw: 20 67 74 61 67 20 21 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 20 7b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 20 20 67 74 61 67 28 0d 0a 32 30 30 30 0d 0a 22 6a 73 22 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 20 20 67 74 61 67 28 22 63 6f 6e 66 69 67 22 2c 20 22 41 57 2d 38 35 38 31 32 38 32 31 30 22 29 3b 0a 7d 3b 0a 0a 76 61 72 20 70 69 78 65 6c 45 76 65 6e 74 45 78 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 70 61 72 61 6d 73 2c 20 63 62 29 20 7b 0a 20 20 Data Ascii: gtag !== "function") { function gtag() { window.dataLayer = window.dataLayer \|\| []; dataLayer.push(arguments); } } gtag(2000"js", new Date()); gtag("config", "AW-858128210");};var pixelEventEx = function (params, cb) {
2023-12-28 16:22:27 UTC	15034	IN	Data Raw: 67 65 74 52 65 71 75 65 73 74 4c 69 6e 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 22 2f 64 6f 77 6e 6c 6f 61 64 2e 70 68 70 3f 6c 69 6e 6b 3d 31 26 64 72 6d 3d 31 26 76 65 72 73 69 6f 6e 3d 6d 69 6e 69 5f 69 6e 73 74 61 6c 6c 65 72 22 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 64 6f 77 6e 6c 6f 61 64 44 72 6d 46 69 6c 65 28 67 65 74 52 65 71 75 65 73 74 4c 69 6e 6b 28 29 2c 20 22 22 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2f 0d 0a 33 61 30 61 0d 0a 2f 20 2d 2d 2d 20 3a 47 65 74 20 64 6f 77 6e 6c 6f 61 64 20 6c 69 6e 6b 20 2d 2d 2d 20 2f 2f 0a 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 66 6e 42 72 6f 77 73 65 72 44 65 74 65 63 74 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 73 65 72 41 67 Data Ascii: getRequestLink() { return "/download.php?link=1&drm=1&version=mini_installer"; } downloadDrmFile(getRequestLink(), ""); } /3a0a/ --- :Get download link --- // function fnBrowserDetect() { var userAg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50109	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:26 UTC	711	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_strategy_details=%7B%22intro%22%3A%22ML%22%2C%22intro_model%22%3A%22AlpAll5%22%2C%22intro_prediction_type%22%3A%22max%22%2C%22strategy_name%22%3A%22ML_AlpAll5_max%22%2C%22intro_state%22%3A%22init%22%7D; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
2023-12-28 16:22:26 UTC	275	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 28 Dec 2023 16:22:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50090	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:26 UTC	2363	OUT	GET /images/icons/myfiles/default.png HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:26 UTC	472	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:26 GMT Content-Type: image/png Content-Length: 363 Connection: close CF-Ray: 83cb246149196bf2-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5398 Cache-Control: max-age=2592000 ETag: "62deda56-1a8" Expires: Sat, 27 Jan 2024 11:13:03 GMT Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT Vary: Accept-Encoding Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=424 Server: cloudflare
2023-12-28 16:22:26 UTC	363	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2a 00 00 00 2a 08 04 00 00 00 6f ca 01 d0 00 00 01 32 49 44 41 54 78 01 ed c1 3f 4b 02 71 00 c7 e1 ef e4 18 81 e0 60 58 41 43 43 44 50 8d d1 d8 d2 10 e2 d6 1a 2d a1 42 83 ef a0 21 c8 7a 03 61 4b 43 60 3a 04 11 49 6d ae d1 14 ed 52 4b 4e fd 19 44 bb f3 d3 74 44 97 f7 d3 fb dd 4d d1 f3 e8 df bf bf 80 04 39 ea b4 e8 d0 a1 45 9d 1c 09 45 c3 2c f7 f8 3d 32 27 7b 4c d1 66 90 36 19 d9 e2 82 20 55 d9 61 86 3e 41 5c a6 65 83 3c 26 3b b2 41 05 93 63 d9 a0 81 c9 95 6c d0 c4 a4 29 1b 5c 63 72 a9 f0 d8 c5 c5 c4 61 4d 61 71 ce 30 25 85 c5 3e c3 6c 2a 2c 16 31 fb 24 ad f0 38 c4 25 88 cb 9e ec 70 46 90 53 d9 62 9b 20 5b b2 45 8a 2e 83 74 49 ca 1e 27 0c 52 51 14 4c f2 81 df 3b 19 45 43 11 bf 82 a2 a2 8c 5f 59 51 b0 Data Ascii: PNGIHDR*o2IDATx?Kq`XACCDP-B!zaKC`:ImRKNDtDM9EE,=2'{Lf6 Ua>A\e<&;Acl)\craMaq0%>l,1$8%pFSb [E.tI'RQL;EC_YQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50111	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:26 UTC	2330	OUT	GET /images/backgrounds/header/mf_logo_u1_full_color_reversed.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:26 GMT Content-Type: image/svg+xml Content-Length: 4554 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-11ca" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11530 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246269946b6d-DFW
2023-12-28 16:22:27 UTC	1036	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 39 34 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 34 20 34 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 37 66 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 74 69 74 6c 65 3e 6d 66 5f 6c 6f 67 6f 5f 75 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 20 69 64 3d 22 66 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42"> <defs> <style> .cls-1 { fill: #07f; } .cls-2 { fill: #fff; } </style> </defs> <title>mf_logo_u1</title> <g id="f
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 34 38 2d 37 2e 35 38 2c 31 32 2e 39 36 34 37 2d 39 2e 39 32 31 31 61 32 2e 31 36 33 36 2c 32 2e 31 36 33 36 2c 30 2c 30 2c 30 2d 31 2e 35 37 31 2d 33 2e 39 32 38 36 2c 37 2e 32 34 33 39 2c 37 2e 32 34 33 39 2c 30 2c 30 2c 30 2d 32 2e 39 32 2c 31 2e 34 36 30 37 63 2d 2e 33 31 38 38 2e 32 34 33 34 2d 2e 36 30 32 38 2e 34 35 38 36 2d 2e 38 35 37 31 2e 36 35 30 36 43 38 2e 38 31 36 34 2c 31 34 2e 34 32 33 39 2c 31 31 2e 39 30 31 2c 39 2e 32 35 37 31 2c 32 31 2e 39 30 38 35 2c 39 2e 32 35 37 31 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 66 6c 61 6d 65 5f 63 65 6e 74 65 72 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 66 6c 61 6d 65 20 63 65 6e 74 65 72 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 36 35 2e 31 36 32 2c 32 30 2e 33 35 30 38 Data Ascii: 48-7.58,12.9647-9.9211a2.1636,2.1636,0,0,0-1.571-3.9286,7.2439,7.2439,0,0,0-2.92,1.4607c-.3188.2434-.6028.4586-.8571.6506C8.8164,14.4239,11.901,9.2571,21.9085,9.2571Z"/> <path id="flame_center" data-name="flame center" class="cls-2" d="M65.162,20.3508
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 35 38 38 37 2c 34 2e 32 33 39 31 2d 34 2e 35 38 38 37 2c 37 2e 35 31 36 32 2c 30 2c 32 2e 30 35 33 39 2e 39 31 37 35 2c 33 2e 37 31 35 2c 33 2e 31 39 2c 33 2e 37 31 35 43 31 36 31 2e 39 37 33 2c 33 31 2e 37 39 32 2c 31 36 33 2e 31 30 39 34 2c 32 37 2e 34 36 35 34 2c 31 36 33 2e 31 30 39 34 2c 32 34 2e 37 35 36 31 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 37 37 2e 30 36 2c 31 34 2e 38 33 35 37 68 38 2e 36 35 32 36 6c 2d 34 2e 37 31 39 33 2c 32 32 2e 36 38 30 37 68 2d 38 2e 36 35 32 36 5a 6d 39 2e 31 33 33 36 2d 32 2e 34 34 37 33 68 2d 38 2e 36 35 32 36 6c 31 2e 32 36 37 2d 36 2e 30 37 34 37 68 38 2e 36 35 32 37 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 Data Ascii: 5887,4.2391-4.5887,7.5162,0,2.0539.9175,3.715,3.19,3.715C161.973,31.792,163.1094,27.4654,163.1094,24.7561Z"/> <path class="cls-2" d="M177.06,14.8357h8.6526l-4.7193,22.6807h-8.6526Zm9.1336-2.4473h-8.6526l1.267-6.0747h8.6527Z"/> <path class="cls
2023-12-28 16:22:27 UTC	780	IN	Data Raw: 31 2c 31 30 2e 31 2c 30 2c 30 2c 31 2c 32 2e 35 30 34 31 2e 33 31 31 36 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 39 38 2e 34 39 2c 31 34 2e 32 36 37 39 63 2d 35 2e 35 35 2c 30 2d 31 30 2e 32 32 36 31 2c 31 2e 33 39 38 33 2d 31 31 2e 35 38 30 38 2c 37 2e 34 32 38 35 68 38 2e 31 32 38 36 63 2e 34 38 2d 31 2e 37 30 34 32 2c 31 2e 37 30 34 32 2d 32 2e 33 31 35 38 2c 33 2e 34 35 32 32 2d 32 2e 33 31 35 38 2c 31 2e 33 31 30 39 2c 30 2c 32 2e 37 30 39 33 2e 33 39 33 34 2c 32 2e 37 30 39 33 2c 31 2e 39 36 36 32 2c 30 2c 32 2e 37 39 36 39 2d 33 2e 38 38 39 34 2c 32 2e 34 34 37 33 2d 36 2e 33 33 36 37 2c 32 2e 36 32 32 35 2d 36 2e 35 31 31 32 2e 34 38 31 2d 31 30 2e Data Ascii: 1,10.1,0,0,1,2.5041.3116Z"/> </g> <path class="cls-2" d="M198.49,14.2679c-5.55,0-10.2261,1.3983-11.5808,7.4285h8.1286c.48-1.7042,1.7042-2.3158,3.4522-2.3158,1.3109,0,2.7093.3934,2.7093,1.9662,0,2.7969-3.8894,2.4473-6.3367,2.6225-6.5112.481-10.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50110	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:26 UTC	2321	OUT	GET /images/backgrounds/header/mf_logo_u1_full_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:26 GMT Content-Type: image/svg+xml Content-Length: 4636 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-121c" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 10231 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24626a536bb6-DFW
2023-12-28 16:22:27 UTC	1036	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 39 34 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 34 20 34 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 37 66 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 33 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 65 32 38 36 36 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 34 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42"> <defs> <style> .cls-1 { fill: #07f; } .cls-2 { fill: #fff; } .cls-3 { fill: #0e2866; } .cls-4
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 2e 30 36 34 35 2c 31 35 2e 30 36 34 35 2c 30 2c 30 2c 30 2c 33 2e 31 31 36 2c 32 33 2e 39 33 35 37 61 35 2e 36 36 37 2c 35 2e 36 36 37 2c 30 2c 30 2c 30 2d 31 2e 38 33 32 31 2c 32 2e 32 32 36 36 63 33 2e 30 38 33 39 2d 38 2e 35 33 39 31 2c 39 2e 32 30 34 38 2d 37 2e 35 38 2c 31 32 2e 39 36 34 37 2d 39 2e 39 32 31 31 61 32 2e 31 36 33 36 2c 32 2e 31 36 33 36 2c 30 2c 30 2c 30 2d 31 2e 35 37 31 2d 33 2e 39 32 38 36 2c 37 2e 32 34 33 39 2c 37 2e 32 34 33 39 2c 30 2c 30 2c 30 2d 32 2e 39 32 2c 31 2e 34 36 30 37 63 2d 2e 33 31 38 38 2e 32 34 33 34 2d 2e 36 30 32 37 2e 34 35 38 36 2d 2e 38 35 37 31 2e 36 35 30 36 43 38 2e 39 2c 31 34 2e 34 32 33 39 2c 31 31 2e 39 38 34 39 2c 39 2e 32 35 37 31 2c 32 31 2e 39 39 32 34 2c 39 2e 32 35 37 31 5a 22 2f 3e 0a 20 20 20 Data Ascii: .0645,15.0645,0,0,0,3.116,23.9357a5.667,5.667,0,0,0-1.8321,2.2266c3.0839-8.5391,9.2048-7.58,12.9647-9.9211a2.1636,2.1636,0,0,0-1.571-3.9286,7.2439,7.2439,0,0,0-2.92,1.4607c-.3188.2434-.6027.4586-.8571.6506C8.9,14.4239,11.9849,9.2571,21.9924,9.2571Z"/>
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 2e 39 2c 33 37 2e 35 31 36 34 68 2d 38 2e 34 37 38 32 5a 6d 31 2e 31 36 33 31 2d 31 30 2e 31 38 32 34 63 30 2d 32 2e 35 33 34 39 2d 2e 38 37 33 36 2d 34 2e 31 39 35 33 2d 33 2e 31 30 32 37 2d 34 2e 31 39 35 33 2d 33 2e 34 35 32 33 2c 30 2d 34 2e 35 38 38 37 2c 34 2e 32 33 39 31 2d 34 2e 35 38 38 37 2c 37 2e 35 31 36 32 2c 30 2c 32 2e 30 35 33 39 2e 39 31 37 35 2c 33 2e 37 31 35 2c 33 2e 31 39 2c 33 2e 37 31 35 43 31 36 31 2e 39 37 33 2c 33 31 2e 37 39 32 2c 31 36 33 2e 31 30 39 34 2c 32 37 2e 34 36 35 34 2c 31 36 33 2e 31 30 39 34 2c 32 34 2e 37 35 36 31 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 22 20 64 3d 22 4d 31 37 37 2e 30 36 2c 31 34 2e 38 33 35 37 68 38 2e 36 35 32 36 6c 2d 34 2e 37 31 39 33 2c 32 32 2e Data Ascii: .9,37.5164h-8.4782Zm1.1631-10.1824c0-2.5349-.8736-4.1953-3.1027-4.1953-3.4523,0-4.5887,4.2391-4.5887,7.5162,0,2.0539.9175,3.715,3.19,3.715C161.973,31.792,163.1094,27.4654,163.1094,24.7561Z"/> <path class="cls-3" d="M177.06,14.8357h8.6526l-4.7193,22.
2023-12-28 16:22:27 UTC	862	IN	Data Raw: 2c 32 32 2e 36 38 30 37 48 32 35 34 2e 38 33 6c 32 2e 32 32 38 2d 31 30 2e 35 36 34 38 63 31 2e 30 34 38 36 2d 33 2e 39 30 31 35 2c 32 2e 38 36 30 39 2d 35 2e 32 34 33 32 2c 36 2e 32 31 2d 35 2e 32 35 34 6c 2e 30 34 2d 2e 30 30 31 32 61 31 30 2e 31 2c 31 30 2e 31 2c 30 2c 30 2c 31 2c 32 2e 35 30 34 31 2e 33 31 31 36 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 22 20 64 3d 22 4d 31 39 38 2e 34 39 2c 31 34 2e 32 36 37 39 63 2d 35 2e 35 35 2c 30 2d 31 30 2e 32 32 36 31 2c 31 2e 33 39 38 33 2d 31 31 2e 35 38 30 38 2c 37 2e 34 32 38 35 68 38 2e 31 32 38 36 63 2e 34 38 2d 31 2e 37 30 34 32 2c 31 2e 37 30 34 32 2d 32 2e 33 31 35 38 2c 33 2e 34 35 32 32 2d 32 2e 33 31 35 38 2c 31 2e 33 31 Data Ascii: ,22.6807H254.83l2.228-10.5648c1.0486-3.9015,2.8609-5.2432,6.21-5.254l.04-.0012a10.1,10.1,0,0,1,2.5041.3116Z"/> </g> <path class="cls-3" d="M198.49,14.2679c-5.55,0-10.2261,1.3983-11.5808,7.4285h8.1286c.48-1.7042,1.7042-2.3158,3.4522-2.3158,1.31

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50117	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2464	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	451	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb2463bd28aa55-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 607883 Cache-Control: public, max-age=43200 Expires: Fri, 29 Dec 2023 04:22:27 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare
2023-12-28 16:22:27 UTC	263	IN	Data Raw: 31 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 4d 45 54 41 20 4e 41 4d 45 3d 22 52 4f 42 4f 54 53 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 20 3c 4d 45 54 41 20 4e 41 4d 45 3d 22 47 4f 4f 47 4c 45 42 4f 54 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 20 3c 4d 45 54 41 20 4e 41 4d 45 3d 22 53 4c 55 52 50 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 20 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 20 69 6e 74 65 72 6e 61 6c 20 70 61 67 65 20 3c 2f 64 69 76 3e 20 3c 2f 62 6f 64 79 3e 20 3c 2f Data Ascii: 100<!DOCTYPE html> <html> <head> <META NAME="ROBOTS" CONTENT="NOINDEX,FOLLOW" /> <META NAME="GOOGLEBOT" CONTENT="NOINDEX,FOLLOW" /> <META NAME="SLURP" CONTENT="NOINDEX,FOLLOW" /> </head> <body> <div style="display:none;"> internal page </div> </body> </
2023-12-28 16:22:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50112	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2229	OUT	GET /js/master_121918.js HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 15 Nov 2023 20:27:23 GMT Vary: Accept-Encoding ETag: W/"655529ab-8d73c" Expires: Sat, 27 Jan 2024 09:34:08 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 10865 Server: cloudflare CF-RAY: 83cb2463beec6c5e-DFW
2023-12-28 16:22:27 UTC	943	IN	Data Raw: 37 64 66 36 0d 0a 42 55 49 4c 44 5f 56 45 52 53 49 4f 4e 3d 27 31 32 31 39 31 38 27 3b 0a 20 0a 76 61 72 20 73 43 44 4e 4c 69 76 65 55 72 6c 3d 27 20 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 20 27 3b 0a 0a 76 61 72 20 70 71 3d 27 27 3b 66 75 6e 63 74 69 6f 6e 20 61 69 28 70 6e 29 7b 69 66 28 70 6e 3d 3d 27 4d 43 27 7c 7c 70 6e 3d 3d 27 56 69 73 61 27 7c 7c 70 6e 3d 3d 27 44 69 73 63 27 29 7b 44 6f 53 68 6f 77 28 27 63 61 72 64 63 6f 64 65 5f 67 65 6e 65 72 61 6c 27 29 3b 44 6f 48 69 64 65 28 27 63 61 72 64 63 6f 64 65 5f 61 6d 65 78 27 29 3b 7d 65 6c 73 65 20 69 66 28 70 6e 3d 3d 27 41 6d 45 78 27 29 7b 44 6f 48 69 64 65 28 27 63 61 72 64 63 6f 64 65 5f 67 65 6e 65 72 61 6c 27 29 3b 44 6f 53 68 6f 77 28 27 63 61 72 64 63 6f 64 65 5f 61 Data Ascii: 7df6BUILD_VERSION='121918'; var sCDNLiveUrl=' static.mediafire.com ';var pq='';function ai(pn){if(pn=='MC'\|\|pn=='Visa'\|\|pn=='Disc'){DoShow('cardcode_general');DoHide('cardcode_amex');}else if(pn=='AmEx'){DoHide('cardcode_general');DoShow('cardcode_a
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 65 6c 4e 6f 2e 76 61 6c 75 65 3d 3d 22 22 29 72 65 74 75 72 6e 3b 76 61 72 20 70 68 6f 6e 65 3d 6e 65 77 20 53 74 72 69 6e 67 28 74 65 6c 4e 6f 2e 76 61 6c 75 65 29 3b 70 68 6f 6e 65 3d 70 68 6f 6e 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 34 29 3b 69 66 28 70 68 6f 6e 65 2e 6d 61 74 63 68 28 22 2e 5b 30 2d 39 5d 7b 33 7d 2e 5b 30 2d 39 5d 7b 33 7d 2d 5b 30 2d 39 5d 7b 34 7d 22 29 3d 3d 6e 75 6c 6c 29 7b 69 66 28 70 68 6f 6e 65 2e 6d 61 74 63 68 28 22 2e 5b 30 2d 39 5d 7b 32 7d 2e 5b 30 2d 39 5d 7b 33 7d 2d 5b 30 2d 39 5d 7b 34 7d 7c 22 2b 22 2e 5b 30 2d 39 5d 2e 5b 30 2d 39 5d 7b 33 7d 2d 5b 30 2d 39 5d 7b 34 7d 7c 22 2b 22 2e 5b 30 2d 39 5d 7b 33 7d 2e 5b 30 2d 39 5d 7b 32 7d 2d 5b 30 2d 39 5d 7b 34 7d 7c 22 2b 22 2e 5b 30 2d 39 5d 7b 33 7d 2e 5b 30 Data Ascii: elNo.value=="")return;var phone=new String(telNo.value);phone=phone.substring(0,14);if(phone.match(".[0-9]{3}.[0-9]{3}-[0-9]{4}")==null){if(phone.match(".[0-9]{2}.[0-9]{3}-[0-9]{4}\|"+".[0-9].[0-9]{3}-[0-9]{4}\|"+".[0-9]{3}.[0-9]{2}-[0-9]{4}\|"+".[0-9]{3}.[0
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 22 5d 2c 5b 27 42 44 27 2c 22 42 61 6e 67 6c 61 64 65 73 68 22 5d 2c 5b 27 42 45 27 2c 22 42 65 6c 67 69 75 6d 22 5d 2c 5b 27 42 46 27 2c 22 42 75 72 6b 69 6e 61 20 46 61 73 6f 22 5d 2c 5b 27 42 47 27 2c 22 42 75 6c 67 61 72 69 61 22 5d 2c 5b 27 42 48 27 2c 22 42 61 68 72 61 69 6e 22 5d 2c 5b 27 42 49 27 2c 22 42 75 72 75 6e 64 69 22 5d 2c 5b 27 42 4a 27 2c 22 42 65 6e 69 6e 22 5d 2c 5b 27 42 4d 27 2c 22 42 65 72 6d 75 64 61 22 5d 2c 5b 27 42 4e 27 2c 22 42 72 75 6e 65 69 20 44 61 72 75 73 73 61 6c 61 6d 22 5d 2c 5b 27 42 4f 27 2c 22 42 6f 6c 69 76 69 61 22 5d 2c 5b 27 42 52 27 2c 22 42 72 61 7a 69 6c 22 5d 2c 5b 27 42 53 27 2c 22 42 61 68 61 6d 61 73 22 5d 2c 5b 27 42 54 27 2c 22 42 68 75 74 61 6e 22 5d 2c 5b 27 42 56 27 2c 22 42 6f 75 76 65 74 20 49 73 Data Ascii: "],['BD',"Bangladesh"],['BE',"Belgium"],['BF',"Burkina Faso"],['BG',"Bulgaria"],['BH',"Bahrain"],['BI',"Burundi"],['BJ',"Benin"],['BM',"Bermuda"],['BN',"Brunei Darussalam"],['BO',"Bolivia"],['BR',"Brazil"],['BS',"Bahamas"],['BT',"Bhutan"],['BV',"Bouvet Is
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 61 20 61 6e 64 20 74 68 65 20 53 6f 75 74 68 20 53 61 6e 64 77 69 63 68 20 49 73 6c 61 6e 64 73 22 5d 2c 5b 27 47 54 27 2c 22 47 75 61 74 65 6d 61 6c 61 22 5d 2c 5b 27 47 55 27 2c 22 47 75 61 6d 22 5d 2c 5b 27 47 57 27 2c 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 22 5d 2c 5b 27 47 59 27 2c 22 47 75 79 61 6e 61 22 5d 2c 5b 27 48 4b 27 2c 22 48 6f 6e 67 20 4b 6f 6e 67 22 5d 2c 5b 27 48 4d 27 2c 22 48 65 61 72 64 20 49 73 6c 61 6e 64 20 61 6e 64 20 4d 63 44 6f 6e 61 6c 64 20 49 73 6c 61 6e 64 73 22 5d 2c 5b 27 48 4e 27 2c 22 48 6f 6e 64 75 72 61 73 22 5d 2c 5b 27 48 52 27 2c 22 43 72 6f 61 74 69 61 22 5d 2c 5b 27 48 54 27 2c 22 48 61 69 74 69 22 5d 2c 5b 27 48 55 27 2c 22 48 75 6e 67 61 72 79 22 5d 2c 5b 27 49 44 27 2c 22 49 6e 64 6f 6e 65 73 69 61 22 5d 2c Data Ascii: a and the South Sandwich Islands"],['GT',"Guatemala"],['GU',"Guam"],['GW',"Guinea-Bissau"],['GY',"Guyana"],['HK',"Hong Kong"],['HM',"Heard Island and McDonald Islands"],['HN',"Honduras"],['HR',"Croatia"],['HT',"Haiti"],['HU',"Hungary"],['ID',"Indonesia"],
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 27 2c 22 4d 61 6c 61 77 69 22 5d 2c 5b 27 4d 58 27 2c 22 4d 65 78 69 63 6f 22 5d 2c 5b 27 4d 59 27 2c 22 4d 61 6c 61 79 73 69 61 22 5d 2c 5b 27 4d 5a 27 2c 22 4d 6f 7a 61 6d 62 69 71 75 65 22 5d 2c 5b 27 4e 41 27 2c 22 4e 61 6d 69 62 69 61 22 5d 2c 5b 27 4e 43 27 2c 22 4e 65 77 20 43 61 6c 65 64 6f 6e 69 61 22 5d 2c 5b 27 4e 45 27 2c 22 4e 69 67 65 72 22 5d 2c 5b 27 4e 46 27 2c 22 4e 6f 72 66 6f 6c 6b 20 49 73 6c 61 6e 64 22 5d 2c 5b 27 4e 47 27 2c 22 4e 69 67 65 72 69 61 22 5d 2c 5b 27 4e 49 27 2c 22 4e 69 63 61 72 61 67 75 61 22 5d 2c 5b 27 4e 4c 27 2c 22 4e 65 74 68 65 72 6c 61 6e 64 73 22 5d 2c 5b 27 4e 4f 27 2c 22 4e 6f 72 77 61 79 22 5d 2c 5b 27 4e 50 27 2c 22 4e 65 70 61 6c 22 5d 2c 5b 27 4e 52 27 2c 22 4e 61 75 72 75 22 5d 2c 5b 27 4e 55 27 2c 22 Data Ascii: ',"Malawi"],['MX',"Mexico"],['MY',"Malaysia"],['MZ',"Mozambique"],['NA',"Namibia"],['NC',"New Caledonia"],['NE',"Niger"],['NF',"Norfolk Island"],['NG',"Nigeria"],['NI',"Nicaragua"],['NL',"Netherlands"],['NO',"Norway"],['NP',"Nepal"],['NR',"Nauru"],['NU',"
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 61 67 6f 22 5d 2c 5b 27 54 56 27 2c 22 54 75 76 61 6c 75 22 5d 2c 5b 27 54 57 27 2c 22 54 61 69 77 61 6e 22 5d 2c 5b 27 54 5a 27 2c 22 54 61 6e 7a 61 6e 69 61 2c 20 55 6e 69 74 65 64 20 52 65 70 75 62 6c 69 63 20 6f 66 22 5d 2c 5b 27 55 41 27 2c 22 55 6b 72 61 69 6e 65 22 5d 2c 5b 27 55 47 27 2c 22 55 67 61 6e 64 61 22 5d 2c 5b 27 41 45 27 2c 22 55 6e 69 74 65 64 20 41 72 61 62 20 45 6d 69 72 61 74 65 73 22 5d 2c 5b 27 55 4d 27 2c 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 4d 69 6e 6f 72 20 4f 75 74 6c 79 69 6e 67 20 49 73 6c 61 6e 64 73 22 5d 2c 5b 27 55 53 27 2c 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 5d 2c 5b 27 55 59 27 2c 22 55 72 75 67 75 61 79 22 5d 2c 5b 27 55 5a 27 2c 22 55 7a 62 65 6b 69 73 74 61 6e 22 5d 2c 5b 27 56 41 27 2c 22 48 6f 6c Data Ascii: ago"],['TV',"Tuvalu"],['TW',"Taiwan"],['TZ',"Tanzania, United Republic of"],['UA',"Ukraine"],['UG',"Uganda"],['AE',"United Arab Emirates"],['UM',"United States Minor Outlying Islands"],['US',"United States"],['UY',"Uruguay"],['UZ',"Uzbekistan"],['VA',"Hol
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 55 53 27 2c 27 4d 4f 27 2c 22 4d 69 73 73 6f 75 72 69 22 5d 2c 5b 27 55 53 27 2c 27 4d 50 27 2c 22 4e 6f 72 74 68 65 72 6e 20 4d 61 72 69 61 6e 61 20 49 73 6c 61 6e 64 73 22 5d 2c 5b 27 55 53 27 2c 27 4d 53 27 2c 22 4d 69 73 73 69 73 73 69 70 70 69 22 5d 2c 5b 27 55 53 27 2c 27 4d 54 27 2c 22 4d 6f 6e 74 61 6e 61 22 5d 2c 5b 27 55 53 27 2c 27 4e 43 27 2c 22 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 22 5d 2c 5b 27 55 53 27 2c 27 4e 44 27 2c 22 4e 6f 72 74 68 20 44 61 6b 6f 74 61 22 5d 2c 5b 27 55 53 27 2c 27 4e 45 27 2c 22 4e 65 62 72 61 73 6b 61 22 5d 2c 5b 27 55 53 27 2c 27 4e 48 27 2c 22 4e 65 77 20 48 61 6d 70 73 68 69 72 65 22 5d 2c 5b 27 55 53 27 2c 27 4e 4a 27 2c 22 4e 65 77 20 4a 65 72 73 65 79 22 5d 2c 5b 27 55 53 27 2c 27 4e 4d 27 2c 22 4e 65 77 Data Ascii: US','MO',"Missouri"],['US','MP',"Northern Mariana Islands"],['US','MS',"Mississippi"],['US','MT',"Montana"],['US','NC',"North Carolina"],['US','ND',"North Dakota"],['US','NE',"Nebraska"],['US','NH',"New Hampshire"],['US','NJ',"New Jersey"],['US','NM',"New
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 6f 72 64 20 74 6f 20 75 6e 6c 6f 63 6b 20 74 68 69 73 20 66 69 6c 65 2e 22 3b 69 66 28 6d 47 26 26 68 6b 29 7b 68 6b 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 54 68 65 20 70 61 73 73 77 6f 72 64 20 79 6f 75 20 65 6e 74 65 72 65 64 20 77 61 73 20 69 6e 76 61 6c 69 64 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 21 22 3b 24 28 27 23 64 6f 77 6e 6c 6f 61 64 70 27 29 2e 61 64 64 43 6c 61 73 73 28 27 65 72 72 6f 72 27 29 3b 7d 6d 64 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 7d 63 61 74 63 68 28 65 72 72 6e 6f 29 7b 70 61 72 65 6e 74 2e 5a 69 28 30 2c 22 54 68 65 72 65 20 77 61 73 20 61 20 73 6f 66 74 77 61 72 65 20 65 78 63 65 70 74 69 6f 6e 20 28 23 32 29 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 69 6e 69 74 69 61 6c 69 Data Ascii: ord to unlock this file.";if(mG&&hk){hk.innerHTML="The password you entered was invalid, please try again!";$('#downloadp').addClass('error');}md.style.display="block";}catch(errno){parent.Zi(0,"There was a software exception (#2) while trying to initiali
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 69 66 28 77 29 7b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 77 69 64 74 68 27 2c 77 29 3b 7d 69 66 28 68 29 7b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 68 65 69 67 68 74 27 2c 68 29 3b 7d 69 66 28 63 29 7b 74 68 69 73 2e 61 64 64 50 61 72 61 6d 28 27 62 67 63 6f 6c 6f 72 27 2c 63 29 3b 7d 74 68 69 73 2e 61 64 64 50 61 72 61 6d 28 27 71 75 61 6c 69 74 79 27 2c 27 68 69 67 68 27 29 3b 74 68 69 73 2e 61 64 64 50 61 72 61 6d 28 27 61 6c 6c 6f 77 53 63 72 69 70 74 41 63 63 65 73 73 27 2c 27 61 6c 77 61 79 73 27 29 3b 74 68 69 73 2e 61 64 64 56 61 72 69 61 62 6c 65 28 27 63 68 61 72 74 57 69 64 74 68 27 2c 77 29 3b 74 68 69 73 2e 61 64 64 56 61 72 69 61 62 6c 65 28 27 63 68 61 72 74 48 65 69 67 68 74 27 2c 68 29 3b 64 65 62 75 67 Data Ascii: if(w){this.setAttribute('width',w);}if(h){this.setAttribute('height',h);}if(c){this.addParam('bgcolor',c);}this.addParam('quality','high');this.addParam('allowScriptAccess','always');this.addVariable('chartWidth',w);this.addVariable('chartHeight',h);debug
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 6b 65 79 3b 76 61 72 20 76 61 72 69 61 62 6c 65 73 3d 74 68 69 73 2e 67 65 74 56 61 72 69 61 62 6c 65 73 28 29 3b 66 6f 72 28 6b 65 79 20 69 6e 20 76 61 72 69 61 62 6c 65 73 29 7b 76 61 72 69 61 62 6c 65 50 61 69 72 73 2e 70 75 73 68 28 6b 65 79 2b 22 3d 22 2b 76 61 72 69 61 62 6c 65 73 5b 6b 65 79 5d 29 3b 7d 72 65 74 75 72 6e 20 76 61 72 69 61 62 6c 65 50 61 69 72 73 3b 7d 2c 67 65 74 53 57 46 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 77 66 4e 6f 64 65 3d 22 22 3b 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 26 26 6e 61 76 69 67 61 74 6f 72 2e 6d 69 6d 65 54 79 70 65 73 26 26 6e 61 76 69 67 61 74 6f 72 2e 6d 69 6d 65 54 79 70 65 73 2e 6c 65 6e 67 74 68 29 7b 73 77 66 4e 6f 64 65 3d 27 3c 65 6d 62 65 Data Ascii: );var key;var variables=this.getVariables();for(key in variables){variablePairs.push(key+"="+variables[key]);}return variablePairs;},getSWFHTML:function(){var swfNode="";if(navigator.plugins&&navigator.mimeTypes&&navigator.mimeTypes.length){swfNode='<embe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50115	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2313	OUT	GET /images/backgrounds/home_unicorn/gizmodo.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/svg+xml Content-Length: 2119 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-847" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 8051 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2463edca3587-DFW
2023-12-28 16:22:27 UTC	1038	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 34 32 2e 30 31 22 20 68 65 69 67 68 74 3d 22 34 39 2e 30 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 32 2e 30 31 20 34 39 2e 30 38 22 3e 3c 74 69 74 6c 65 3e 67 69 7a 6d 6f 64 6f 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 35 36 2c 34 33 2e 32 32 56 35 2e 38 32 61 36 2e 33 2c 36 2e 33 2c 30 2c 30 2c 31 2c 31 2e 33 33 2d 34 2e 33 37 41 34 2e 34 33 2c 34 2e 34 33 2c 30 2c 30 2c 31 2c 36 30 2e 38 31 2c 30 61 34 2e 35 39 2c 34 2e 35 39 2c 30 2c 30 2c 31 2c 33 2e 35 32 2c 31 2e 34 34 2c 36 2e 32 33 2c Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="342.01" height="49.08" viewBox="0 0 342.01 49.08"><title>gizmodo</title><path d="M56,43.22V5.82a6.3,6.3,0,0,1,1.33-4.37A4.43,4.43,0,0,1,60.81,0a4.59,4.59,0,0,1,3.52,1.44,6.23,
2023-12-28 16:22:27 UTC	1081	IN	Data Raw: 33 34 2e 36 35 2c 32 41 34 2e 32 31 2c 34 2e 32 31 2c 30 2c 30 2c 30 2c 31 32 39 2e 38 38 2e 32 32 61 34 2e 33 34 2c 34 2e 33 34 2c 30 2c 30 2c 30 2d 33 2c 34 2e 31 36 76 34 30 61 34 2e 32 36 2c 34 2e 32 36 2c 30 2c 31 2c 30 2c 38 2e 35 31 2c 30 56 31 38 2e 36 37 6c 31 30 2e 35 2c 31 36 2c 30 2c 30 76 30 6c 30 2c 2e 30 36 2e 32 31 2e 32 38 2e 31 2e 31 31 63 2e 30 36 2e 30 37 2e 31 32 2e 31 34 2e 31 38 2e 32 6c 2e 31 38 2e 31 37 2e 31 33 2e 31 32 2e 32 36 2e 31 39 2e 30 37 2e 30 36 68 30 6c 2e 32 39 2e 31 38 2e 30 38 2e 30 35 2e 32 33 2e 31 31 61 34 2e 32 31 2c 34 2e 32 31 2c 30 2c 30 2c 30 2c 31 2e 33 34 2e 33 37 68 30 6c 2e 32 37 2c 30 68 2e 32 39 6c 2e 32 37 2c 30 68 30 61 34 2e 32 31 2c 34 2e 32 31 2c 30 2c 30 2c 30 2c 31 2e 33 34 2d 2e 33 37 6c 2e 32 Data Ascii: 34.65,2A4.21,4.21,0,0,0,129.88.22a4.34,4.34,0,0,0-3,4.16v40a4.26,4.26,0,1,0,8.51,0V18.67l10.5,16,0,0v0l0,.06.21.28.1.11c.06.07.12.14.18.2l.18.17.13.12.26.19.07.06h0l.29.18.08.05.23.11a4.21,4.21,0,0,0,1.34.37h0l.27,0h.29l.27,0h0a4.21,4.21,0,0,0,1.34-.37l.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50114	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2316	OUT	GET /images/backgrounds/home_unicorn/lifehacker.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/svg+xml Content-Length: 2393 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-959" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1081 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2463e9010c0b-DFW
2023-12-28 16:22:27 UTC	1038	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 5f 6f 67 6f 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 3b 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 39 36 2e 33 39 22 20 68 65 69 67 68 74 3d 22 31 34 38 2e 34 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 39 36 2e 33 39 20 31 34 38 2e 34 39 22 3e 3c 74 69 74 6c 65 3e 6c 69 66 65 68 61 63 6b 65 72 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 32 39 2c 31 34 38 48 33 2e 34 32 56 32 2e 36 34 4c 32 36 2e 32 39 2c 34 2e 31 31 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 2e 34 32 20 2d 31 2e 31 36 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 32 2e 33 2c 31 32 2e 37 38 61 31 33 2e 31 Data Ascii: <svg id="_ogo" data-name=";ogo" xmlns="http://www.w3.org/2000/svg" width="596.39" height="148.49" viewBox="0 0 596.39 148.49"><title>lifehacker</title><path d="M26.29,148H3.42V2.64L26.29,4.11Z" transform="translate(-3.42 -1.16)"/><path d="M52.3,12.78a13.1
2023-12-28 16:22:27 UTC	1355	IN	Data Raw: 2e 34 37 63 30 2d 38 2e 33 2d 33 2e 38 37 2d 31 34 2e 39 34 2d 31 34 2e 33 39 2d 31 33 2e 38 33 68 2e 31 38 63 2d 35 2e 39 2e 31 38 2d 31 33 2e 34 37 2e 39 32 2d 31 39 2e 37 34 2c 31 2e 32 39 2d 2e 31 38 2d 35 2e 33 35 2d 2e 33 37 2d 37 2e 33 38 2d 2e 35 35 2d 31 31 2e 34 34 61 36 32 2e 39 34 2c 36 32 2e 39 34 2c 30 2c 30 2c 31 2c 31 38 2e 32 36 2d 33 2e 38 37 43 33 32 33 2e 38 31 2c 34 35 2e 32 35 2c 33 33 36 2c 36 30 2e 31 39 2c 33 33 36 2c 37 36 2e 32 34 76 34 33 2e 39 61 32 38 2e 38 31 2c 32 38 2e 38 31 2c 30 2c 30 2c 31 2d 32 38 2e 35 39 2c 32 39 2c 32 39 2e 31 33 2c 32 39 2e 31 33 2c 30 2c 30 2c 31 2d 32 39 2d 32 39 76 2d 39 63 30 2d 31 35 2e 38 36 2c 31 30 2e 38 38 2d 32 37 2e 38 35 2c 32 39 2d 32 37 2e 38 35 61 34 35 2e 36 32 2c 34 35 2e 36 32 2c Data Ascii: .47c0-8.3-3.87-14.94-14.39-13.83h.18c-5.9.18-13.47.92-19.74,1.29-.18-5.35-.37-7.38-.55-11.44a62.94,62.94,0,0,1,18.26-3.87C323.81,45.25,336,60.19,336,76.24v43.9a28.81,28.81,0,0,1-28.59,29,29.13,29.13,0,0,1-29-29v-9c0-15.86,10.88-27.85,29-27.85a45.62,45.62,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50116	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2490	OUT	GET /templates/upgrade/upgrade_button.php HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	307	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb2463fa792cbe-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, nofollow Server: cloudflare
2023-12-28 16:22:27 UTC	1062	IN	Data Raw: 31 36 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 Data Ascii: 16c0<!DOCTYPE html><html><head><style> html, body, a { margin: 0; padding: 0; border: 0; outline: 0; } html { font-size: 14px;
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 37 39 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d Data Ascii: -items: center; justify-content: center; border-radius: 3px; box-sizing: border-box; font-family: 'Open Sans', sans-serif; font-size: .79rem; font-weight: norm
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 42 74 6e 2d 2d 72 65 64 44 69 73 63 6f 75 6e 74 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 48 53 4c 28 33 34 39 2e 32 2c 20 38 30 2e 38 25 2c 20 34 32 25 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 42 75 74 74 6f 6e 20 69 63 6f 6e 73 20 28 32 34 78 32 34 70 78 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 Data Ascii: Btn--redDiscount:hover { color: #fff; background-color: HSL(349.2, 80.8%, 42%); } /* Button icons (24x24px) ==========================================================================
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 4d 65 64 69 61 20 71 75 65 72 69 65 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 34 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 42 Data Ascii: ext-overflow: ellipsis; white-space: nowrap; } /* Media queries ========================================================================== */ @media (max-width: 54px) { .B
2023-12-28 16:22:27 UTC	663	IN	Data Raw: 64 65 5f 61 63 63 74 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 75 70 67 72 61 64 65 5f 64 69 73 63 6f 75 6e 74 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4b 65 79 62 6f 61 72 64 20 66 6f 63 75 73 20 73 74 79 6c 69 6e 67 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 Data Ascii: de_acct').style.display = 'block'; document.querySelector('.upgrade_discount').style.display = 'none'; } } // Keyboard focus styling try { document.addEventListener('
2023-12-28 16:22:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50113	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2310	OUT	GET /images/backgrounds/home_unicorn/cnet.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/svg+xml Content-Length: 1790 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-6fe" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 9691 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2463fe98474f-DFW
2023-12-28 16:22:27 UTC	1038	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 73 76 67 36 30 39 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 39 39 39 22 20 68 65 69 67 68 74 3d 22 39 39 39 2e 30 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 39 39 20 39 39 39 2e 30 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 63 6e 65 74 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 6c 61 79 65 72 31 22 3e 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 34 38 38 37 22 20 64 3d 22 4d 35 30 30 2c 39 39 39 2e 35 36 63 32 37 35 2e 38 39 2c 30 2c 34 39 39 2e 35 31 2d 32 32 33 2e 36 2c 34 39 39 2e 35 31 2d 34 39 39 2e 34 Data Ascii: <svg id="svg6096" xmlns="http://www.w3.org/2000/svg" width="999" height="999.06" viewBox="0 0 999 999.06"><defs><style>.cls-1{fill:#fff;}</style></defs><title>cnet</title><g id="layer1"><path id="path4887" d="M500,999.56c275.89,0,499.51-223.6,499.51-499.4
2023-12-28 16:22:27 UTC	752	IN	Data Raw: 38 2d 35 37 2e 34 36 2c 31 2e 35 38 6c 2e 30 36 2d 31 2e 35 38 56 36 36 32 2e 35 39 48 33 37 35 2e 34 38 56 36 32 37 6c 32 32 2e 33 2e 30 38 56 34 31 30 2e 33 36 6c 2d 32 36 2e 34 36 2d 2e 31 36 56 33 37 34 2e 38 32 68 36 37 2e 38 32 6c 2e 31 38 2c 32 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 30 2e 35 20 2d 30 2e 35 29 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 34 38 39 37 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 39 34 2e 32 39 2c 35 39 38 2e 37 32 63 31 2e 35 2c 32 35 2e 39 33 2c 39 2e 36 39 2c 34 39 2e 32 2c 33 31 2e 33 34 2c 35 38 2e 37 39 2d 34 2e 30 35 2d 31 2e 38 37 2c 31 30 2e 35 34 2c 35 2e 34 31 2c 32 35 2e 35 39 2c 35 2e 32 37 2c 37 2e 39 31 2d 2e 32 2c 34 36 2e 31 2d 2e 31 36 2c 34 Data Ascii: 8-57.46,1.58l.06-1.58V662.59H375.48V627l22.3.08V410.36l-26.46-.16V374.82h67.82l.18,26" transform="translate(-0.5 -0.5)"/><path id="path4897" class="cls-1" d="M794.29,598.72c1.5,25.93,9.69,49.2,31.34,58.79-4.05-1.87,10.54,5.41,25.59,5.27,7.91-.2,46.1-.16,4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50118	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2125	OUT	GET /images/icons/myfiles/default.png HTTP/1.1 Host: www.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	472	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/png Content-Length: 363 Connection: close CF-Ray: 83cb24649b8c2cb2-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5404 Cache-Control: max-age=2592000 ETag: "62deda56-1a8" Expires: Sat, 27 Jan 2024 14:52:23 GMT Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT Vary: Accept-Encoding Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=424 Server: cloudflare
2023-12-28 16:22:27 UTC	363	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2a 00 00 00 2a 08 04 00 00 00 6f ca 01 d0 00 00 01 32 49 44 41 54 78 01 ed c1 3f 4b 02 71 00 c7 e1 ef e4 18 81 e0 60 58 41 43 43 44 50 8d d1 d8 d2 10 e2 d6 1a 2d a1 42 83 ef a0 21 c8 7a 03 61 4b 43 60 3a 04 11 49 6d ae d1 14 ed 52 4b 4e fd 19 44 bb f3 d3 74 44 97 f7 d3 fb dd 4d d1 f3 e8 df bf bf 80 04 39 ea b4 e8 d0 a1 45 9d 1c 09 45 c3 2c f7 f8 3d 32 27 7b 4c d1 66 90 36 19 d9 e2 82 20 55 d9 61 86 3e 41 5c a6 65 83 3c 26 3b b2 41 05 93 63 d9 a0 81 c9 95 6c d0 c4 a4 29 1b 5c 63 72 a9 f0 d8 c5 c5 c4 61 4d 61 71 ce 30 25 85 c5 3e c3 6c 2a 2c 16 31 fb 24 ad f0 38 c4 25 88 cb 9e ec 70 46 90 53 d9 62 9b 20 5b b2 45 8a 2e 83 74 49 ca 1e 27 0c 52 51 14 4c f2 81 df 3b 19 45 43 11 bf 82 a2 a2 8c 5f 59 51 b0 Data Ascii: PNGIHDR*o2IDATx?Kq`XACCDP-B!zaKC`:ImRKNDtDM9EE,=2'{Lf6 Ua>A\e<&;Acl)\craMaq0%>l,1$8%pFSb [E.tI'RQL;EC_YQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50107	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	875	OUT	GET /fa/img/laptop_white_display_black.png HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
2023-12-28 16:22:27 UTC	358	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/png Content-Length: 87344 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-15530" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:27 UTC	16026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 52 00 00 02 03 08 03 00 00 00 39 5d df d3 00 00 03 00 50 4c 54 45 00 00 00 c8 c9 ce 04 04 05 02 02 02 d3 d6 db 02 02 02 cc cf d4 d0 d3 d7 d5 d7 dc 01 01 01 02 02 02 cd ce d4 cb cd d3 bd bf c5 b1 b3 ba ee ef f1 b1 b4 b9 f6 f6 f7 58 57 5a 7d 7c 7f 02 03 05 e8 f2 f8 ea f3 f9 06 08 0c f9 fb fc e6 f1 f7 fd fe fe 9d c9 de a2 cd e1 17 19 20 92 b5 ca 97 c6 dc 89 be d6 a9 d0 e3 0d 0e 13 4e 63 f3 ff 1a 10 8f b9 cf 98 b7 cc 12 14 19 f2 f1 f6 ef f5 fa 86 b9 d2 8e c2 da d8 d8 dd 8a b5 cc d3 d2 d8 98 bb d0 83 b4 cd f2 fa fd f9 ee f4 a1 be d1 81 ba d5 95 c1 d7 91 bd d4 74 b2 cb fb f0 ed ff e9 f7 7e b6 d0 fc f3 f9 1d 1f 26 20 32 4c d4 27 1d 7d b3 cc fd f5 f0 de dd e1 58 58 5f 5d 5d 65 fe eb e4 01 73 d8 cd cd d3 63 Data Ascii: PNGIHDRR9]PLTEXWZ}\| Nct~& 2L'}XX_]]esc
2023-12-28 16:22:27 UTC	16384	IN	Data Raw: 74 7d 7a 3c 6a 2f 9c 24 ed 65 47 e9 ea b8 a2 e2 f0 e1 fa 86 c3 66 49 c5 85 0b 39 4d a7 87 35 39 d3 be dd 01 41 ac 9e c1 87 12 8a b4 18 13 91 e2 62 7c a9 b3 5e 99 84 24 61 e8 d3 df 63 82 98 c0 c5 30 8a 6c fd 22 e1 ef fc f4 4f 68 e2 56 70 52 a0 ac c1 a3 02 56 de 9e 79 bb 2a 75 ab b9 9c b0 9f 4c fe 6e bc 91 a1 42 0e 05 f6 4d 41 a4 a4 68 d0 4f 2f 85 c9 03 4a 2b 44 4a 79 82 4a 21 8a ae 11 bf ee ff 81 54 ef 4b fd 2a 52 bf fb b3 bc 5b 59 dc 34 d8 bf ab 36 40 bf 0b a9 cb fb b9 54 48 94 1f 32 16 4f d7 0f 8c 1e 6e 82 29 d5 ed ec 8a b8 3e 26 a2 d9 65 f3 f0 81 62 7d a1 39 a1 7a 1a df d0 f0 ab cd 34 3a 0e cb c3 f4 a0 2d 0f 23 7e e9 b4 5b b6 e1 61 32 7d 38 3c 2a 93 a3 f5 cd 75 4a ac 7a 8b a7 57 c1 0d 41 7e 48 ab d3 f1 85 74 75 4d f7 74 73 ba a6 e4 a4 99 3d 3d 3b 0d 46 Data Ascii: t}z<j/$eGfI9M59Ab\|^$ac0l"OhVpRVyuLnBMAhO/J+DJyJ!TKR[Y46@TH2On)>&eb}9z4:-#~[a2}8<*uJzWA~HtuMts==;F
2023-12-28 16:22:27 UTC	16384	IN	Data Raw: dd de d7 7f 67 d2 12 5a 26 ef 0c 33 83 9f df d4 5f 06 2f 18 40 53 71 62 22 c9 38 7d ae 6e 5f 47 2a 2c 21 25 81 09 0c ab cd 5a 3b 21 a5 4c 51 dd 14 55 2c 55 af 33 55 91 13 e8 a1 12 a1 5a 7e 5d 98 9a 8d 99 82 4e 11 53 88 a6 c8 f5 93 70 ca 90 d2 2b be 87 bf d6 70 ca 9f f5 63 d7 ef d2 4b e5 48 92 25 fc f2 c2 2c d1 e8 79 92 06 a2 8c 23 8c 20 aa 11 52 33 5b 1f 29 86 ca 21 85 63 48 3a 87 42 c1 c0 94 0f 9e 80 51 14 5f 19 3b 1e 28 7b ac df 92 47 2c a5 4c 25 21 b4 96 43 9a e6 f7 d0 d3 72 52 2e 85 ae ea 9e 94 53 80 f4 ac 35 a5 64 60 fe be e8 90 f0 ef 21 50 7c e5 c8 89 9a 0c 58 20 3d 61 12 a5 8e 1f 68 a2 0a 86 a4 9d bc dd 98 ab d4 dd 60 8a 1a 17 aa 27 2c 55 4b 39 54 5c d7 33 a5 5a b5 4e a8 c8 f9 fb fd 99 43 60 0a 6f a5 80 ef 07 99 12 a6 e0 fa 29 54 8c 14 c9 94 1d 4c Data Ascii: gZ&3_/@Sqb"8}n_G*,!%Z;!LQU,U3UZ~]NSp+pcKH%,y# R3[)!cH:BQ_;({G,L%!CrR.S5d`!P\|X =ah`',UK9T\3ZNC`o)TL
2023-12-28 16:22:27 UTC	16384	IN	Data Raw: 4e a5 0b 53 72 ec 2b 24 99 e9 17 07 a5 6a b7 0d 64 a2 13 a9 38 f1 d3 d4 8f ee 39 3b 63 69 f9 e5 7b d3 b9 92 7b 54 3a 69 22 46 3e f3 d3 f0 3d 49 21 dc 06 c4 b8 96 82 c1 86 c8 e7 47 e1 42 60 e4 61 d5 99 e3 27 fe b7 38 81 fa 95 98 7e d3 e5 c4 88 72 8e 9f f1 05 bb 10 33 8d 24 9d f9 24 fd 22 71 44 99 c0 11 2e 20 75 c2 54 43 ee e5 97 23 62 3b e6 47 60 ed a5 ff 19 f8 08 d3 03 1e 7a 3e 2f 3d b5 23 62 b2 e3 8a 73 65 b6 9c 28 4d a1 13 dd 64 8a b5 14 5b 28 bc 4c 21 f5 b3 f8 f8 46 4d fb 36 87 bc 8f 2a f5 a4 22 75 ed c5 9f 8a db 87 6f 29 52 4f aa 48 89 4a 5d 6a 2a 05 a4 ae 53 a4 16 52 a4 d2 87 52 70 ad 97 8e 1f 98 22 52 54 a9 d7 a0 52 42 54 c8 fc ce 4f 55 ea 16 87 94 ad f4 62 e2 14 bd 5b 14 34 99 4a 01 2d 50 c5 1d 88 0e a5 55 6b a9 73 5a db 6d b5 1e 23 43 a5 a6 15 29 Data Ascii: NSr+$jd89;ci{{T:i"F>=I!GB`a'8~r3$$"qD. uTC#b;G`z>/=#bse(Md[(L!FM6"uo)ROHJ]jSRRp"RTRBTOUb[4J-PUksZm#C)
2023-12-28 16:22:27 UTC	16384	IN	Data Raw: 8c 14 2e 9c 40 0a 0d 7e 48 f9 58 a0 e8 20 79 e2 a4 8f e3 62 e0 64 1e b2 88 c3 e2 89 81 c2 1a 5e 5b 1d 25 85 94 5d a4 4c b3 6f a5 48 bd c4 44 a9 22 25 44 09 52 66 da 07 9e 68 b0 13 e5 a0 53 76 7d b2 af e9 fd 0b 8e 5f d7 1a 45 ca 49 a5 2c 52 fc 7e fe c4 21 5f 16 3d 8c 91 ba 4a 4a e1 a9 9a 44 be d8 9c 90 0e 74 0c 2a 4e 80 09 8f d4 8d 04 a0 b8 96 62 c7 6f 6a 66 06 93 bd 43 9a 15 de 7a fc a3 7f ba fb 55 de 20 3e e4 18 7d 3b 15 de 3f 18 d4 c2 4d 9d b9 58 a6 d8 40 48 15 0f d7 96 fa bc b9 42 53 08 0d 80 ae 60 83 8a 14 f7 1f a1 53 82 a9 e1 9b 8a 90 d1 f8 f7 5f a8 54 3f ab 94 29 51 26 4b b8 00 10 0e 46 49 f4 89 05 ca a9 8c ba fb 4e 6b 0d af 94 51 4c 94 18 e8 ca a7 79 a9 0f 89 89 22 a6 0c a2 3e 63 a2 54 91 b2 e6 78 55 91 7a f8 24 43 a1 f8 52 80 72 d0 29 12 a7 55 a8 Data Ascii: .@~HX ybd^[%]LoHD"%DRfhSv}_EI,R~!_=JJDt*NbojfCzU >};?MX@HBS`S_T?)Q&KFINkQLy">cTxUz$CRr)U
2023-12-28 16:22:27 UTC	5782	IN	Data Raw: a9 b3 eb c0 a7 ef 10 58 09 3c 21 4e f8 b7 68 25 e3 04 7b 68 c7 bc 49 0f 59 f8 61 a5 78 ab 15 a3 0e 6e a4 70 bd 64 1e c1 85 ea 1d a4 0d d7 bf 12 75 6c 7f 98 7b 2a e6 04 ce 60 7a c2 8d 95 d5 d7 4c 4d d9 70 63 f1 a0 93 86 b0 48 33 db a2 a2 7c 5a 15 97 32 5d 61 b5 10 8c 47 a1 a9 1d 25 7e 08 46 94 d1 db c2 8d 1a 23 47 a9 b8 db df 32 28 ad dd c0 cb 05 3d c2 ad f6 e5 25 dc 65 05 a7 95 69 63 1f 56 59 f5 6d 57 c8 a2 a9 cb 98 82 aa cd 2b 06 eb e5 45 9d 95 61 fd a7 5f f6 29 ae 6e d4 74 a9 d0 2c cb 94 8f f5 cb 07 86 11 2f 0d 62 73 d9 a8 3e 1a 0d 97 52 b6 cb 25 a5 39 4d 49 1d 3d 4d aa 9e f7 30 2b 29 42 57 5a ad 85 b6 57 c9 8a 06 54 5c 44 6d 6b 99 db 24 cd 54 f0 72 29 72 a8 45 ea 59 5c 02 a5 2c 56 75 09 35 eb 30 43 25 61 59 bd a2 15 55 c6 6b 4e a7 7a 65 0a 96 f5 c0 74 Data Ascii: X<!Nh%{hIYaxnpdul{*`zLMpcH3\|Z2]aG%~F#G2(=%eicVYmW+Ea_)nt,/bs>R%9MI=M0+)BWZWT\Dmk$Tr)rEY\,Vu50C%aYUkNzet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50120	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2094	OUT	GET /images/backgrounds/header/mf_logo_u1_full_color_reversed.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/svg+xml Content-Length: 4554 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-11ca" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11531 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2465cf5f6c08-DFW
2023-12-28 16:22:27 UTC	1036	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 39 34 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 34 20 34 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 37 66 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 74 69 74 6c 65 3e 6d 66 5f 6c 6f 67 6f 5f 75 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 20 69 64 3d 22 66 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42"> <defs> <style> .cls-1 { fill: #07f; } .cls-2 { fill: #fff; } </style> </defs> <title>mf_logo_u1</title> <g id="f
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 34 38 2d 37 2e 35 38 2c 31 32 2e 39 36 34 37 2d 39 2e 39 32 31 31 61 32 2e 31 36 33 36 2c 32 2e 31 36 33 36 2c 30 2c 30 2c 30 2d 31 2e 35 37 31 2d 33 2e 39 32 38 36 2c 37 2e 32 34 33 39 2c 37 2e 32 34 33 39 2c 30 2c 30 2c 30 2d 32 2e 39 32 2c 31 2e 34 36 30 37 63 2d 2e 33 31 38 38 2e 32 34 33 34 2d 2e 36 30 32 38 2e 34 35 38 36 2d 2e 38 35 37 31 2e 36 35 30 36 43 38 2e 38 31 36 34 2c 31 34 2e 34 32 33 39 2c 31 31 2e 39 30 31 2c 39 2e 32 35 37 31 2c 32 31 2e 39 30 38 35 2c 39 2e 32 35 37 31 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 66 6c 61 6d 65 5f 63 65 6e 74 65 72 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 66 6c 61 6d 65 20 63 65 6e 74 65 72 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 36 35 2e 31 36 32 2c 32 30 2e 33 35 30 38 Data Ascii: 48-7.58,12.9647-9.9211a2.1636,2.1636,0,0,0-1.571-3.9286,7.2439,7.2439,0,0,0-2.92,1.4607c-.3188.2434-.6028.4586-.8571.6506C8.8164,14.4239,11.901,9.2571,21.9085,9.2571Z"/> <path id="flame_center" data-name="flame center" class="cls-2" d="M65.162,20.3508
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 35 38 38 37 2c 34 2e 32 33 39 31 2d 34 2e 35 38 38 37 2c 37 2e 35 31 36 32 2c 30 2c 32 2e 30 35 33 39 2e 39 31 37 35 2c 33 2e 37 31 35 2c 33 2e 31 39 2c 33 2e 37 31 35 43 31 36 31 2e 39 37 33 2c 33 31 2e 37 39 32 2c 31 36 33 2e 31 30 39 34 2c 32 37 2e 34 36 35 34 2c 31 36 33 2e 31 30 39 34 2c 32 34 2e 37 35 36 31 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 37 37 2e 30 36 2c 31 34 2e 38 33 35 37 68 38 2e 36 35 32 36 6c 2d 34 2e 37 31 39 33 2c 32 32 2e 36 38 30 37 68 2d 38 2e 36 35 32 36 5a 6d 39 2e 31 33 33 36 2d 32 2e 34 34 37 33 68 2d 38 2e 36 35 32 36 6c 31 2e 32 36 37 2d 36 2e 30 37 34 37 68 38 2e 36 35 32 37 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 Data Ascii: 5887,4.2391-4.5887,7.5162,0,2.0539.9175,3.715,3.19,3.715C161.973,31.792,163.1094,27.4654,163.1094,24.7561Z"/> <path class="cls-2" d="M177.06,14.8357h8.6526l-4.7193,22.6807h-8.6526Zm9.1336-2.4473h-8.6526l1.267-6.0747h8.6527Z"/> <path class="cls
2023-12-28 16:22:27 UTC	780	IN	Data Raw: 31 2c 31 30 2e 31 2c 30 2c 30 2c 31 2c 32 2e 35 30 34 31 2e 33 31 31 36 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 39 38 2e 34 39 2c 31 34 2e 32 36 37 39 63 2d 35 2e 35 35 2c 30 2d 31 30 2e 32 32 36 31 2c 31 2e 33 39 38 33 2d 31 31 2e 35 38 30 38 2c 37 2e 34 32 38 35 68 38 2e 31 32 38 36 63 2e 34 38 2d 31 2e 37 30 34 32 2c 31 2e 37 30 34 32 2d 32 2e 33 31 35 38 2c 33 2e 34 35 32 32 2d 32 2e 33 31 35 38 2c 31 2e 33 31 30 39 2c 30 2c 32 2e 37 30 39 33 2e 33 39 33 34 2c 32 2e 37 30 39 33 2c 31 2e 39 36 36 32 2c 30 2c 32 2e 37 39 36 39 2d 33 2e 38 38 39 34 2c 32 2e 34 34 37 33 2d 36 2e 33 33 36 37 2c 32 2e 36 32 32 35 2d 36 2e 35 31 31 32 2e 34 38 31 2d 31 30 2e Data Ascii: 1,10.1,0,0,1,2.5041.3116Z"/> </g> <path class="cls-2" d="M198.49,14.2679c-5.55,0-10.2261,1.3983-11.5808,7.4285h8.1286c.48-1.7042,1.7042-2.3158,3.4522-2.3158,1.3109,0,2.7093.3934,2.7093,1.9662,0,2.7969-3.8894,2.4473-6.3367,2.6225-6.5112.481-10.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50119	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2316	OUT	GET /images/backgrounds/home_unicorn/techcrunch.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/svg+xml Content-Length: 2346 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-92a" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13155 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2465fbef4602-DFW
2023-12-28 16:22:27 UTC	1037	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 31 2e 31 39 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 31 2e 31 39 20 32 34 22 3e 3c 74 69 74 6c 65 3e 74 65 63 68 63 72 75 6e 63 68 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 36 35 2e 37 38 2c 39 2e 34 56 32 30 48 36 31 2e 39 56 39 2e 34 48 35 38 56 36 48 36 39 2e 37 56 39 2e 34 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 30 2e 38 31 20 2d 31 2e 30 32 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 38 2e 37 36 2c 31 35 2e 38 48 37 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="171.19" height="24" viewBox="0 0 171.19 24"><title>techcrunch</title><path d="M65.78,9.4V20H61.9V9.4H58V6H69.7V9.4Z" transform="translate(-0.81 -1.02)"/><path d="M78.76,15.8H7
2023-12-28 16:22:27 UTC	1309	IN	Data Raw: 34 2d 37 2e 32 32 2c 36 2e 34 2d 37 2e 32 32 2c 33 2e 34 34 2c 30 2c 34 2e 38 2c 31 2e 34 38 2c 35 2e 37 36 2c 34 2e 31 32 6c 2d 33 2e 35 32 2c 31 2e 33 38 63 2d 2e 35 2d 31 2e 33 2d 31 2d 32 2e 31 32 2d 32 2e 32 36 2d 32 2e 31 32 2d 31 2e 36 32 2c 30 2d 32 2e 33 32 2c 31 2e 36 32 2d 32 2e 33 32 2c 33 2e 38 34 73 2e 36 38 2c 33 2e 38 34 2c 32 2e 33 36 2c 33 2e 38 34 63 31 2e 32 32 2c 30 2c 31 2e 37 34 2d 2e 36 36 2c 32 2e 35 2d 32 6c 33 2e 32 38 2c 31 2e 37 34 41 36 2c 36 2c 30 2c 30 2c 31 2c 31 31 30 2c 32 30 2e 32 34 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 30 2e 38 31 20 2d 31 2e 30 32 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 34 2e 36 36 2c 31 33 2e 34 38 41 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 30 2c 31 32 Data Ascii: 4-7.22,6.4-7.22,3.44,0,4.8,1.48,5.76,4.12l-3.52,1.38c-.5-1.3-1-2.12-2.26-2.12-1.62,0-2.32,1.62-2.32,3.84s.68,3.84,2.36,3.84c1.22,0,1.74-.66,2.5-2l3.28,1.74A6,6,0,0,1,110,20.24Z" transform="translate(-0.81 -1.02)"/><path d="M124.66,13.48A2.27,2.27,0,0,0,12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50122	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2085	OUT	GET /images/backgrounds/header/mf_logo_u1_full_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/svg+xml Content-Length: 4636 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-121c" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 9911 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24660fbe45ef-DFW
2023-12-28 16:22:27 UTC	1037	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 39 34 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 39 34 20 34 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 37 66 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 33 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 65 32 38 36 36 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 34 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="294" height="42" viewBox="0 0 294 42"> <defs> <style> .cls-1 { fill: #07f; } .cls-2 { fill: #fff; } .cls-3 { fill: #0e2866; } .cls-4
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 30 36 34 35 2c 31 35 2e 30 36 34 35 2c 30 2c 30 2c 30 2c 33 2e 31 31 36 2c 32 33 2e 39 33 35 37 61 35 2e 36 36 37 2c 35 2e 36 36 37 2c 30 2c 30 2c 30 2d 31 2e 38 33 32 31 2c 32 2e 32 32 36 36 63 33 2e 30 38 33 39 2d 38 2e 35 33 39 31 2c 39 2e 32 30 34 38 2d 37 2e 35 38 2c 31 32 2e 39 36 34 37 2d 39 2e 39 32 31 31 61 32 2e 31 36 33 36 2c 32 2e 31 36 33 36 2c 30 2c 30 2c 30 2d 31 2e 35 37 31 2d 33 2e 39 32 38 36 2c 37 2e 32 34 33 39 2c 37 2e 32 34 33 39 2c 30 2c 30 2c 30 2d 32 2e 39 32 2c 31 2e 34 36 30 37 63 2d 2e 33 31 38 38 2e 32 34 33 34 2d 2e 36 30 32 37 2e 34 35 38 36 2d 2e 38 35 37 31 2e 36 35 30 36 43 38 2e 39 2c 31 34 2e 34 32 33 39 2c 31 31 2e 39 38 34 39 2c 39 2e 32 35 37 31 2c 32 31 2e 39 39 32 34 2c 39 2e 32 35 37 31 5a 22 2f 3e 0a 20 20 20 20 Data Ascii: 0645,15.0645,0,0,0,3.116,23.9357a5.667,5.667,0,0,0-1.8321,2.2266c3.0839-8.5391,9.2048-7.58,12.9647-9.9211a2.1636,2.1636,0,0,0-1.571-3.9286,7.2439,7.2439,0,0,0-2.92,1.4607c-.3188.2434-.6027.4586-.8571.6506C8.9,14.4239,11.9849,9.2571,21.9924,9.2571Z"/>
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 39 2c 33 37 2e 35 31 36 34 68 2d 38 2e 34 37 38 32 5a 6d 31 2e 31 36 33 31 2d 31 30 2e 31 38 32 34 63 30 2d 32 2e 35 33 34 39 2d 2e 38 37 33 36 2d 34 2e 31 39 35 33 2d 33 2e 31 30 32 37 2d 34 2e 31 39 35 33 2d 33 2e 34 35 32 33 2c 30 2d 34 2e 35 38 38 37 2c 34 2e 32 33 39 31 2d 34 2e 35 38 38 37 2c 37 2e 35 31 36 32 2c 30 2c 32 2e 30 35 33 39 2e 39 31 37 35 2c 33 2e 37 31 35 2c 33 2e 31 39 2c 33 2e 37 31 35 43 31 36 31 2e 39 37 33 2c 33 31 2e 37 39 32 2c 31 36 33 2e 31 30 39 34 2c 32 37 2e 34 36 35 34 2c 31 36 33 2e 31 30 39 34 2c 32 34 2e 37 35 36 31 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 22 20 64 3d 22 4d 31 37 37 2e 30 36 2c 31 34 2e 38 33 35 37 68 38 2e 36 35 32 36 6c 2d 34 2e 37 31 39 33 2c 32 32 2e 36 Data Ascii: 9,37.5164h-8.4782Zm1.1631-10.1824c0-2.5349-.8736-4.1953-3.1027-4.1953-3.4523,0-4.5887,4.2391-4.5887,7.5162,0,2.0539.9175,3.715,3.19,3.715C161.973,31.792,163.1094,27.4654,163.1094,24.7561Z"/> <path class="cls-3" d="M177.06,14.8357h8.6526l-4.7193,22.6
2023-12-28 16:22:27 UTC	861	IN	Data Raw: 32 32 2e 36 38 30 37 48 32 35 34 2e 38 33 6c 32 2e 32 32 38 2d 31 30 2e 35 36 34 38 63 31 2e 30 34 38 36 2d 33 2e 39 30 31 35 2c 32 2e 38 36 30 39 2d 35 2e 32 34 33 32 2c 36 2e 32 31 2d 35 2e 32 35 34 6c 2e 30 34 2d 2e 30 30 31 32 61 31 30 2e 31 2c 31 30 2e 31 2c 30 2c 30 2c 31 2c 32 2e 35 30 34 31 2e 33 31 31 36 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 33 22 20 64 3d 22 4d 31 39 38 2e 34 39 2c 31 34 2e 32 36 37 39 63 2d 35 2e 35 35 2c 30 2d 31 30 2e 32 32 36 31 2c 31 2e 33 39 38 33 2d 31 31 2e 35 38 30 38 2c 37 2e 34 32 38 35 68 38 2e 31 32 38 36 63 2e 34 38 2d 31 2e 37 30 34 32 2c 31 2e 37 30 34 32 2d 32 2e 33 31 35 38 2c 33 2e 34 35 32 32 2d 32 2e 33 31 35 38 2c 31 2e 33 31 30 Data Ascii: 22.6807H254.83l2.228-10.5648c1.0486-3.9015,2.8609-5.2432,6.21-5.254l.04-.0012a10.1,10.1,0,0,1,2.5041.3116Z"/> </g> <path class="cls-3" d="M198.49,14.2679c-5.55,0-10.2261,1.3983-11.5808,7.4285h8.1286c.48-1.7042,1.7042-2.3158,3.4522-2.3158,1.310

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50121	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2314	OUT	GET /images/backgrounds/home_unicorn/engadget.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0
2023-12-28 16:22:27 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/svg+xml Content-Length: 1671 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-687" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 3393 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24662aca468f-DFW
2023-12-28 16:22:27 UTC	1038	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 73 76 67 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 35 33 34 2e 33 39 22 20 68 65 69 67 68 74 3d 22 33 33 33 2e 31 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 33 34 2e 33 39 20 33 33 33 2e 31 33 22 3e 3c 74 69 74 6c 65 3e 65 6e 67 61 64 67 65 74 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 67 31 30 22 3e 3c 67 20 69 64 3d 22 67 31 32 22 3e 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 31 34 22 20 64 3d 22 4d 30 2c 32 34 33 2e 34 39 63 30 2c 31 36 2e 31 35 2c 31 33 2e 31 33 2c 32 39 2e 32 38 2c 33 30 2e 32 39 2c 32 39 2e 32 38 48 31 35 31 2e 34 32 56 32 34 32 2e 34 38 48 33 30 2e 32 39 56 32 31 32 2e 32 48 31 34 39 2e 34 63 31 36 Data Ascii: <svg id="svg2" xmlns="http://www.w3.org/2000/svg" width="1534.39" height="333.13" viewBox="0 0 1534.39 333.13"><title>engadget</title><g id="g10"><g id="g12"><path id="path14" d="M0,243.49c0,16.15,13.13,29.28,30.29,29.28H151.42V242.48H30.29V212.2H149.4c16
2023-12-28 16:22:27 UTC	633	IN	Data Raw: 31 32 31 2e 33 35 68 39 30 2e 38 35 56 39 31 2e 30 36 68 2d 39 30 2e 38 35 6d 2d 34 32 34 2c 31 35 32 2e 34 33 63 30 2c 31 36 2e 31 35 2c 39 2e 30 38 2c 32 39 2e 32 38 2c 32 35 2e 32 34 2c 32 39 2e 32 38 68 31 31 36 2e 30 39 56 33 30 33 68 2d 31 31 31 76 33 30 2e 32 39 68 31 31 35 2e 30 38 63 31 36 2e 31 35 2c 30 2c 32 36 2e 32 35 2d 31 34 2e 31 34 2c 32 36 2e 32 35 2d 33 31 2e 33 56 31 32 33 2e 33 37 63 30 2d 31 36 2e 31 35 2d 31 30 2e 30 39 2d 33 32 2e 33 2d 32 36 2e 32 35 2d 33 32 2e 33 48 31 30 34 34 2e 38 63 2d 31 36 2e 31 36 2c 30 2d 32 35 2e 32 34 2c 31 36 2e 31 35 2d 32 35 2e 32 34 2c 33 32 2e 33 5a 6d 31 34 31 2e 33 33 2d 31 68 2d 31 31 31 56 31 32 31 2e 33 35 68 31 31 31 5a 4d 39 35 39 2c 39 31 2e 30 36 48 38 34 31 2e 38 39 63 2d 31 36 2e 31 35 Data Ascii: 121.35h90.85V91.06h-90.85m-424,152.43c0,16.15,9.08,29.28,25.24,29.28h116.09V303h-111v30.29h115.08c16.15,0,26.25-14.14,26.25-31.3V123.37c0-16.15-10.09-32.3-26.25-32.3H1044.8c-16.16,0-25.24,16.15-25.24,32.3Zm141.33-1h-111V121.35h111ZM959,91.06H841.89c-16.15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50129	18.160.41.58	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	542	OUT	GET /c/hotjar-1232118.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:27 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 28 Dec 2023 16:22:27 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/9038f5587328682fd32c84478bf470b5 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a770e75e0ebdb44f23f7a7ef20bbbffa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P1 X-Amz-Cf-Id: 9ERg2NGnG-OwIIVAJ4L1nh06qkX9x9F9VRnykjM2kVn8SUWqdmJMBQ==
2023-12-28 16:22:27 UTC	8875	IN	Data Raw: 32 32 61 33 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 32 33 32 31 31 38 2c 22 72 22 3a 30 2e 34 37 30 33 35 33 31 35 36 36 34 31 33 35 33 35 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 Data Ascii: 22a3window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1232118,"r":0.4703531566413535,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_c
2023-12-28 16:22:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50130	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	881	OUT	GET /lp/global/img/start_menu_w10_dark_theme.png HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
2023-12-28 16:22:28 UTC	358	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/png Content-Length: 97578 Connection: close Last-Modified: Mon, 08 May 2023 14:44:21 GMT ETag: "64590ac5-17d2a" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:28 UTC	16026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 db 00 00 01 ca 08 03 00 00 00 e5 cc 77 39 00 00 03 00 50 4c 54 45 ff ff ff 26 2d 38 18 22 2d 1c 25 2f 21 2a 34 1f 27 31 29 31 3a 18 20 2a 16 20 2b 25 2b 34 2c 34 3d 31 37 40 00 0f 2c 15 1e 28 00 00 03 ff 1f 13 34 3c 44 00 58 ff 00 12 32 00 60 ff 00 15 38 51 66 f7 00 0b 1c 00 20 48 00 6a ff 25 34 4e 00 73 ff 18 1e 24 d8 2c 22 00 4f ff 00 0d 22 10 1e 2f 00 18 3e 3c 42 4a 01 1b 43 00 47 ff 00 02 12 00 1c 55 39 3e 47 20 2b 3a 26 2a 30 00 3e ff 00 7b ff 00 1d 4e 0c 14 1d 00 22 51 00 00 20 00 22 42 00 00 2f 05 16 25 0d 1a 28 00 35 fe 00 04 66 00 84 ff 00 07 71 00 7c dc 00 01 3d 20 20 20 16 24 32 29 34 41 00 01 49 24 30 3e 1a 28 38 00 05 7b 00 2a b7 00 8c ff 00 04 5d 00 02 54 41 46 4c 00 2f f8 0c 19 4b 01 Data Ascii: PNGIHDRw9PLTE&-8"-%/!4'1)1: +%+4,4=17@,(4<DX2`8Qf Hj%4Ns$,"O"/><BJCGU9>G +:&0>{N"Q "B/%(5fq\|= $2)4AI$0>(8{]TAFL/K
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: f5 7a bf 09 ea 09 b5 ed b4 0b 36 be 31 57 da 35 11 5e 2e 8a f9 72 59 de a8 a2 79 d0 94 0f 60 4f e4 b1 fb df d4 6d 77 5b 46 a7 a1 be 9c af e2 d0 e7 d7 36 6a 74 b2 b3 da af 69 d6 91 74 a2 1f d0 90 8f 3e dd 9c 32 97 ed 11 c5 76 60 79 1d 36 da 43 53 7f 32 84 0c 4e 3c e0 b2 3a b3 ec 8a 35 a3 ae 91 ed 9f f9 85 ed cc 73 9a 68 4f 6e a7 92 ab 40 5b 8a ee b8 98 f6 c9 46 30 d9 58 94 64 75 23 3a 45 75 f7 b9 a5 cb 4b 6b 24 d8 94 25 71 05 db 83 fa 75 95 ff 43 02 50 e2 0e fa a5 38 bf ed c2 2c 33 23 dd 93 17 24 d2 8c b3 10 8e f0 73 80 7f 3e 17 17 dd c6 fb 23 fb c7 c7 47 81 e9 f8 f8 fe 91 d9 91 b1 10 ae 46 51 ce 41 3a 70 df 81 d9 43 83 5a 5b 71 dc 4b b6 f5 1c a0 02 3b e8 49 ca 45 c3 72 ba 76 b3 5b 71 12 f9 c3 25 a3 88 6e d4 a2 5d df 59 ef 1a f5 bc 51 6a 37 3b 4e b5 d4 04 Data Ascii: z61W5^.rYy`Omw[F6jtit>2v`y6CS2N<:5shOn@[F0Xdu#:EuKk$%quCP8,3#$s>#GFQA:pCZ[qK;IErv[q%n]YQj7;N
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 75 53 05 ea db e0 db 54 51 3e 17 17 8f 7a de ed e4 6a 69 c5 60 d6 e4 95 1d 25 52 46 71 8f c7 80 1b 74 e3 24 ec 14 92 07 2e 43 37 6a 48 6e 34 68 4b 43 5a c6 ba 99 47 48 37 79 c6 c1 d2 2d ce 55 b6 45 f5 6c 83 33 c9 aa 24 08 fb 38 4c 2a dd 78 2c 70 ef 9e e3 50 0b be 02 5c 2c 6c cc 0e 00 b9 22 36 2c 2e 11 eb da 7a 42 38 25 fb 1e d3 14 5a 16 d4 94 fb f6 68 83 ed da 35 4b 9c ac 5c d5 c1 9d 17 b8 57 aa 4f 00 ee dd 46 74 f0 39 e1 7b 5c a2 c9 d8 7a c1 fb d7 5b bc f1 46 e9 24 79 e3 31 fa 36 a5 7d da 8e d4 b8 23 16 e7 0c 24 2e e2 9d 9d 07 0f 82 55 c2 dd 1c 6f 8d 21 6c b5 18 89 a4 69 d3 ae d9 0d e8 06 6f b8 34 0a 94 c4 9a 45 4f 77 73 d7 36 62 85 07 6d a5 f9 da 34 db 4b c7 59 e8 d7 bc 97 8b 6d a6 10 a7 77 3b 86 58 62 19 b6 f6 7c a3 02 f6 75 21 5b 3d dd 75 f0 c0 76 21 Data Ascii: uSTQ>zji`%RFqt$.C7jHn4hKCZGH7y-UEl3$8L*x,pP\,l"6,.zB8%Zh5K\WOFt9{\z[F$y16}#$.Uo!lio4EOws6bm4KYmw;Xb\|u![=uv!
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 3f 7b cf c0 97 19 e3 b7 89 b6 35 75 e3 b2 8d dd 91 11 7c 81 b7 96 dc fc 4c b3 ab da 2d 0b 89 50 e8 f5 ed b4 da e0 98 01 3f 92 bd 95 dd f6 23 c4 9a 68 3f b4 77 bc c9 b0 ad b3 92 56 5a 84 58 6b f0 2b 45 7c e7 3b 6f 64 c5 3b 17 f1 c7 ee 4c 64 61 81 23 d6 05 85 01 63 d4 5d 9d 26 cc 3c a4 61 df 17 96 33 d1 ef 09 b3 34 f4 db 1c 4a 2a db 08 80 8d a0 35 e1 ac ba 59 c7 ea 50 7b ce 67 47 1d f5 e4 6d d7 e1 cb 43 fb f7 3f a1 96 44 7d 8c a3 db 52 eb 72 35 4f a2 9b dc f9 50 c9 ce ad db 67 89 df 3e 2b 07 db 9c 9c f4 c3 fd 05 ca 16 9f f9 07 dc f6 f7 2a db 3e bf 6d ed 29 43 fd 56 09 8a 76 44 3e 96 d9 ce 85 b6 66 b6 d5 6b 13 6d db 91 20 8c 66 d3 90 98 75 51 5b 27 b6 fc c0 1d 33 1e c2 9b 36 cd 3e 6a b3 4d d9 56 dd 96 bf 2f de 8c e7 50 ed 67 9e 99 69 ae d9 24 68 0f 08 da 55 Data Ascii: ?{5u\|L-P?#h?wVZXk+E\|;od;Lda#c]&<a34J5YP{gGmC?D}Rr5OPg>+>m)CVvD>fkm fuQ['36>jMV/Pgi$hU
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 1b 68 73 08 db 0c 36 54 fb 3e 1c 89 d8 6d b8 6a 82 9b 6c 09 e9 f3 d5 6b 17 5d fe 99 6f 17 6e 61 7b 40 79 92 81 9e c1 07 23 1d 34 a6 38 70 e5 c8 be d8 67 c3 9d 8c 76 2b a3 3d 3c 33 7a 41 b1 8d ce 24 84 1b 9d 49 7a 83 f6 3b 33 8f da 79 d2 c8 f0 f4 d9 03 0f 29 05 78 a0 71 ea 01 61 0a b6 59 b2 fd 68 03 6c a6 1e 6d 47 b6 1d b2 7d 68 97 c8 76 17 d0 56 6c cf d9 40 35 a8 ef 1d cf a1 4f e1 13 e4 71 a1 af 59 b3 a9 62 be a2 62 25 f1 aa 68 46 f0 2d ee 4b 2e 36 19 45 5a 7a 9b 2e 86 e6 b3 4d 73 73 76 c6 de 4c 2e 14 33 85 66 bb 74 89 58 77 a9 3f d1 b0 f6 cf 67 d5 da dd 4c 36 d6 4b 7a 46 23 68 84 e8 ff 2b 4c db 8a 04 4e d8 76 c0 a4 ec 8c 15 ad 8e 58 76 00 12 cd 4c 73 a9 5a c4 ba 0c a6 cb 49 77 5c bb 0d 88 f1 1c 05 52 e5 e0 f5 3f 87 30 2e 73 49 64 0c 3e ba b3 df d6 44 db Data Ascii: hs6T>mjlk]ona{@y#48pgv+=<3zA$Iz;3y)xqaYhlmG}hvVl@5OqYbb%hF-K.6EZz.MssvL.3ftXw?gL6KzF#h+LNvXvLsZIw\R?0.sId>D
2023-12-28 16:22:28 UTC	16016	IN	Data Raw: 99 e7 de bc de d3 da fd 3c e2 2f 97 45 63 9d 8e 54 cd 6f cf a4 32 db 31 7e 7b 54 59 c6 35 bc 05 a6 a5 03 6c bf fa e8 b3 57 a8 f1 bc 5c bb 31 63 bb ec d4 a9 6f de fd 10 bf bb fe d0 dd df 3c 75 b8 cc 3c c3 6d 9e 27 91 f3 46 b9 a9 cc b0 96 f3 13 53 dd 06 dc f4 d0 d9 46 10 dd aa 23 89 d6 6d 5e 9a 4c 24 e2 88 ed 49 9a 4c 1e 5c f8 b8 3d b4 bb 79 35 b6 9b 89 6d 1f 19 6e b0 4d 30 3b 2a 0f 92 e5 4e 46 8a a2 b1 aa b1 11 09 ef a1 21 ec c9 c1 c9 bf ea 6c 92 85 3b 20 da 90 08 b6 1b 26 d9 94 a4 f9 b2 73 05 dc 79 80 db d7 e2 c0 3e 77 29 dd ac dd 7a de 64 91 9e 38 b4 cf be 30 bf b8 d8 d3 43 df 47 5d 6c a4 31 19 0b 46 8d f9 35 39 82 75 44 06 02 1e 9c 6a 0c db 96 1a 1c 08 3a 17 58 ce 16 cd 1a a3 c5 5b 54 b2 e9 a9 de a2 71 92 cb 15 4c 22 25 17 41 f8 72 99 9e e4 50 63 59 c2 Data Ascii: </EcTo21~{TY5lW\1co<u<m'FSF#m^L$IL\=y5mnM0;*NF!l; &sy>w)zd80CG]l1F59uDj:X[TqL"%ArPcY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50126	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2514	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojn6j8.0.1.1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; _ga=GA1.1.1411026819.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780544.39.0.0 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:22:27 UTC	416	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:22:27 GMT Connection: close CF-Ray: 83cb24674bf90c0b-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 607883 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:22:27 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50124	34.218.121.115	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	636	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1065 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:27 UTC	1065	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 36 64 66 30 63 39 37 38 35 35 36 37 63 30 35 38 38 30 38 65 35 61 35 33 30 38 65 64 36 37 30 64 26 63 6c 69 65 6e 74 3d 32 38 39 31 36 62 36 63 64 36 30 63 37 39 63 30 34 34 37 62 33 63 32 33 61 64 36 39 38 63 39 38 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 59 73 30 72 52 68 43 6a 43 2d 72 68 55 70 6d 46 69 69 62 37 73 73 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 30 33 37 38 30 35 34 36 34 36 36 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 30 33 37 38 30 35 32 32 35 39 39 25 32 43 25 32 32 Data Ascii: checksum=6df0c9785567c058808e5a5308ed670d&client=28916b6cd60c79c0447b3c23ad698c98&e=%5B%7B%22device_id%22%3A%22Ys0rRhCjC-rhUpmFiib7ss%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1703780546466%2C%22event_id%22%3A2%2C%22session_id%22%3A1703780522599%2C%22
2023-12-28 16:22:28 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0c3-06528b7c3e3496113001e343 Strict-Transport-Security: max-age=15768000
2023-12-28 16:22:28 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50131	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2308	OUT	GET /images/icons/svg_dark/icons_sprite.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:27 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/svg+xml Content-Length: 37035 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-90ab" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1835 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2467bb5ee5b5-DFW
2023-12-28 16:22:27 UTC	1036	IN	Data Raw: 3c 73 76 67 0a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0a 77 69 64 74 68 3d 22 31 36 35 36 22 0a 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 44 65 66 69 6e 65 20 53 56 47 73 20 2d 2d 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 65 61 72 63 68 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 65 61 72 63 68 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a Data Ascii: <svgxmlns="http://www.w3.org/2000/svg"xmlns:xlink="http://www.w3.org/1999/xlink"width="1656"height="24"> ... Define SVGs --> <defs> ... search --> <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 2d 2d 20 6c 69 73 74 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6c 69 73 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 34 22 20 79 3d 22 35 22 20 77 69 64 74 68 3d 22 33 22 20 68 65 69 67 68 74 3d 22 33 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 34 22 20 79 3d 22 31 30 22 20 77 69 64 74 68 3d 22 33 22 20 68 65 69 67 68 74 3d 22 33 22 2f 3e 0a 20 20 20 Data Ascii: -- list --> <symbol id="list" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <rect x="4" y="5" width="3" height="3"/> <rect x="4" y="10" width="3" height="3"/>
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 35 2c 30 2c 31 2c 30 2c 31 32 2c 33 2e 37 5a 4d 38 2e 38 39 31 2c 31 37 2e 35 33 33 61 2e 35 39 33 2e 35 39 33 2c 30 2c 30 2c 31 2d 2e 38 38 32 2e 32 32 32 41 37 2e 30 31 39 2c 37 2e 30 31 39 2c 30 2c 30 2c 31 2c 35 2c 31 32 61 36 2e 39 2c 36 2e 39 2c 30 2c 30 2c 31 2c 2e 31 39 32 2d 31 2e 36 32 39 2e 35 39 31 2e 35 39 31 2c 30 2c 30 2c 31 2c 2e 39 37 39 2d 2e 32 38 36 4c 37 2e 34 31 2c 31 31 2e 32 35 37 61 2e 35 38 38 2e 35 38 38 2c 30 2c 30 2c 30 2c 2e 32 38 31 2e 31 34 37 6c 31 2e 37 38 33 2e 33 37 39 61 31 2e 31 37 31 2c 31 2e 31 37 31 2c 30 2c 30 2c 31 2c 2e 39 31 33 2e 39 36 6c 2e 31 36 34 2c 31 2e 30 32 38 61 2e 35 38 37 2e 35 38 37 2c 30 2c 30 2c 31 2d 2e 30 34 38 2e 33 34 33 5a 6d 37 2e 39 32 31 2d 31 2e 35 30 35 2d 31 2e 36 37 37 2d 31 2e 39 37 Data Ascii: 5,0,1,0,12,3.7ZM8.891,17.533a.593.593,0,0,1-.882.222A7.019,7.019,0,0,1,5,12a6.9,6.9,0,0,1,.192-1.629.591.591,0,0,1,.979-.286L7.41,11.257a.588.588,0,0,0,.281.147l1.783.379a1.171,1.171,0,0,1,.913.96l.164,1.028a.587.587,0,0,1-.048.343Zm7.921-1.505-1.677-1.97
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 63 74 20 78 3d 22 35 2e 30 30 38 22 20 79 3d 22 31 36 2e 30 30 35 22 20 77 69 64 74 68 3d 22 31 32 2e 39 39 32 22 20 68 65 69 67 68 74 3d 22 32 2e 39 39 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 31 2e 35 20 31 35 2e 30 30 39 20 31 38 20 38 20 31 32 2e 39 38 36 20 38 20 31 32 2e 39 38 36 20 34 2e 30 33 32 20 31 30 20 34 2e 30 33 32 20 31 30 20 38 20 35 20 38 20 31 31 2e 35 20 31 35 2e 30 30 39 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 68 61 72 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 68 61 72 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 Data Ascii: ct x="5.008" y="16.005" width="12.992" height="2.995"/> <polygon points="11.5 15.009 18 8 12.986 8 12.986 4.032 10 4.032 10 8 5 8 11.5 15.009"/> </symbol> ... share --> <symbol id="share" viewBox="0 0 24 24" preserveA
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 38 2e 36 35 2c 31 37 2e 30 33 6c 2d 33 2e 36 37 2d 33 2e 36 38 41 35 2e 39 34 32 2c 35 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 36 2c 31 30 61 36 2c 36 2c 30 2c 31 2c 30 2d 36 2c 36 2c 35 2e 39 2c 35 2e 39 2c 30 2c 30 2c 30 2c 32 2e 37 32 2d 2e 36 35 6c 33 2e 38 31 2c 33 2e 38 61 2e 39 34 32 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 2e 33 32 2c 30 6c 2e 38 2d 2e 38 41 2e 39 34 32 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 38 2e 36 35 2c 31 37 2e 30 33 5a 6d 2d 36 2e 39 39 2d 32 2e 37 34 41 34 2e 35 33 37 2c 34 2e 35 33 37 2c 30 2c 30 2c 31 2c 31 30 2c 31 34 2e 36 2c 34 2e 36 2c 34 2e 36 2c 30 2c 31 2c 31 2c 31 Data Ascii: d="M0 0h24v24H0z" fill="none"/> <path d="M18.65,17.03l-3.67-3.68A5.942,5.942,0,0,0,16,10a6,6,0,1,0-6,6,5.9,5.9,0,0,0,2.72-.65l3.81,3.8a.942.942,0,0,0,1.32,0l.8-.8A.942.942,0,0,0,18.65,17.03Zm-6.99-2.74A4.537,4.537,0,0,1,10,14.6,4.6,4.6,0,1,1,1
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 38 20 35 20 31 31 20 35 20 31 37 20 31 31 20 31 37 2e 35 20 31 31 2e 35 20 31 37 20 31 32 20 31 31 20 31 38 20 38 20 31 38 20 31 34 2e 35 20 31 31 2e 35 20 38 20 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 6d 61 6c 6c 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 6d 61 6c 6c 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 Data Ascii: "/> <polygon points="8 5 11 5 17 11 17.5 11.5 17 12 11 18 8 18 14.5 11.5 8 5"/> </symbol> ... small --> <symbol id="small" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" f
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 31 37 2e 37 31 31 48 38 2e 30 35 39 56 31 32 2e 34 71 30 2d 2e 39 31 33 2d 2e 31 34 39 2d 33 2e 36 34 38 68 2e 30 37 6c 32 2e 37 35 2c 38 2e 39 36 31 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 6c 61 72 67 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6c 61 72 67 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 Data Ascii: 17.711H8.059V12.4q0-.913-.149-3.648h.07l2.75,8.961Z"/> </symbol> ... large --> <symbol id="large" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <path d="M15
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2c 35 56 31 38 48 32 30 56 35 5a 4d 36 2c 37 48 31 38 76 35 6c 2d 33 2c 33 2d 33 2d 33 4c 38 2c 31 36 48 36 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 39 22 20 63 79 3d 22 31 30 22 20 72 3d 22 31 2e 36 38 37 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 6d 65 6e 75 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6d 65 6e 75 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 Data Ascii: fill="none"/> <path d="M4,5V18H20V5ZM6,7H18v5l-3,3-3-3L8,16H6Z"/> <circle cx="9" cy="10" r="1.687"/> </symbol> ... menu --> <symbol id="menu" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 31 2c 31 33 2e 35 63 30 2d 31 2e 39 33 2c 32 2e 30 31 2d 33 2e 35 2c 34 2e 35 2d 33 2e 35 53 32 30 2c 31 31 2e 35 37 2c 32 30 2c 31 33 2e 35 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 62 6f 6f 6b 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 62 6f 6f 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2c 31 38 61 34 Data Ascii: 1,13.5c0-1.93,2.01-3.5,4.5-3.5S20,11.57,20,13.5Z"/> </symbol> ... book --> <symbol id="book" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <path d="M12,18a4
2023-12-28 16:22:27 UTC	1369	IN	Data Raw: 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 34 2e 39 39 34 20 31 31 2e 35 20 31 30 20 36 2e 39 39 35 20 31 30 20 31 30 20 31 36 2e 30 30 31 20 31 30 20 31 36 2e 30 30 31 20 34 20 31 39 20 34 20 31 39 20 31 39 20 31 36 2e 30 30 31 20 31 39 20 31 36 2e 30 30 31 20 31 33 20 31 30 20 31 33 20 31 30 20 31 36 2e 30 30 35 20 34 2e 39 39 34 20 31 31 2e 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 66 69 6c 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 66 69 6c 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 Data Ascii: <path d="M0 0h24v24H0z" fill="none"/> <polygon points="4.994 11.5 10 6.995 10 10 16.001 10 16.001 4 19 4 19 19 16.001 19 16.001 13 10 13 10 16.005 4.994 11.5"/> </symbol> ... file --> <symbol id="file" viewBox="0 0 24

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50132	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2080	OUT	GET /images/backgrounds/home_unicorn/lifehacker.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:27 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/svg+xml Content-Length: 2393 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-959" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 14145 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2467b9f6eaf2-DFW
2023-12-28 16:22:27 UTC	1037	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 5f 6f 67 6f 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 3b 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 39 36 2e 33 39 22 20 68 65 69 67 68 74 3d 22 31 34 38 2e 34 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 39 36 2e 33 39 20 31 34 38 2e 34 39 22 3e 3c 74 69 74 6c 65 3e 6c 69 66 65 68 61 63 6b 65 72 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 32 36 2e 32 39 2c 31 34 38 48 33 2e 34 32 56 32 2e 36 34 4c 32 36 2e 32 39 2c 34 2e 31 31 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 2e 34 32 20 2d 31 2e 31 36 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 32 2e 33 2c 31 32 2e 37 38 61 31 33 2e 31 Data Ascii: <svg id="_ogo" data-name=";ogo" xmlns="http://www.w3.org/2000/svg" width="596.39" height="148.49" viewBox="0 0 596.39 148.49"><title>lifehacker</title><path d="M26.29,148H3.42V2.64L26.29,4.11Z" transform="translate(-3.42 -1.16)"/><path d="M52.3,12.78a13.1
2023-12-28 16:22:27 UTC	1356	IN	Data Raw: 33 2e 34 37 63 30 2d 38 2e 33 2d 33 2e 38 37 2d 31 34 2e 39 34 2d 31 34 2e 33 39 2d 31 33 2e 38 33 68 2e 31 38 63 2d 35 2e 39 2e 31 38 2d 31 33 2e 34 37 2e 39 32 2d 31 39 2e 37 34 2c 31 2e 32 39 2d 2e 31 38 2d 35 2e 33 35 2d 2e 33 37 2d 37 2e 33 38 2d 2e 35 35 2d 31 31 2e 34 34 61 36 32 2e 39 34 2c 36 32 2e 39 34 2c 30 2c 30 2c 31 2c 31 38 2e 32 36 2d 33 2e 38 37 43 33 32 33 2e 38 31 2c 34 35 2e 32 35 2c 33 33 36 2c 36 30 2e 31 39 2c 33 33 36 2c 37 36 2e 32 34 76 34 33 2e 39 61 32 38 2e 38 31 2c 32 38 2e 38 31 2c 30 2c 30 2c 31 2d 32 38 2e 35 39 2c 32 39 2c 32 39 2e 31 33 2c 32 39 2e 31 33 2c 30 2c 30 2c 31 2d 32 39 2d 32 39 76 2d 39 63 30 2d 31 35 2e 38 36 2c 31 30 2e 38 38 2d 32 37 2e 38 35 2c 32 39 2d 32 37 2e 38 35 61 34 35 2e 36 32 2c 34 35 2e 36 32 Data Ascii: 3.47c0-8.3-3.87-14.94-14.39-13.83h.18c-5.9.18-13.47.92-19.74,1.29-.18-5.35-.37-7.38-.55-11.44a62.94,62.94,0,0,1,18.26-3.87C323.81,45.25,336,60.19,336,76.24v43.9a28.81,28.81,0,0,1-28.59,29,29.13,29.13,0,0,1-29-29v-9c0-15.86,10.88-27.85,29-27.85a45.62,45.62

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50134	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2077	OUT	GET /images/backgrounds/home_unicorn/gizmodo.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:27 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/svg+xml Content-Length: 2119 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-847" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6862 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2467b9124678-DFW
2023-12-28 16:22:27 UTC	1038	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 34 32 2e 30 31 22 20 68 65 69 67 68 74 3d 22 34 39 2e 30 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 32 2e 30 31 20 34 39 2e 30 38 22 3e 3c 74 69 74 6c 65 3e 67 69 7a 6d 6f 64 6f 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 35 36 2c 34 33 2e 32 32 56 35 2e 38 32 61 36 2e 33 2c 36 2e 33 2c 30 2c 30 2c 31 2c 31 2e 33 33 2d 34 2e 33 37 41 34 2e 34 33 2c 34 2e 34 33 2c 30 2c 30 2c 31 2c 36 30 2e 38 31 2c 30 61 34 2e 35 39 2c 34 2e 35 39 2c 30 2c 30 2c 31 2c 33 2e 35 32 2c 31 2e 34 34 2c 36 2e 32 33 2c Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="342.01" height="49.08" viewBox="0 0 342.01 49.08"><title>gizmodo</title><path d="M56,43.22V5.82a6.3,6.3,0,0,1,1.33-4.37A4.43,4.43,0,0,1,60.81,0a4.59,4.59,0,0,1,3.52,1.44,6.23,
2023-12-28 16:22:27 UTC	1081	IN	Data Raw: 33 34 2e 36 35 2c 32 41 34 2e 32 31 2c 34 2e 32 31 2c 30 2c 30 2c 30 2c 31 32 39 2e 38 38 2e 32 32 61 34 2e 33 34 2c 34 2e 33 34 2c 30 2c 30 2c 30 2d 33 2c 34 2e 31 36 76 34 30 61 34 2e 32 36 2c 34 2e 32 36 2c 30 2c 31 2c 30 2c 38 2e 35 31 2c 30 56 31 38 2e 36 37 6c 31 30 2e 35 2c 31 36 2c 30 2c 30 76 30 6c 30 2c 2e 30 36 2e 32 31 2e 32 38 2e 31 2e 31 31 63 2e 30 36 2e 30 37 2e 31 32 2e 31 34 2e 31 38 2e 32 6c 2e 31 38 2e 31 37 2e 31 33 2e 31 32 2e 32 36 2e 31 39 2e 30 37 2e 30 36 68 30 6c 2e 32 39 2e 31 38 2e 30 38 2e 30 35 2e 32 33 2e 31 31 61 34 2e 32 31 2c 34 2e 32 31 2c 30 2c 30 2c 30 2c 31 2e 33 34 2e 33 37 68 30 6c 2e 32 37 2c 30 68 2e 32 39 6c 2e 32 37 2c 30 68 30 61 34 2e 32 31 2c 34 2e 32 31 2c 30 2c 30 2c 30 2c 31 2e 33 34 2d 2e 33 37 6c 2e 32 Data Ascii: 34.65,2A4.21,4.21,0,0,0,129.88.22a4.34,4.34,0,0,0-3,4.16v40a4.26,4.26,0,1,0,8.51,0V18.67l10.5,16,0,0v0l0,.06.21.28.1.11c.06.07.12.14.18.2l.18.17.13.12.26.19.07.06h0l.29.18.08.05.23.11a4.21,4.21,0,0,0,1.34.37h0l.27,0h.29l.27,0h0a4.21,4.21,0,0,0,1.34-.37l.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50133	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2074	OUT	GET /images/backgrounds/home_unicorn/cnet.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:27 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:27 GMT Content-Type: image/svg+xml Content-Length: 1790 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-6fe" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 675 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2467bf210bc4-DFW
2023-12-28 16:22:27 UTC	1039	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 73 76 67 36 30 39 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 39 39 39 22 20 68 65 69 67 68 74 3d 22 39 39 39 2e 30 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 39 39 20 39 39 39 2e 30 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 63 6e 65 74 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 6c 61 79 65 72 31 22 3e 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 34 38 38 37 22 20 64 3d 22 4d 35 30 30 2c 39 39 39 2e 35 36 63 32 37 35 2e 38 39 2c 30 2c 34 39 39 2e 35 31 2d 32 32 33 2e 36 2c 34 39 39 2e 35 31 2d 34 39 39 2e 34 Data Ascii: <svg id="svg6096" xmlns="http://www.w3.org/2000/svg" width="999" height="999.06" viewBox="0 0 999 999.06"><defs><style>.cls-1{fill:#fff;}</style></defs><title>cnet</title><g id="layer1"><path id="path4887" d="M500,999.56c275.89,0,499.51-223.6,499.51-499.4
2023-12-28 16:22:27 UTC	751	IN	Data Raw: 2d 35 37 2e 34 36 2c 31 2e 35 38 6c 2e 30 36 2d 31 2e 35 38 56 36 36 32 2e 35 39 48 33 37 35 2e 34 38 56 36 32 37 6c 32 32 2e 33 2e 30 38 56 34 31 30 2e 33 36 6c 2d 32 36 2e 34 36 2d 2e 31 36 56 33 37 34 2e 38 32 68 36 37 2e 38 32 6c 2e 31 38 2c 32 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 30 2e 35 20 2d 30 2e 35 29 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 34 38 39 37 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 39 34 2e 32 39 2c 35 39 38 2e 37 32 63 31 2e 35 2c 32 35 2e 39 33 2c 39 2e 36 39 2c 34 39 2e 32 2c 33 31 2e 33 34 2c 35 38 2e 37 39 2d 34 2e 30 35 2d 31 2e 38 37 2c 31 30 2e 35 34 2c 35 2e 34 31 2c 32 35 2e 35 39 2c 35 2e 32 37 2c 37 2e 39 31 2d 2e 32 2c 34 36 2e 31 2d 2e 31 36 2c 34 36 Data Ascii: -57.46,1.58l.06-1.58V662.59H375.48V627l22.3.08V410.36l-26.46-.16V374.82h67.82l.18,26" transform="translate(-0.5 -0.5)"/><path id="path4897" class="cls-1" d="M794.29,598.72c1.5,25.93,9.69,49.2,31.34,58.79-4.05-1.87,10.54,5.41,25.59,5.27,7.91-.2,46.1-.16,46

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50137	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:27 UTC	2080	OUT	GET /images/backgrounds/home_unicorn/techcrunch.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 2346 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-92a" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1983 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2469581faa57-DFW
2023-12-28 16:22:28 UTC	1038	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 31 2e 31 39 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 31 2e 31 39 20 32 34 22 3e 3c 74 69 74 6c 65 3e 74 65 63 68 63 72 75 6e 63 68 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 36 35 2e 37 38 2c 39 2e 34 56 32 30 48 36 31 2e 39 56 39 2e 34 48 35 38 56 36 48 36 39 2e 37 56 39 2e 34 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 30 2e 38 31 20 2d 31 2e 30 32 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 38 2e 37 36 2c 31 35 2e 38 48 37 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="171.19" height="24" viewBox="0 0 171.19 24"><title>techcrunch</title><path d="M65.78,9.4V20H61.9V9.4H58V6H69.7V9.4Z" transform="translate(-0.81 -1.02)"/><path d="M78.76,15.8H7
2023-12-28 16:22:28 UTC	1308	IN	Data Raw: 2d 37 2e 32 32 2c 36 2e 34 2d 37 2e 32 32 2c 33 2e 34 34 2c 30 2c 34 2e 38 2c 31 2e 34 38 2c 35 2e 37 36 2c 34 2e 31 32 6c 2d 33 2e 35 32 2c 31 2e 33 38 63 2d 2e 35 2d 31 2e 33 2d 31 2d 32 2e 31 32 2d 32 2e 32 36 2d 32 2e 31 32 2d 31 2e 36 32 2c 30 2d 32 2e 33 32 2c 31 2e 36 32 2d 32 2e 33 32 2c 33 2e 38 34 73 2e 36 38 2c 33 2e 38 34 2c 32 2e 33 36 2c 33 2e 38 34 63 31 2e 32 32 2c 30 2c 31 2e 37 34 2d 2e 36 36 2c 32 2e 35 2d 32 6c 33 2e 32 38 2c 31 2e 37 34 41 36 2c 36 2c 30 2c 30 2c 31 2c 31 31 30 2c 32 30 2e 32 34 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 30 2e 38 31 20 2d 31 2e 30 32 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 34 2e 36 36 2c 31 33 2e 34 38 41 32 2e 32 37 2c 32 2e 32 37 2c 30 2c 30 2c 30 2c 31 32 33 Data Ascii: -7.22,6.4-7.22,3.44,0,4.8,1.48,5.76,4.12l-3.52,1.38c-.5-1.3-1-2.12-2.26-2.12-1.62,0-2.32,1.62-2.32,3.84s.68,3.84,2.36,3.84c1.22,0,1.74-.66,2.5-2l3.28,1.74A6,6,0,0,1,110,20.24Z" transform="translate(-0.81 -1.02)"/><path d="M124.66,13.48A2.27,2.27,0,0,0,123

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50138	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2078	OUT	GET /images/backgrounds/home_unicorn/engadget.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 1671 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-687" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 4347 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24697a0f6c3a-DFW
2023-12-28 16:22:28 UTC	1038	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 73 76 67 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 35 33 34 2e 33 39 22 20 68 65 69 67 68 74 3d 22 33 33 33 2e 31 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 33 34 2e 33 39 20 33 33 33 2e 31 33 22 3e 3c 74 69 74 6c 65 3e 65 6e 67 61 64 67 65 74 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 67 31 30 22 3e 3c 67 20 69 64 3d 22 67 31 32 22 3e 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 31 34 22 20 64 3d 22 4d 30 2c 32 34 33 2e 34 39 63 30 2c 31 36 2e 31 35 2c 31 33 2e 31 33 2c 32 39 2e 32 38 2c 33 30 2e 32 39 2c 32 39 2e 32 38 48 31 35 31 2e 34 32 56 32 34 32 2e 34 38 48 33 30 2e 32 39 56 32 31 32 2e 32 48 31 34 39 2e 34 63 31 36 Data Ascii: <svg id="svg2" xmlns="http://www.w3.org/2000/svg" width="1534.39" height="333.13" viewBox="0 0 1534.39 333.13"><title>engadget</title><g id="g10"><g id="g12"><path id="path14" d="M0,243.49c0,16.15,13.13,29.28,30.29,29.28H151.42V242.48H30.29V212.2H149.4c16
2023-12-28 16:22:28 UTC	633	IN	Data Raw: 31 32 31 2e 33 35 68 39 30 2e 38 35 56 39 31 2e 30 36 68 2d 39 30 2e 38 35 6d 2d 34 32 34 2c 31 35 32 2e 34 33 63 30 2c 31 36 2e 31 35 2c 39 2e 30 38 2c 32 39 2e 32 38 2c 32 35 2e 32 34 2c 32 39 2e 32 38 68 31 31 36 2e 30 39 56 33 30 33 68 2d 31 31 31 76 33 30 2e 32 39 68 31 31 35 2e 30 38 63 31 36 2e 31 35 2c 30 2c 32 36 2e 32 35 2d 31 34 2e 31 34 2c 32 36 2e 32 35 2d 33 31 2e 33 56 31 32 33 2e 33 37 63 30 2d 31 36 2e 31 35 2d 31 30 2e 30 39 2d 33 32 2e 33 2d 32 36 2e 32 35 2d 33 32 2e 33 48 31 30 34 34 2e 38 63 2d 31 36 2e 31 36 2c 30 2d 32 35 2e 32 34 2c 31 36 2e 31 35 2d 32 35 2e 32 34 2c 33 32 2e 33 5a 6d 31 34 31 2e 33 33 2d 31 68 2d 31 31 31 56 31 32 31 2e 33 35 68 31 31 31 5a 4d 39 35 39 2c 39 31 2e 30 36 48 38 34 31 2e 38 39 63 2d 31 36 2e 31 35 Data Ascii: 121.35h90.85V91.06h-90.85m-424,152.43c0,16.15,9.08,29.28,25.24,29.28h116.09V303h-111v30.29h115.08c16.15,0,26.25-14.14,26.25-31.3V123.37c0-16.15-10.09-32.3-26.25-32.3H1044.8c-16.16,0-25.24,16.15-25.24,32.3Zm141.33-1h-111V121.35h111ZM959,91.06H841.89c-16.15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50139	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2351	OUT	GET /images/icons/svg_light/facebook.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 401 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-191" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2853 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246a1f30e5c6-DFW
2023-12-28 16:22:28 UTC	401	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50143	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2350	OUT	GET /images/icons/svg_light/twitter.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 949 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3b5" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 4212 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246a180e2e34-DFW
2023-12-28 16:22:28 UTC	949	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50140	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2361	OUT	GET /images/backgrounds/home_unicorn/hero_tile.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	402	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/png Content-Length: 26402 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-6722" Expires: Sat, 27 Jan 2024 12:13:34 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11941 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246a3f732cc8-DFW
2023-12-28 16:22:28 UTC	967	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 6e 00 00 03 b4 02 03 00 00 00 61 14 52 7d 00 00 00 0c 50 4c 54 45 0e 28 66 0c 32 78 0d 2e 72 0e 2b 6b 67 f2 45 6a 00 00 66 d1 49 44 41 54 78 da ac 5d bb 6f 33 45 10 5f df ca c5 22 ce 34 40 f8 03 38 47 3c 0a 9a 03 c2 d3 12 ff c0 49 64 ed 23 3e e0 24 84 04 24 c0 09 04 0d 0f 1d 50 f3 28 72 8e 11 14 34 e1 19 81 1b 0a 10 8f 05 44 41 01 95 cd 07 88 82 c6 3c 1b 10 a2 08 6f bc 3b c9 78 b3 eb dd b3 c3 4a 5f 92 f9 fc c5 9e 9b 9b fb cd ec 6f 76 e6 23 b0 9a 84 90 cb 67 3f 04 c5 61 fe 9f 28 88 5c f0 b7 6d 42 c8 f5 c4 b9 9a c7 3f d1 69 77 d4 da c4 57 86 84 90 73 e1 1f 6d f0 1d b2 fc 62 02 de 9f de c9 0b 25 c2 8a 09 21 eb 84 5c d7 25 ce 15 1f ff 34 e5 23 42 f6 f0 95 2f e4 1b 28 e5 c4 0f 7c b4 82 72 1d 30 17 e5 db Data Ascii: PNGIHDRnaR}PLTE(f2x.r+kgEjfIDATx]o3E_"4@8G<Id#>$$P(r4DA<o;xJ_ov#g?a(\mB?iwWsmb%!\%4#B/(\|r0
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: b4 f8 ae ae 6e 2d 48 08 2f f5 5c e8 00 05 f7 3b 8f f1 cd 85 2d 67 a2 bd a9 e3 26 c4 f3 78 d7 e5 99 9e 33 cd c4 e8 ad 22 b8 59 77 8b 3f 35 c9 95 e8 67 ba a8 43 a5 4a 92 df 71 46 40 c4 3b d1 4a cd f8 ce 78 d9 b8 3f 25 4b 2e 00 b2 04 45 3d 67 82 f0 fc 83 f3 26 ac 6b 78 07 50 89 f1 5d 81 30 eb 9c 59 56 35 00 b2 44 13 35 93 0c 71 e7 e9 0b cf 00 aa 67 ec 9c 88 88 c4 4a 5b 67 a2 f9 b0 ee 4c 43 08 1e 7e cb 51 00 ae f3 6d 39 d3 1b 11 61 c5 0a 5b 67 5d b9 13 39 13 cd c8 55 fc de 3a 59 17 9d 02 a8 5e 69 e1 44 28 ef 01 1c 2e b1 00 87 9e 47 31 d1 01 2c 48 20 b0 79 09 1b 7c 9e 2d 9c 48 70 67 8a ce 68 5f d4 76 d7 e1 89 42 51 83 7e 76 8f 93 4b 42 6c 0c f0 79 b6 e4 4c 61 e7 32 42 07 4e dd aa 3e 00 e5 1d 27 12 fd b1 26 e2 1a 90 09 ef d7 83 ca 78 67 81 4d 99 50 08 45 f7 17 Data Ascii: n-H/\;-g&x3"Yw?5gCJqF@;Jx?%K.E=g&kxP]0YV5D5qgJ[gLC~Qm9a[g]9U:Y^iD(.G1,H y\|-Hpgh_vBQ~vKBlyLa2BN>'&xgMPE
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 0a b1 72 16 63 37 e6 5e c9 94 f5 0e 85 cf 69 41 b7 9f 91 95 33 80 60 97 44 bc e3 3e 7b 45 37 09 9d b1 03 34 35 e2 bb bc 1f 57 6b a5 eb a1 bc f0 0d 5e fa 6a 1e 40 d6 80 b9 ac 39 d3 98 70 be 30 49 02 1e f2 3c 60 2e ce 98 f1 7d 0d 75 45 b5 59 b9 e1 49 f3 21 2b 8a f9 08 cd 65 c9 99 ce 6d 64 8d 85 78 04 29 71 f3 15 55 f6 88 cd f8 fe 05 22 27 be 12 fd ee 4b f3 01 87 aa 11 9a cb 96 33 ad 87 1d 0b 9a 22 28 4b 15 f9 81 11 df 41 7c 1e 45 24 75 07 bc 5f 8b 24 0c 32 34 97 35 67 6a 33 41 12 0f 43 1b a8 6d e2 1f 9f 98 9c 48 86 22 e2 b8 57 37 30 79 58 68 b8 69 d4 91 e8 6f 4c 38 72 df b1 76 f6 ea 26 93 13 49 0c e5 48 e5 29 f5 80 3b e9 04 d0 37 b6 3a d2 94 7f 52 b0 c2 bb b3 57 14 26 37 b6 42 36 e5 ae f2 e8 86 5e ca 04 9a cb 92 33 05 9c 3f b6 c5 85 d3 6d 91 cd 8b cd ad 50 Data Ascii: rc7^iA3`D>{E745Wk^j@9p0I<`.}uEYI!+emdx)qU"'K3"(KA\|E$u_$245gj3ACmH"W70yXhioL8rv&IH);7:RW&7B6^3?mP
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: bc 77 c0 de 96 16 4a b6 5f ea 08 3f 20 11 df ae 09 25 11 e8 06 a2 91 33 35 73 b2 b1 70 1b 02 5c f6 d9 ea 2a fb 73 50 99 1f 9b 6b 72 22 d1 8f ef e2 fd 9a 2d 16 94 8f 50 d4 73 a6 75 c0 e8 ab 78 59 07 2a a7 08 95 5a 0b e5 f7 20 22 6c f5 ea b6 58 b0 1d 6b 37 5a 13 73 a6 b7 f9 b6 cb 33 50 b7 77 ae d5 4f 56 c3 d9 e3 9e 38 51 13 ba 5e d4 da 3a 6b cf 28 b5 77 f0 5f cc fb 75 a0 52 6e 7a 06 b6 16 ca 3b 57 1f 3b d1 d6 44 cd 24 31 ee 8a 9d ca e1 d9 e8 c8 36 76 22 2e 56 1e 3b b1 ae 89 5a f8 89 21 76 b8 95 c3 6a 8a 11 df d7 94 d3 ae 56 eb 79 5e 57 6e 78 e2 61 b9 dc bf 07 61 02 75 83 9a bd 31 76 a2 fa 79 d5 b1 13 3a af a7 fb 63 1b f0 d9 0b 95 67 f1 6d 14 d1 69 c1 5c 3f a4 20 9e 72 ec 84 ee 8f 67 40 37 2f 54 56 db 28 1a 39 13 69 ec 80 58 63 f9 c6 4e 20 43 db 87 d8 e1 e3 Data Ascii: wJ_? %35sp\sPkr"-PsuxYZ "lXk7Zs3PwOV8Q^:k(w_uRnz;W;D$16v".V;Z!vjVy^Wnxaau1vy:cgmi\? rg@7/TV(9iXcN C
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 9d 67 48 aa e6 79 d2 cc 32 b5 98 26 e4 52 7d 6a 31 a9 ba 35 a7 16 7f 2e 3c 63 27 9e 48 c8 ba 7b 16 f5 65 e4 73 d8 2b ec a2 0a 02 22 d5 90 24 27 26 72 55 af d4 39 53 1e e3 33 ea f8 ef 49 6e c8 c9 9a 9b da c6 ee d8 35 93 13 19 d3 9c 70 a1 27 6a 79 cd 6e 34 9a b8 c7 4e b4 9e bd 3f 21 bb 1e 6a 9b 30 89 17 f4 cf cb cd f8 7e fe a7 05 bd 5b cf 3e fe a9 3b b5 18 01 d6 3e aa 2b e2 f9 e0 30 73 53 22 18 03 f7 2d f4 31 2f 1b f7 65 ab 4d 2d 46 e5 ec 39 53 f7 af 24 e2 23 3f eb a0 7a a2 b8 30 a0 32 e8 93 b0 dc 5b 65 6a b1 a6 1c 35 3a f8 65 20 4b 5b af b9 bc 56 8b cf 93 72 c1 d4 62 62 ac d3 8e 9d 50 fa a7 5e 82 16 63 60 b3 63 c9 99 7e be dc d1 a9 e8 19 3b e1 b4 69 a3 24 59 9d 8c 10 32 f7 b0 58 30 b5 b8 36 25 62 8b ef 3f 8e ec 36 6d 74 82 a4 8e 72 90 b9 37 72 cb d4 e2 db Data Ascii: gHy2&R}j15.<c'H{es+"$'&rU9S3In5p'jyn4N?!j0~[>;>+0sS"-1/eM-F9S$#?z02[ej5:e K[VrbbP^c`c~;i$Y2X06%b?6mtr7r
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 74 0a 43 3d a3 6a 20 36 ae 5f a3 7e 5c d8 c6 58 69 91 9d e8 97 ba a0 e4 71 a7 4b 96 ea ec 96 7a fa c7 ae 30 39 42 fc 38 f8 94 55 69 29 a1 bc f2 a6 ad 65 27 c2 18 86 7a 0c 67 4f 7c 83 13 e7 86 07 db c0 55 2a b2 13 d7 5c d8 5a 76 22 28 61 a8 2b ef 44 7c cd fd 73 80 1b 27 2b 25 7b b9 45 76 c2 4b c5 70 c3 67 04 c6 99 98 e9 7f bd 4b 96 e3 c6 49 a7 da cb 2d b2 13 de cb 7c 78 4e 29 4e 1d 33 49 61 85 a3 1a 71 95 50 ec 40 13 8b ec 84 7f 87 18 6e f8 f8 1a af a7 61 26 ae cc 97 21 ae 12 6c 13 43 13 33 5d 52 d5 58 6b 07 07 35 0e 43 cd 45 0c 48 bf ca 3a 70 22 d1 64 01 43 1d 33 09 ba 9a 6e 6e 5c a9 57 54 aa 3e ef 79 1e e7 c0 39 91 6a 01 43 13 33 d1 39 71 ce 1c f4 7c 00 41 50 a0 c6 61 a8 71 1d bc ee 01 e7 44 68 0a 43 8b ec 44 6f 5a b7 ac 39 a0 3e a7 22 d4 c3 a6 86 14 27 Data Ascii: tC=j 6_~\XiqKz09B8Ui)e'zgO\|U*\Zv"(a+D\|s'+%{EvKpgKI-\|xN)N3IaqP@na&!lC3]RXk5CEH:p"dC3nn\WT>y9jC39q\|APaqDhCDoZ9>"'
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: e2 ed 65 67 b2 62 81 59 8d e6 d7 bb 5a 1d 47 c0 80 ac 39 a7 ec c4 0d f3 2b 48 e4 56 f1 26 17 78 05 8b 01 92 64 f0 78 49 86 ea 01 ff 0a 28 d1 9d 4f 76 c2 63 e9 a8 6e 27 58 c5 9f 9c 95 21 de f0 71 6c 70 22 bd 5b 32 f2 35 56 64 88 cb 4e 50 1b d0 8f ee 9b fa 2c 75 6a 7d 81 b2 14 bb a5 30 5c 25 ad 0a 32 47 35 70 70 d9 89 97 2d 98 69 87 9c 78 6c d1 85 77 a7 2f 93 5b 59 6e ba ca 1b 08 4d 50 f5 20 5c 76 82 58 80 fe 9c 0c c9 a5 5d 78 77 da 24 32 5f c5 e4 44 f2 5e 72 6e 29 4e a2 71 22 c2 ca 11 4a d0 02 0f 4a 53 0b 66 1a bd 16 d3 83 73 25 e3 d7 2d 73 9a 91 13 9c da 06 8e f6 40 c7 4c 92 a1 3d d9 5a 8a 13 8e 09 73 4e e7 f4 00 6f 15 01 99 d9 4b 0b 66 ba 70 e4 6e 96 04 25 30 f4 d4 c6 89 84 8c 65 97 bd a5 cd e9 2e ff da 77 27 f8 cc 81 20 cd 75 3a 27 22 97 48 53 b8 13 b7 Data Ascii: egbYZG9+HV&xdxI(Ovcn'X!qlp"[25VdNP,uj}0\%2G5pp-ixlw/[YnMP \vX]xw$2_D^rn)Nq"JJSfs%-s@L=ZsNoKfpn%0e.w' u:'"HS
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: e5 8c 03 1b a0 ae 07 b6 96 ad f7 e6 7c d8 e9 41 4a 2c f4 8a a8 eb 70 48 e8 b1 43 47 fb 31 12 41 8b 16 fc 31 1d 86 99 3f 3d 92 2a de 49 17 57 19 3d e8 ac 46 db 27 98 71 8d 64 67 8f 8e cd 4b 16 0c 15 9f 97 91 3e 4b ba 90 84 3b 35 0c 4d cc 44 aa 53 e4 67 fd 49 68 8d 50 50 2c 02 6a 1c 86 8a 97 f1 92 0e 19 75 be b2 d8 f5 f4 b5 5d e8 8a 3a 77 d9 76 3c ce b9 17 ff a8 c9 35 29 4e 99 da a2 7e bb 30 27 c1 e3 02 12 e0 ae 32 43 aa d1 0e 5b 5d 09 50 9f a2 c2 c5 4b 2d 97 ac e1 54 33 8e a6 a4 e9 60 1b 09 a5 1f 77 b5 6c 0d 62 47 d5 ad 6c bc 72 c2 bd b8 ae 69 29 45 a7 9a 5a 13 c3 5f 1d 41 59 2b e6 2a c1 38 3b 66 7a 58 40 2b f3 01 c1 09 ff 35 e1 c5 47 66 ba 20 4d 82 d2 98 6c 84 1f b4 b6 1f f3 0c cc 24 bb a2 36 b5 fb f2 1c de 7d dc 96 2e e8 e5 61 2c 12 15 e0 f9 73 1b d5 62 Data Ascii: \|AJ,pHCG1A1?=IW=F'qdgK>K;5MDSgIhPP,ju]:wv<5)N~0'2C[]PK-T3`wlbGlri)EZ_AY+8;fzX@+5Gf Ml$6}.a,sb
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 9c ee b9 de ab cc 6a c3 d8 d4 8a 99 fc 2a 27 c8 19 73 99 53 76 62 c5 52 fb 9c fa 0f bc 80 5c 63 20 51 84 4e ac 71 a4 11 a9 11 d9 e8 be f4 df 63 ab 6a b1 37 f9 a7 fa 82 e5 ca a7 0a e3 42 96 62 e2 09 80 1e ae b4 d2 c7 03 82 c8 46 f7 d9 2d 13 6e 9b 5d b5 38 2a c8 f8 6e 36 35 5b be 5c 4a 7e ae 31 e3 a0 1d 43 54 db 9a 7f cd 49 6b e6 36 50 9f 31 4f 52 a5 55 69 9e ef 3b 3c b5 bb a9 55 f9 f2 9a f4 2f 60 8b 56 e9 89 ea 97 16 cc 44 33 77 e0 43 f6 21 e2 15 2e 40 3b c0 f9 ce a3 65 df 91 a0 50 1c 41 44 68 75 07 76 75 86 50 0f 0c 35 cc 74 17 27 10 ad 0f 24 0b a6 1c 7d 5a 55 8b 33 a8 f7 83 bd 36 82 6f ec de ad 7d 76 3f 0c 0d cc 14 8a f8 3a a2 5a bc c3 66 2d aa c5 5e 0e 43 b8 02 5c 40 43 3d d2 0f 55 33 58 c3 66 1c 29 10 5b 10 53 2d be d5 ae 5a 0c 2f 9d af 33 15 9e f8 c6 Data Ascii: j'sSvbR\c QNqcj7BbF-n]8n65[\J~1CTIk6P1ORUi;<U/`VD3wC!.@;ePADhuvuP5t'$}ZU36o}v?:Zf-^C\@C=U3Xf)[S-Z/3
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: c0 51 16 5e 4f c8 86 8d 1f c3 62 a6 41 55 b2 28 27 86 6c 98 76 ba 1e e2 df 0f 60 53 fb bb ec 65 2c 86 e4 56 57 53 69 1c e2 41 92 57 25 31 64 43 2c 24 52 79 c5 75 07 7b 56 1b bf 36 fb 85 48 f5 50 f0 31 c4 4c ec 61 5e cd a9 21 1b 1f 28 d9 4e fd d6 c1 44 f4 ce d9 08 68 4c 74 f5 90 f0 31 8c 6c 0d e6 38 48 08 7a 0f 84 69 33 a7 c5 42 eb 9c 28 6c c4 f3 eb 4e f0 31 12 33 71 4f 67 15 3c 99 46 09 1f cc 5c ff 9e 88 22 38 1b fe 7b 47 d2 46 77 13 df 37 87 3b e2 e9 80 a4 27 38 b7 e6 df b5 9d eb 15 24 4f f6 29 66 33 4f a5 c7 93 00 41 01 23 48 7a 94 22 40 68 f3 1e 12 33 1d c3 c2 c9 81 5e c9 20 68 1b 8b b4 31 8b 18 da 7b ba 82 83 27 25 9c 31 aa 07 fd cd 16 0b d0 88 aa 54 b2 5d 2e a4 63 2a 71 4d bf 9f 4e a7 8c 40 36 57 69 cd 72 cf 43 54 09 4b 75 be 0c a7 fa 20 33 ce 31 d2 Data Ascii: Q^ObAU('lv`Se,VWSiAW%1dC,$Ryu{V6HP1La^!(NDhLt1l8Hzi3B(lN13qOg<F\"8{GFw7;'8$O)f3OA#Hz"@h3^ h1{'%1T].c*qMN@6WirCTKu 31

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50141	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2349	OUT	GET /images/icons/svg_light/upload.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	329	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 209 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-d1" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 8268 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246a3bed4660-DFW
2023-12-28 16:22:28 UTC	209	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e 3c 67 20 66 69 6c 6c 3d 22 23 66 66 66 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 31 36 68 31 33 76 33 48 35 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 30 20 31 34 2e 39 36 38 68 32 2e 39 37 39 76 2d 33 2e 39 38 39 68 35 2e 30 32 39 6c 2d 36 2e 35 30 37 2d 36 2e 39 38 38 2d 36 2e 35 30 38 20 36 2e 39 38 38 48 31 30 76 33 2e 39 38 39 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24"><g fill="#fff"><path d="M5 16h13v3H5z"/><path fill-rule="evenodd" d="M10 14.968h2.979v-3.989h5.029l-6.507-6.988-6.508 6.988H10v3.989z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50142	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2357	OUT	GET /images/backgrounds/home_unicorn/share.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 3752 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-ea8" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 9795 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246a3cc73464-DFW
2023-12-28 16:22:28 UTC	1038	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 61 62 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 6f 6d 65 70 61 67 65 20 2d 20 66 65 61 74 75 72 65 73 20 62 75 6c 6c 65 74 73 20 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 6f 75 74 6c 69 6e 65 73 22 3e 3c 70 61 74 68 20 69 64 3d 22 62 67 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 Data Ascii: <svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="outlines"><path id="bg" class="cls-1
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 30 2c 30 2d 31 2e 32 36 2c 34 2e 32 31 6c 2e 30 36 2e 32 36 61 2e 33 2e 33 2c 30 2c 30 2c 30 2c 30 2c 2e 31 63 31 2e 30 36 2c 33 2e 31 36 2c 34 2e 31 33 2c 34 2e 36 38 2c 36 2e 36 39 2c 35 2e 36 34 6c 2e 38 31 2e 32 39 61 32 37 2e 30 37 2c 32 37 2e 30 37 2c 30 2c 30 2c 31 2c 32 2e 36 31 2c 31 2c 37 34 2e 32 37 2c 37 34 2e 32 37 2c 30 2c 30 2c 31 2d 37 2e 36 35 2e 34 34 48 31 31 37 2e 39 32 63 2d 32 2e 31 38 2c 30 2d 34 2e 38 32 2c 31 2e 37 35 2d 34 2e 38 32 2c 33 2e 39 32 56 38 36 2e 31 61 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2c 2e 36 2c 32 2e 30 37 2c 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2d 32 2e 37 2c 33 2e 36 37 76 33 2e 32 38 61 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2c 31 2e 38 38 2c 33 2e 33 32 2c 33 2e 38 37 2c 33 2e 38 37 2c Data Ascii: 0,0-1.26,4.21l.06.26a.3.3,0,0,0,0,.1c1.06,3.16,4.13,4.68,6.69,5.64l.81.29a27.07,27.07,0,0,1,2.61,1,74.27,74.27,0,0,1-7.65.44H117.92c-2.18,0-4.82,1.75-4.82,3.92V86.1a3.86,3.86,0,0,0,.6,2.07,3.86,3.86,0,0,0-2.7,3.67v3.28a3.86,3.86,0,0,0,1.88,3.32,3.87,3.87,
2023-12-28 16:22:28 UTC	1345	IN	Data Raw: 2e 38 37 2c 33 2e 38 37 2c 30 2c 30 2c 30 2d 2e 38 38 2d 32 2e 34 36 41 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2c 36 39 2c 39 35 2e 31 32 56 39 31 2e 38 34 61 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2d 32 2e 37 2d 33 2e 36 37 2c 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2c 2e 36 2d 32 2e 30 37 56 38 32 2e 39 32 63 30 2d 32 2e 31 37 2d 32 2e 36 34 2d 33 2e 39 32 2d 34 2e 38 32 2d 33 2e 39 32 48 35 31 2e 33 32 41 37 32 2e 33 38 2c 37 32 2e 33 38 2c 30 2c 30 2c 31 2c 34 34 2c 37 38 2e 35 39 56 35 38 48 38 32 56 37 38 41 31 2c 31 2c 30 2c 30 2c 30 2c 38 33 2c 37 39 5a 6d 31 2d 32 56 35 39 2e 34 31 6c 31 36 2e 31 39 2c 31 36 2e 31 39 61 39 2e 35 36 2c 39 2e 35 36 2c 30 2c 30 2c 31 2c 32 2e 32 35 2c 33 2e 35 35 41 39 2e 32 34 2c 39 2e 32 34 2c 30 Data Ascii: .87,3.87,0,0,0-.88-2.46A3.86,3.86,0,0,0,69,95.12V91.84a3.86,3.86,0,0,0-2.7-3.67,3.86,3.86,0,0,0,.6-2.07V82.92c0-2.17-2.64-3.92-4.82-3.92H51.32A72.38,72.38,0,0,1,44,78.59V58H82V78A1,1,0,0,0,83,79Zm1-2V59.41l16.19,16.19a9.56,9.56,0,0,1,2.25,3.55A9.24,9.24,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50144	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2363	OUT	GET /images/backgrounds/home_unicorn/share_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 5751 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1677" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6771 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246b0e0b316b-DFW
2023-12-28 16:22:28 UTC	1037	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 61 62 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 39 39 63 66 66 66 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 63 63 65 37 66 66 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 66 66 64 61 63 37 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 62 32 62 37 63 34 3b 7d 2e 63 6c 73 2d 36 7b 66 69 6c 6c 3a 23 65 32 61 36 38 38 3b 7d 2e 63 6c 73 2d 37 7b 66 69 6c 6c 3a 23 66 66 64 62 38 30 3b 7d 2e 63 Data Ascii: <svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#99cfff;}.cls-3{fill:#cce7ff;}.cls-4{fill:#ffdac7;}.cls-5{fill:#b2b7c4;}.cls-6{fill:#e2a688;}.cls-7{fill:#ffdb80;}.c
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 2e 30 39 56 38 32 2e 33 5a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 68 61 6e 64 5f 73 68 61 72 65 72 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 68 61 6e 64 20 73 68 61 72 65 72 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 34 32 2c 36 39 2e 35 36 6c 2d 37 2e 36 36 2c 32 2e 32 33 61 36 2e 35 36 2c 36 2e 35 36 2c 30 2c 30 2c 30 2d 32 2c 2e 37 37 4c 32 31 2e 36 37 2c 37 39 63 2d 31 2e 30 39 2e 36 34 2d 34 2e 34 2c 33 2d 35 2e 36 37 2c 33 76 32 38 63 32 2e 36 35 2c 30 2c 31 33 2e 35 2c 35 2e 38 2c 33 30 2e 38 34 2c 35 2e 31 32 2c 37 2e 32 34 2d 2e 32 38 2c 31 32 2e 35 36 2d 2e 39 33 2c 31 32 2e 35 36 2d 2e 39 33 61 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 30 2c 32 2e 36 2d 32 2e 38 56 31 31 30 61 33 2c 33 2c 30 2c 30 2c 30 2d 33 2d 33 68 35 2e 31 31 41 32 Data Ascii: .09V82.3Z"/><path id="hand_sharer" data-name="hand sharer" class="cls-4" d="M42,69.56l-7.66,2.23a6.56,6.56,0,0,0-2,.77L21.67,79c-1.09.64-4.4,3-5.67,3v28c2.65,0,13.5,5.8,30.84,5.12,7.24-.28,12.56-.93,12.56-.93a2.8,2.8,0,0,0,2.6-2.8V110a3,3,0,0,0-3-3h5.11A2
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 31 34 2d 2e 37 39 2e 32 2d 31 2e 31 39 41 39 34 2e 30 37 2c 39 34 2e 30 37 2c 30 2c 30 2c 30 2c 39 35 2c 31 5a 4d 33 2c 39 35 41 39 32 2e 34 33 2c 39 32 2e 34 33 2c 30 2c 30 2c 31 2c 34 2e 35 38 2c 37 38 48 31 35 76 33 39 48 35 2e 36 37 41 39 31 2e 37 32 2c 39 31 2e 37 32 2c 30 2c 30 2c 31 2c 33 2c 39 35 5a 6d 39 32 2c 39 32 41 39 32 2e 31 36 2c 39 32 2e 31 36 2c 30 2c 30 2c 31 2c 36 2e 31 38 2c 31 31 39 48 31 37 76 2d 37 2e 38 32 63 2e 36 39 2e 31 38 2c 31 2e 35 39 2e 34 38 2c 32 2e 35 39 2e 38 41 37 36 2e 36 37 2c 37 36 2e 36 37 2c 30 2c 30 2c 30 2c 34 32 2c 31 31 36 2e 31 35 56 31 33 33 61 31 2c 31 2c 30 2c 30 2c 30 2c 31 2c 31 68 36 31 61 31 2c 31 2c 30 2c 30 2c 30 2c 31 2d 31 56 38 32 2e 33 38 61 31 31 2e 35 31 2c 31 31 2e 35 31 2c 30 2c 30 2c 30 2d Data Ascii: 14-.79.2-1.19A94.07,94.07,0,0,0,95,1ZM3,95A92.43,92.43,0,0,1,4.58,78H15v39H5.67A91.72,91.72,0,0,1,3,95Zm92,92A92.16,92.16,0,0,1,6.18,119H17v-7.82c.69.18,1.59.48,2.59.8A76.67,76.67,0,0,0,42,116.15V133a1,1,0,0,0,1,1h61a1,1,0,0,0,1-1V82.38a11.51,11.51,0,0,0-
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 48 34 38 61 31 2c 31 2c 30 2c 30 2c 30 2c 30 2c 32 48 36 34 2e 31 61 31 2e 39 2c 31 2e 39 2c 30 2c 30 2c 31 2c 31 2e 39 2c 31 2e 39 76 33 2e 31 39 41 31 2e 39 2c 31 2e 39 2c 30 2c 30 2c 31 2c 36 34 2e 31 2c 31 30 36 48 34 37 61 31 2c 31 2c 30 2c 30 2c 30 2c 30 2c 32 48 35 39 61 32 2c 32 2c 30 2c 30 2c 31 2c 32 2c 32 76 31 2e 33 39 61 31 2e 38 32 2c 31 2e 38 32 2c 30 2c 30 2c 31 2d 31 2e 37 32 2c 31 2e 38 63 2d 2e 30 35 2c 30 2d 35 2e 33 36 2e 36 35 2d 31 32 2e 34 37 2e 39 32 2d 31 2c 30 2d 31 2e 38 39 2c 30 2d 32 2e 38 31 2c 30 2d 2e 36 38 2c 30 2d 31 2e 33 34 2c 30 2d 32 2c 30 61 37 34 2e 36 37 2c 37 34 2e 36 37 2c 30 2c 30 2c 31 2d 32 31 2e 38 2d 34 2e 30 37 63 2d 31 2e 33 35 2d 2e 34 33 2d 32 2e 34 2d 2e 37 37 2d 33 2e 32 2d 2e 39 34 56 38 32 2e 38 31 Data Ascii: H48a1,1,0,0,0,0,2H64.1a1.9,1.9,0,0,1,1.9,1.9v3.19A1.9,1.9,0,0,1,64.1,106H47a1,1,0,0,0,0,2H59a2,2,0,0,1,2,2v1.39a1.82,1.82,0,0,1-1.72,1.8c-.05,0-5.36.65-12.47.92-1,0-1.89,0-2.81,0-.68,0-1.34,0-2,0a74.67,74.67,0,0,1-21.8-4.07c-1.35-.43-2.4-.77-3.2-.94V82.81
2023-12-28 16:22:28 UTC	607	IN	Data Raw: 2d 31 2e 39 32 68 31 30 2e 37 36 61 38 32 2e 31 36 2c 38 32 2e 31 36 2c 30 2c 30 2c 30 2c 31 30 2e 36 37 2d 2e 37 39 68 2e 31 36 6c 2e 38 34 2d 2e 31 33 2e 35 2d 2e 30 38 61 31 2c 31 2c 30 2c 30 2c 30 2d 2e 33 32 2d 32 6c 2d 2e 33 33 2e 30 35 2d 2e 35 39 2e 30 39 61 32 30 2e 31 31 2c 32 30 2e 31 31 2c 30 2c 30 2c 30 2d 35 2e 32 33 2d 32 2e 35 32 6c 2d 2e 37 36 2d 2e 32 38 63 2d 32 2e 31 33 2d 2e 38 2d 34 2e 36 38 2d 32 2d 35 2e 34 38 2d 34 2e 33 35 6c 2d 2e 30 36 2d 2e 32 36 2c 30 2d 2e 31 61 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 2e 37 39 2d 32 2e 32 34 2c 31 2e 37 34 2c 31 2e 37 34 2c 30 2c 30 2c 31 2c 31 2e 35 31 2d 2e 36 37 6c 31 33 2e 35 32 2c 34 2e 34 31 2e 31 31 2c 30 61 31 38 2e 38 38 2c 31 38 2e 38 38 2c 30 2c 30 2c 31 2c 33 2e 31 39 2c Data Ascii: -1.92h10.76a82.16,82.16,0,0,0,10.67-.79h.16l.84-.13.5-.08a1,1,0,0,0-.32-2l-.33.05-.59.09a20.11,20.11,0,0,0-5.23-2.52l-.76-.28c-2.13-.8-4.68-2-5.48-4.35l-.06-.26,0-.1a2.52,2.52,0,0,1,.79-2.24,1.74,1.74,0,0,1,1.51-.67l13.52,4.41.11,0a18.88,18.88,0,0,1,3.19,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50145	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	882	OUT	GET /lp/global/img/start_menu_w10_white_theme.png HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
2023-12-28 16:22:28 UTC	358	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/png Content-Length: 83450 Connection: close Last-Modified: Mon, 08 May 2023 14:44:21 GMT ETag: "64590ac5-145fa" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:28 UTC	16026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 db 00 00 01 ca 08 03 00 00 00 e5 cc 77 39 00 00 03 00 50 4c 54 45 ec f5 f9 ee f6 fa ff ff ff fa fd fe a5 d1 e5 9c cc e1 9a c8 df a7 cb e1 87 c0 db 96 ca e0 a1 ca e1 94 c4 dd 8c c2 dc 9f cf e3 af d7 e8 ff 18 0e 4c 62 f9 aa d4 e7 7f bd d9 b2 d2 e5 fe f6 fb fb f4 f7 76 bb d6 eb f1 f6 f0 f7 fc ab ce e3 8f c6 df ff f7 f5 fd ef f7 f6 fc fe dc 29 1e ff ef fc f4 f5 f9 f6 f8 fc 20 2f 48 fe f4 ef f1 df e8 e8 dc df f0 e0 e2 fe e6 da ff ef ea f8 ed f2 00 ba fe f9 e8 e6 e6 ee f3 ce d0 d4 07 04 06 fe ec e2 01 7d f3 ff 81 ee fe 9a f9 e1 df e6 00 7c e0 02 c9 fe 01 ab fe 25 37 4c a2 c5 d9 ff a6 fc dc e0 ee e2 e9 ef 9c 29 73 00 83 fa aa 2f 80 fc 77 e3 fc e7 f7 02 9d ff f5 e1 ec ff b2 fc 8e 22 66 c3 38 97 b5 dd ec 00 Data Ascii: PNGIHDRw9PLTELbv) /H}\|%7L)s/w"f8
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 5a b7 17 57 44 fc c8 4c f8 9f 15 df 66 88 ef b2 07 fe 0c bf 33 d7 ad b7 26 d9 6c 93 d4 83 ed 07 48 bf ed f9 93 e6 55 a2 88 97 fe a5 dd fc 0c cd 96 6c 3d 71 d9 7e c4 ea 76 cf f6 5b 03 8f 97 c1 6d 1f e5 71 3a ee f9 13 54 30 0d de 58 91 0a b4 8b a9 4c ba b9 40 20 3e 1e fb ce 80 2b 41 3c 76 34 61 20 2d b7 f5 db 43 51 55 fc a2 24 37 9d f7 34 d8 6e 81 92 4d e8 c7 e3 25 17 e7 94 57 f2 8f ef de e8 e3 97 57 64 3e c5 47 59 9e 78 80 13 51 9a b0 bc 1b 3d 9f ea 2b 35 dd f1 4f fe 0b 23 26 2d e1 c4 fa 88 6d ea b6 80 6d 8b ea 45 68 0f 78 63 99 0f 8b b7 b5 27 9a 32 61 97 29 d6 27 a9 db 58 68 4b 46 ca 8d 83 1e 95 e8 a9 c1 ef 44 9c e1 36 4f 9e 55 ee 8b e6 0c 1c 27 ba 47 6d 37 e4 9b 0c ba 68 4a 7a f7 96 c6 2f af 7a 74 0f ec 98 3d cb 3b c3 99 8d 4f 0f b6 70 6a bc a4 ef ff 27 Data Ascii: ZWDLf3&lHUl=q~v[mq:T0XL@ >+A<v4a -CQU$74nM%WWd>GYxQ=+5O#&-mmEhxc'2a)'XhKFD6OU'Gm7hJz/zt=;Opj'
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: dc 84 da 82 70 e7 b3 38 76 31 e4 b7 1d c8 1e 75 0d 10 c5 a3 3f a4 41 b4 12 50 71 6d 91 2f 7f 65 ab fc 88 1e f2 b1 a4 45 b2 fd 05 a5 1d 06 bd d1 88 3d 2b 5c 1e 85 c2 35 82 2d bc 6b a0 9f a5 b6 65 4e e4 b7 d9 61 7a c4 82 64 33 3d c2 f9 c8 ad c6 5a 6c 5b 78 f5 ce 41 77 b5 5d 12 6f d0 7d 7e 45 77 9e 40 a1 74 cb 97 fc 74 79 69 ba ef 92 72 df 59 a3 dc d9 70 d2 d8 be 1d 89 40 0a f7 23 26 dc 5a 58 f2 f1 9f 08 b7 37 23 75 a6 c4 2f e3 46 d1 25 b8 1d d9 a6 d9 5e b7 b3 18 91 7c 0b 6e bf a8 55 47 38 c8 87 a4 27 39 ed 44 b1 f7 dd fa 09 57 90 a4 20 f1 59 7e 5b 5b ca 0c ec 6a bd 76 d3 6d b3 61 e0 4f ec 34 0d d9 3c 22 c0 b1 89 c1 1e ed 76 04 bb e0 94 8d 05 c6 8f 76 33 37 f2 9f 28 77 a8 d8 36 b4 d7 e7 9b 58 a3 46 e5 ad c9 c4 cf b7 5c e4 e8 7e 5d e2 2d ba 29 dd bf ec f3 f2 Data Ascii: p8v1u?APqm/eE=+\5-keNazd3=Zl[xAw]o}~Ew@ttyirYp@#&ZX7#u/F%^\|nUG8'9DW Y~[[jvmaO4<"vv37(w6XF\~]-)
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: dc 52 2d de d4 6d ee 95 02 98 a9 81 ee 8e 4c f7 48 25 6d 32 25 c8 2d 66 94 e3 23 54 6c 4a b7 56 66 02 95 71 c7 b6 bc 1e 00 9e 03 d9 ce 72 7a bc 98 e9 1f 80 8e a7 4d be 98 35 dd 32 ce 98 4c 61 64 6c 20 35 e2 a5 18 75 28 7c d3 6f 77 9b 85 03 c6 0c 60 55 df e4 4b 06 d2 3f 3e 96 22 db 6d 43 1d f7 95 62 b6 81 36 d9 46 c7 d9 24 c2 b2 7d 70 9d 0a b7 4f 37 64 7b be 2f db d4 6d b0 7d c3 4e c6 aa 19 5f b6 21 dc 64 7b f3 36 81 3b 02 19 09 6e 99 4a ee fe c3 f1 6d 78 45 b6 7d e1 e6 5c d2 f3 db a3 6b 5f 7d d5 55 9e 6e 5f 10 f9 ed 8f bc 09 6c 4b c4 9e e4 a9 60 5b 42 74 5b 45 5b ba 40 b8 99 fa 93 40 07 ae 5d c5 47 0a b7 63 9b 72 4b 7a 5b 09 37 24 3d e9 bd d2 74 9f ff 67 38 c2 79 2e c1 2e 49 2a de 59 5e 04 a8 41 ba 07 25 fa 95 6d ee 27 b1 ac 1a 54 49 40 6b 45 a3 d8 19 43 Data Ascii: R-mLH%m2%-f#TlJVfqrzM52Ladl 5u(\|ow`UK?>"mCb6F$}pO7d{/m}N_!d{6;nJmxE}\k_}Un_lK`[Bt[E[@@]GcrKz[7$=tg8y..I*Y^A%m'TI@kEC
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 36 55 9f ed b5 f5 d9 de bb 88 6e 3b 15 f5 3d 73 2d c8 c0 e1 2f cd 91 f1 3d f5 d8 56 b4 cd 03 6c 7f 02 10 7f ea fd 1a 24 fb 0d 9f b8 e6 a9 16 d9 81 5e 7f c1 9a 43 92 6f ab 5c 63 b1 fd 44 6e 47 08 55 7b d3 a6 3e 41 7b 41 4b 82 30 b2 fd cd c0 91 70 9f 24 aa ed 0b c9 36 42 64 db d1 ed 5f 6a 49 12 1d 65 9b ce 84 74 eb 8b ca 34 bd cd 5d 93 c4 d9 46 9b 4b 5e b9 64 4a 75 5b f0 6d 56 b2 41 b5 2a 72 50 94 04 e3 d2 a9 c5 90 24 8a fe 33 4a 6e b3 3c a2 16 bf 12 b5 31 15 3b ec c3 97 5c 63 a1 b6 88 36 88 5e a5 5e 1b da bd 4e 74 bb b6 37 01 6c 63 63 c2 33 07 db 7d 8d 4a 16 a0 14 ab d8 6c d0 0f c8 bb ba 22 29 50 db d9 d5 d5 e9 25 fd 54 a4 0b e1 e5 aa 58 30 95 2e 55 4b 55 ff f5 5b 4e cd f4 a1 2a 39 3e 46 bf 6d 73 7a 48 d9 8b 1d 3d 1a ab 8d 96 70 36 79 5e ba 4d bb dd 70 72 Data Ascii: 6Un;=s-/=Vl$^Co\cDnGU{>A{AK0p$6Bd_jIet4]FK^dJu[mVArP$3Jn<1;\c6^^Nt7lcc3}Jl")P%TX0.UKU[N9>FmszH=p6y^Mpr
2023-12-28 16:22:28 UTC	1888	IN	Data Raw: 0e 50 ed 15 dd d0 b2 3d 5b cd e1 d9 3a 4f d2 3c 07 28 f3 24 73 ff 5e 92 b3 f2 64 1b ff 06 1e ab 8a 64 b1 bf 34 aa a2 b2 56 1c f4 06 69 56 01 d7 83 1c 6c 57 41 6c df 3d 56 c4 f0 e3 04 c1 b7 05 7a d0 43 2c 52 a5 38 9b 83 ec 32 ef 61 a4 4a ac 61 97 45 fc b7 f6 ed 5d 6c d3 b5 59 71 9e db 17 e3 6d c5 16 5d 14 7a f5 69 bb c0 e6 63 24 ed 5c eb 9a e4 ee a7 48 b6 2d b5 ef f4 6d a5 5b c4 db 48 77 4d 52 b3 36 50 d8 18 39 8b bb 94 68 46 03 d3 41 74 3d ac 34 92 3e f2 f2 e7 5e 3f b1 87 30 7a de 8c 54 ab 61 1d 6f 0f 93 6a 86 31 a8 7b 41 7f 66 66 49 3a 5c 2e 07 33 93 8c c7 93 51 bf 1c 2f 93 7e 25 5f f6 31 ee 4f fb 8b b9 b5 ee 94 31 09 3e 26 be bd e2 fc 36 d9 16 71 ed 66 be 3f 94 85 cb 31 27 40 80 6b 56 c1 ab 01 31 ea 12 20 c7 a9 09 52 18 7a 99 03 eb 20 11 6a 83 b2 08 ca Data Ascii: P=[:O<($s^dd4ViVlWAl=VzC,R82aJaE]lYqm]zic$\H-m[HwMR6P9hFAt=4>^?0zTaoj1{AffI:\.3Q/~%_1O1>&6qf?1'@kV1 Rz j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50146	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	531	OUT	GET /fa/img/laptop_white_display_black.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
2023-12-28 16:22:28 UTC	358	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/png Content-Length: 87344 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-15530" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:28 UTC	16026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 52 00 00 02 03 08 03 00 00 00 39 5d df d3 00 00 03 00 50 4c 54 45 00 00 00 c8 c9 ce 04 04 05 02 02 02 d3 d6 db 02 02 02 cc cf d4 d0 d3 d7 d5 d7 dc 01 01 01 02 02 02 cd ce d4 cb cd d3 bd bf c5 b1 b3 ba ee ef f1 b1 b4 b9 f6 f6 f7 58 57 5a 7d 7c 7f 02 03 05 e8 f2 f8 ea f3 f9 06 08 0c f9 fb fc e6 f1 f7 fd fe fe 9d c9 de a2 cd e1 17 19 20 92 b5 ca 97 c6 dc 89 be d6 a9 d0 e3 0d 0e 13 4e 63 f3 ff 1a 10 8f b9 cf 98 b7 cc 12 14 19 f2 f1 f6 ef f5 fa 86 b9 d2 8e c2 da d8 d8 dd 8a b5 cc d3 d2 d8 98 bb d0 83 b4 cd f2 fa fd f9 ee f4 a1 be d1 81 ba d5 95 c1 d7 91 bd d4 74 b2 cb fb f0 ed ff e9 f7 7e b6 d0 fc f3 f9 1d 1f 26 20 32 4c d4 27 1d 7d b3 cc fd f5 f0 de dd e1 58 58 5f 5d 5d 65 fe eb e4 01 73 d8 cd cd d3 63 Data Ascii: PNGIHDRR9]PLTEXWZ}\| Nct~& 2L'}XX_]]esc
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 74 7d 7a 3c 6a 2f 9c 24 ed 65 47 e9 ea b8 a2 e2 f0 e1 fa 86 c3 66 49 c5 85 0b 39 4d a7 87 35 39 d3 be dd 01 41 ac 9e c1 87 12 8a b4 18 13 91 e2 62 7c a9 b3 5e 99 84 24 61 e8 d3 df 63 82 98 c0 c5 30 8a 6c fd 22 e1 ef fc f4 4f 68 e2 56 70 52 a0 ac c1 a3 02 56 de 9e 79 bb 2a 75 ab b9 9c b0 9f 4c fe 6e bc 91 a1 42 0e 05 f6 4d 41 a4 a4 68 d0 4f 2f 85 c9 03 4a 2b 44 4a 79 82 4a 21 8a ae 11 bf ee ff 81 54 ef 4b fd 2a 52 bf fb b3 bc 5b 59 dc 34 d8 bf ab 36 40 bf 0b a9 cb fb b9 54 48 94 1f 32 16 4f d7 0f 8c 1e 6e 82 29 d5 ed ec 8a b8 3e 26 a2 d9 65 f3 f0 81 62 7d a1 39 a1 7a 1a df d0 f0 ab cd 34 3a 0e cb c3 f4 a0 2d 0f 23 7e e9 b4 5b b6 e1 61 32 7d 38 3c 2a 93 a3 f5 cd 75 4a ac 7a 8b a7 57 c1 0d 41 7e 48 ab d3 f1 85 74 75 4d f7 74 73 ba a6 e4 a4 99 3d 3d 3b 0d 46 Data Ascii: t}z<j/$eGfI9M59Ab\|^$ac0l"OhVpRVyuLnBMAhO/J+DJyJ!TKR[Y46@TH2On)>&eb}9z4:-#~[a2}8<*uJzWA~HtuMts==;F
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: dd de d7 7f 67 d2 12 5a 26 ef 0c 33 83 9f df d4 5f 06 2f 18 40 53 71 62 22 c9 38 7d ae 6e 5f 47 2a 2c 21 25 81 09 0c ab cd 5a 3b 21 a5 4c 51 dd 14 55 2c 55 af 33 55 91 13 e8 a1 12 a1 5a 7e 5d 98 9a 8d 99 82 4e 11 53 88 a6 c8 f5 93 70 ca 90 d2 2b be 87 bf d6 70 ca 9f f5 63 d7 ef d2 4b e5 48 92 25 fc f2 c2 2c d1 e8 79 92 06 a2 8c 23 8c 20 aa 11 52 33 5b 1f 29 86 ca 21 85 63 48 3a 87 42 c1 c0 94 0f 9e 80 51 14 5f 19 3b 1e 28 7b ac df 92 47 2c a5 4c 25 21 b4 96 43 9a e6 f7 d0 d3 72 52 2e 85 ae ea 9e 94 53 80 f4 ac 35 a5 64 60 fe be e8 90 f0 ef 21 50 7c e5 c8 89 9a 0c 58 20 3d 61 12 a5 8e 1f 68 a2 0a 86 a4 9d bc dd 98 ab d4 dd 60 8a 1a 17 aa 27 2c 55 4b 39 54 5c d7 33 a5 5a b5 4e a8 c8 f9 fb fd 99 43 60 0a 6f a5 80 ef 07 99 12 a6 e0 fa 29 54 8c 14 c9 94 1d 4c Data Ascii: gZ&3_/@Sqb"8}n_G*,!%Z;!LQU,U3UZ~]NSp+pcKH%,y# R3[)!cH:BQ_;({G,L%!CrR.S5d`!P\|X =ah`',UK9T\3ZNC`o)TL
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 4e a5 0b 53 72 ec 2b 24 99 e9 17 07 a5 6a b7 0d 64 a2 13 a9 38 f1 d3 d4 8f ee 39 3b 63 69 f9 e5 7b d3 b9 92 7b 54 3a 69 22 46 3e f3 d3 f0 3d 49 21 dc 06 c4 b8 96 82 c1 86 c8 e7 47 e1 42 60 e4 61 d5 99 e3 27 fe b7 38 81 fa 95 98 7e d3 e5 c4 88 72 8e 9f f1 05 bb 10 33 8d 24 9d f9 24 fd 22 71 44 99 c0 11 2e 20 75 c2 54 43 ee e5 97 23 62 3b e6 47 60 ed a5 ff 19 f8 08 d3 03 1e 7a 3e 2f 3d b5 23 62 b2 e3 8a 73 65 b6 9c 28 4d a1 13 dd 64 8a b5 14 5b 28 bc 4c 21 f5 b3 f8 f8 46 4d fb 36 87 bc 8f 2a f5 a4 22 75 ed c5 9f 8a db 87 6f 29 52 4f aa 48 89 4a 5d 6a 2a 05 a4 ae 53 a4 16 52 a4 d2 87 52 70 ad 97 8e 1f 98 22 52 54 a9 d7 a0 52 42 54 c8 fc ce 4f 55 ea 16 87 94 ad f4 62 e2 14 bd 5b 14 34 99 4a 01 2d 50 c5 1d 88 0e a5 55 6b a9 73 5a db 6d b5 1e 23 43 a5 a6 15 29 Data Ascii: NSr+$jd89;ci{{T:i"F>=I!GB`a'8~r3$$"qD. uTC#b;G`z>/=#bse(Md[(L!FM6"uo)ROHJ]jSRRp"RTRBTOUb[4J-PUksZm#C)
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 8c 14 2e 9c 40 0a 0d 7e 48 f9 58 a0 e8 20 79 e2 a4 8f e3 62 e0 64 1e b2 88 c3 e2 89 81 c2 1a 5e 5b 1d 25 85 94 5d a4 4c b3 6f a5 48 bd c4 44 a9 22 25 44 09 52 66 da 07 9e 68 b0 13 e5 a0 53 76 7d b2 af e9 fd 0b 8e 5f d7 1a 45 ca 49 a5 2c 52 fc 7e fe c4 21 5f 16 3d 8c 91 ba 4a 4a e1 a9 9a 44 be d8 9c 90 0e 74 0c 2a 4e 80 09 8f d4 8d 04 a0 b8 96 62 c7 6f 6a 66 06 93 bd 43 9a 15 de 7a fc a3 7f ba fb 55 de 20 3e e4 18 7d 3b 15 de 3f 18 d4 c2 4d 9d b9 58 a6 d8 40 48 15 0f d7 96 fa bc b9 42 53 08 0d 80 ae 60 83 8a 14 f7 1f a1 53 82 a9 e1 9b 8a 90 d1 f8 f7 5f a8 54 3f ab 94 29 51 26 4b b8 00 10 0e 46 49 f4 89 05 ca a9 8c ba fb 4e 6b 0d af 94 51 4c 94 18 e8 ca a7 79 a9 0f 89 89 22 a6 0c a2 3e 63 a2 54 91 b2 e6 78 55 91 7a f8 24 43 a1 f8 52 80 72 d0 29 12 a7 55 a8 Data Ascii: .@~HX ybd^[%]LoHD"%DRfhSv}_EI,R~!_=JJDt*NbojfCzU >};?MX@HBS`S_T?)Q&KFINkQLy">cTxUz$CRr)U
2023-12-28 16:22:28 UTC	5782	IN	Data Raw: a9 b3 eb c0 a7 ef 10 58 09 3c 21 4e f8 b7 68 25 e3 04 7b 68 c7 bc 49 0f 59 f8 61 a5 78 ab 15 a3 0e 6e a4 70 bd 64 1e c1 85 ea 1d a4 0d d7 bf 12 75 6c 7f 98 7b 2a e6 04 ce 60 7a c2 8d 95 d5 d7 4c 4d d9 70 63 f1 a0 93 86 b0 48 33 db a2 a2 7c 5a 15 97 32 5d 61 b5 10 8c 47 a1 a9 1d 25 7e 08 46 94 d1 db c2 8d 1a 23 47 a9 b8 db df 32 28 ad dd c0 cb 05 3d c2 ad f6 e5 25 dc 65 05 a7 95 69 63 1f 56 59 f5 6d 57 c8 a2 a9 cb 98 82 aa cd 2b 06 eb e5 45 9d 95 61 fd a7 5f f6 29 ae 6e d4 74 a9 d0 2c cb 94 8f f5 cb 07 86 11 2f 0d 62 73 d9 a8 3e 1a 0d 97 52 b6 cb 25 a5 39 4d 49 1d 3d 4d aa 9e f7 30 2b 29 42 57 5a ad 85 b6 57 c9 8a 06 54 5c 44 6d 6b 99 db 24 cd 54 f0 72 29 72 a8 45 ea 59 5c 02 a5 2c 56 75 09 35 eb 30 43 25 61 59 bd a2 15 55 c6 6b 4e a7 7a 65 0a 96 f5 c0 74 Data Ascii: X<!Nh%{hIYaxnpdul{*`zLMpcH3\|Z2]aG%~F#G2(=%eicVYmW+Ea_)nt,/bs>R%9MI=M0+)BWZWT\Dmk$Tr)rEY\,Vu50C%aYUkNzet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50149	18.160.156.99	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	549	OUT	GET /modules.618aa075c4d9b6424e07.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:28 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 224876 Connection: close Date: Thu, 21 Dec 2023 10:10:29 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "0c70a849c2209468573a7621df9fc697" Last-Modified: Thu, 21 Dec 2023 10:09:33 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 525eb9a537e4a00b75b84ea3084cdee8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P1 X-Amz-Cf-Id: YdK4t1tB3C6JUiFjU2hZkdDD6MtqFlZ_Qu1mzya3CYOVFDYY_-mVsg== Age: 627119
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 31 38 61 61 30 37 35 63 34 64 39 62 36 34 32 34 65 30 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.618aa075c4d9b6424e07.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 69 28 65 29 7d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6a 2e 6c 6f 61 64 65 72 2e 72 65 67 69 73 74 65 72 4d 6f 64 75 6c 65 28 22 43 6f 6d 6d 61 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 2c 74 3d 7b 7d 2c 6e 3d 77 69 6e 64 6f 77 2e 68 6a 2e 71 2c 61 3d 5b 22 72 65 61 64 79 22 2c 22 73 74 61 74 65 43 68 61 6e 67 65 22 2c 22 74 72 69 67 67 65 72 22 2c 22 73 65 73 73 69 6f 6e 5f 65 76 65 6e 74 22 5d 2c 73 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: tion"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},i(e)}hj.tryCatch((function(){hj.loader.registerModule("Command",function(){var e={},t={},n=window.hj.q,a=["ready","stateChange","trigger","session_event"],s=!1;function
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 61 67 2e 73 74 61 72 74 28 29 7d 29 2c 22 62 65 68 61 76 69 6f 72 2d 64 61 74 61 2e 65 76 65 6e 74 73 2e 65 6e 61 62 6c 65 52 65 63 6f 72 64 69 6e 67 22 29 7d 2c 56 3d 6e 28 36 35 39 37 29 2c 57 3d 6e 28 36 35 36 39 29 2c 7a 3d 6e 28 37 39 39 33 29 2c 42 3d 6e 28 32 34 37 31 29 2c 46 3d 6e 28 33 35 37 32 29 3b 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 Data Ascii: ag.start()}),"behavior-data.events.enableRecording")},V=n(6597),W=n(6569),z=n(7993),B=n(2471),F=n(3572);function G(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.g
2023-12-28 16:22:28 UTC	14808	IN	Data Raw: 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 72 65 6d 6f 76 65 64 2e 68 61 73 28 65 29 3f 28 74 2e 72 65 6d 6f 76 65 64 2e 64 65 6c 65 74 65 4e 6f 64 65 28 65 29 2c 74 2e 6d 61 79 62 65 4d 6f 76 65 64 2e 73 65 74 28 65 2c 21 30 29 29 3a 74 2e 61 64 64 65 64 2e 73 65 74 28 65 2c 21 30 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 29 7b 21 65 7c 7c 74 2e 6f 6c 64 50 72 65 76 69 6f 75 73 2e 68 61 73 28 65 29 7c 7c 74 2e 61 64 64 65 64 2e 68 61 73 28 65 29 7c 7c 74 2e 6d 61 79 62 65 4d 6f 76 65 64 2e 68 61 73 28 65 29 7c 7c 6e 26 26 28 74 2e 61 64 64 65 64 2e 68 61 73 28 6e 29 7c 7c 74 2e 6d 61 79 62 65 4d 6f 76 65 64 2e 68 61 73 28 6e 29 29 7c 7c 74 2e 6f 6c 64 50 72 65 76 69 6f 75 73 2e 73 65 74 28 65 2c 6e 29 7d 7d 29 29 Data Ascii: forEach((function(e){t.removed.has(e)?(t.removed.deleteNode(e),t.maybeMoved.set(e,!0)):t.added.set(e,!0)}))}function r(e,n){!e\|\|t.oldPrevious.has(e)\|\|t.added.has(e)\|\|t.maybeMoved.has(e)\|\|n&&(t.added.has(n)\|\|t.maybeMoved.has(n))\|\|t.oldPrevious.set(e,n)}}))
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 5b 30 5d 2c 74 5b 31 5d 29 7d 29 29 7d 28 65 2c 72 2c 75 6e 64 65 66 69 6e 65 64 29 2c 21 30 29 3a 74 28 65 2c 6e 2c 72 29 7d 29 7d 29 29 2c 4c 2e 67 65 74 54 72 65 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 72 6f 6f 74 49 64 2c 72 3d 74 2e 63 68 69 6c 64 72 65 6e 3b 72 65 74 75 72 6e 20 65 28 71 2e 64 65 73 65 72 69 61 6c 69 7a 65 44 6f 63 75 6d 65 6e 74 28 6e 2c 72 2c 21 30 29 29 7d 29 29 7d 29 2c 22 54 72 65 65 4d 69 72 72 6f 72 48 6f 73 74 2e 67 65 74 4d 69 72 72 6f 72 65 64 44 6f 63 75 6d 65 6e 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 57 28 65 29 7b 72 65 74 75 72 6e 20 57 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d Data Ascii: .setAttribute(t[0],t[1])}))}(e,r,undefined),!0):t(e,n,r)})})),L.getTree((function(t){var n=t.rootId,r=t.children;return e(q.deserializeDocument(n,r,!0))}))}),"TreeMirrorHost.getMirroredDocument");function W(e){return W="function"==typeof Symbol&&"symbol"=
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 74 2e 68 65 69 67 68 74 7d 7d 29 2c 22 63 6f 6d 6d 6f 6e 22 29 2c 65 2e 67 65 74 44 6f 63 75 6d 65 6e 74 53 69 7a 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6e 3b 69 66 28 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 74 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 Data Ascii: t\|\|document.documentElement.clientHeight\|\|t.height}}),"common"),e.getDocumentSize=hj.tryCatch((function(){var t,n;if(document&&document.documentElement&&document.documentElement.clientWidth)t=document.documentElement.clientWidth,n=document.documentElement
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 52 65 74 72 69 65 73 3a 35 2c 64 65 6c 61 79 3a 33 65 33 2c 66 69 72 73 74 41 74 74 65 6d 70 74 44 65 6c 61 79 3a 30 2c 62 61 73 65 45 78 70 6f 6e 65 6e 74 3a 32 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 48 6f 74 6a 61 72 57 65 62 53 6f 63 6b 65 74 20 72 65 71 75 69 72 65 73 20 61 20 66 6c 75 73 68 20 63 61 6c 6c 62 61 63 6b 22 29 3b 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 65 64 3d 21 31 2c 74 68 69 73 2e 5f 63 6f 6e 6e 65 63 74 69 6e 67 3d 21 31 2c 74 68 69 73 2e 5f 69 73 52 65 63 6f 6e 6e 65 63 74 69 6e 67 3d 21 31 2c 74 68 69 73 2e 5f 63 6c 6f 73 65 64 50 65 72 6d 61 6e 65 6e 74 6c 79 3d 21 31 2c 74 68 69 73 2e 73 65 73 73 69 6f 6e 54 69 6d 65 64 Data Ascii: Retries:5,delay:3e3,firstAttemptDelay:0,baseExponent:2};function y(e){var t=this;if(!e)throw new Error("HotjarWebSocket requires a flush callback");this._connected=!1,this._connecting=!1,this._isReconnecting=!1,this._closedPermanently=!1,this.sessionTimed
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 6e 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 6e 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 6e 7c 7c 22 53 65 74 22 3d 3d 3d 6e 3f 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 6e 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 3f 61 28 65 2c 74 29 3a 76 6f 69 64 20 30 7d 7d 28 73 2c 6c 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 Data Ascii: slice(8,-1);return"Object"===n&&e.constructor&&(n=e.constructor.name),"Map"===n\|\|"Set"===n?Array.from(e):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?a(e,t):void 0}}(s,l)\|\|function(){throw new TypeError("Invalid attempt to destructu
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 7d 7d 7d 2c 35 36 37 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 38 36 39 32 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 74 6f 72 61 67 65 41 63 63 65 73 73 6f 72 2c 6e 3d 65 2e 73 65 72 69 61 6c 69 7a 65 72 2c 6f 3d 65 2e 64 65 73 65 72 69 61 6c 69 7a 65 72 3b 72 65 74 75 72 6e 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 28 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 65 3f 6e 75 6c 6c 3a 76 6f 69 64 20 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 6f 28 28 30 2c 72 2e 44 69 29 28 65 29 29 7d 63 61 74 63 68 Data Ascii: }}},5674:function(e,t,n){"use strict";n.d(t,{q:function(){return o}});var r=n(8692),o=function(e){var t=e.storageAccessor,n=e.serializer,o=e.deserializer;return{get:function(){var e=t.get();if(!e)return null===e?null:void 0;try{return o((0,r.Di)(e))}catch
2023-12-28 16:22:28 UTC	16384	IN	Data Raw: 6d 65 73 73 61 67 65 2e 69 6e 64 65 78 4f 66 28 74 29 3f 74 2e 72 65 70 6c 61 63 65 28 74 2c 65 2e 6d 65 73 73 61 67 65 29 3a 22 22 2e 63 6f 6e 63 61 74 28 65 2e 6d 65 73 73 61 67 65 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 74 29 3a 74 7d 2c 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 5f 28 29 28 65 29 7d 2c 74 72 75 6e 63 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3c 3d 74 3f 65 3a 22 22 2e 63 6f 6e 63 61 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 74 2d 33 29 2c 22 2e 2e 2e 22 29 7d 2c 68 61 73 52 65 61 63 68 65 64 4f 76 65 72 66 6c 6f 77 3a 66 75 6e 63 74 69 Data Ascii: message.indexOf(t)?t.replace(t,e.message):"".concat(e.message," ").concat(t):t},stringify:function(e){return e instanceof Error?e.toString():_()(e)},truncate:function(e,t){return e.length<=t?e:"".concat(e.substring(0,t-3),"...")},hasReachedOverflow:functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50151	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2363	OUT	GET /images/backgrounds/home_unicorn/collaborate.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 4336 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-10f0" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13497 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246d5e337301-DFW
2023-12-28 16:22:28 UTC	1036	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 6f 6d 65 70 61 67 65 20 2d 20 66 65 61 74 75 72 65 73 20 62 75 6c 6c 65 74 73 20 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 32 22 3e 3c 67 20 69 64 3d 22 6f 75 74 6c 69 6e 65 73 22 3e 3c 63 69 72 63 6c 65 20 69 64 3d 22 62 67 22 20 63 6c 61 73 73 3d 22 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab2"><g id="outlines"><circle id="bg" class="
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 39 30 2e 37 39 2c 31 31 34 2c 38 36 68 2d 35 56 38 32 61 31 32 2c 31 32 2c 30 2c 30 2c 31 2c 31 32 2d 31 32 68 37 56 36 38 68 2d 37 41 31 34 2c 31 34 2c 30 2c 30 2c 30 2c 31 30 37 2c 38 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 37 30 2c 35 35 68 37 2e 34 33 61 31 2c 31 2c 30 2c 30 2c 30 2c 31 2d 31 56 35 30 2e 32 35 61 31 33 2c 31 33 2c 30 2c 30 2c 30 2c 31 38 2e 34 35 2c 30 56 35 34 61 31 2c 31 2c 30 2c 30 2c 30 2c 31 2c 31 68 37 2e 34 33 61 31 2c 31 2c 30 2c 30 2c 30 2c 2e 35 36 2d 31 2e 38 33 63 2d 2e 30 39 2d 2e 31 31 2d 2e 37 37 2d 31 2d 31 2e 31 35 2d 34 2e 31 37 48 31 31 34 56 31 37 48 38 38 76 36 2e 32 39 63 2d 31 30 2e 38 38 2e 33 2d 31 37 2e 31 34 2c 34 2e 30 38 2d 31 37 2e 31 34 2c 32 30 2e 34 39 2c Data Ascii: 90.79,114,86h-5V82a12,12,0,0,1,12-12h7V68h-7A14,14,0,0,0,107,82Z"/><path class="cls-2" d="M70,55h7.43a1,1,0,0,0,1-1V50.25a13,13,0,0,0,18.45,0V54a1,1,0,0,0,1,1h7.43a1,1,0,0,0,.56-1.83c-.09-.11-.77-1-1.15-4.17H114V17H88v6.29c-10.88.3-17.14,4.08-17.14,20.49,
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 30 2c 31 2c 33 2e 30 37 2c 31 2e 35 35 6c 2e 34 33 2e 36 32 2e 37 31 2d 2e 32 35 61 35 2e 38 2c 35 2e 38 2c 30 2c 30 2c 31 2c 33 2e 34 2d 2e 31 31 2c 35 2e 38 36 2c 35 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 33 33 2c 33 2e 35 39 2c 31 35 2e 30 35 2c 31 35 2e 30 35 2c 30 2c 30 2c 31 2c 2e 30 36 2c 38 41 36 2e 34 31 2c 36 2e 34 31 2c 30 2c 30 2c 30 2c 33 37 2e 36 38 2c 37 34 2e 39 35 5a 4d 32 38 2c 35 36 48 35 30 56 38 34 48 34 30 2e 33 35 61 31 33 2c 31 33 2c 30 2c 30 2c 30 2c 31 2e 32 32 2d 33 2e 33 36 63 31 2d 32 2e 33 34 2c 32 2e 33 2d 37 2e 36 39 2e 37 37 2d 31 32 61 37 2e 37 39 2c 37 2e 37 39 2c 30 2c 30 2c 30 2d 34 2e 34 33 2d 34 2e 37 36 2c 37 2c 37 2c 30 2c 30 2c 30 2d 34 2e 31 36 2d 2e 31 32 41 36 2c 36 2c 30 2c 30 2c 30 2c 32 39 2e 32 38 2c 36 32 63 Data Ascii: 0,1,3.07,1.55l.43.62.71-.25a5.8,5.8,0,0,1,3.4-.11,5.86,5.86,0,0,1,3.33,3.59,15.05,15.05,0,0,1,.06,8A6.41,6.41,0,0,0,37.68,74.95ZM28,56H50V84H40.35a13,13,0,0,0,1.22-3.36c1-2.34,2.3-7.69.77-12a7.79,7.79,0,0,0-4.43-4.76,7,7,0,0,0-4.16-.12A6,6,0,0,0,29.28,62c
2023-12-28 16:22:28 UTC	562	IN	Data Raw: 30 39 2c 31 30 35 48 39 33 76 2d 31 2e 31 37 41 35 2e 38 33 2c 35 2e 38 33 2c 30 2c 30 2c 30 2c 38 37 2e 31 37 2c 39 38 48 37 33 2e 38 33 41 35 2e 38 33 2c 35 2e 38 33 2c 30 2c 30 2c 30 2c 36 38 2c 31 30 33 2e 38 33 56 31 30 35 48 35 37 2e 39 31 41 38 2e 39 32 2c 38 2e 39 32 2c 30 2c 30 2c 30 2c 34 39 2c 31 31 33 2e 39 31 56 31 35 33 63 30 2c 36 2e 34 2c 35 2e 32 35 2c 39 2e 37 31 2c 35 2e 34 38 2c 39 2e 38 35 41 31 2c 31 2c 30 2c 30 2c 30 2c 35 35 2c 31 36 33 68 38 30 61 2e 39 33 2e 39 33 2c 30 2c 30 2c 30 2c 2e 35 32 2d 2e 31 35 41 31 32 2e 31 37 2c 31 32 2e 31 37 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 35 33 56 31 31 33 2e 39 31 41 38 2e 39 32 2c 38 2e 39 32 2c 30 2c 30 2c 30 2c 31 33 32 2e 30 39 2c 31 30 35 5a 4d 37 30 2c 31 30 33 2e 38 33 41 33 2e 38 34 Data Ascii: 09,105H93v-1.17A5.83,5.83,0,0,0,87.17,98H73.83A5.83,5.83,0,0,0,68,103.83V105H57.91A8.92,8.92,0,0,0,49,113.91V153c0,6.4,5.25,9.71,5.48,9.85A1,1,0,0,0,55,163h80a.93.93,0,0,0,.52-.15A12.17,12.17,0,0,0,141,153V113.91A8.92,8.92,0,0,0,132.09,105ZM70,103.83A3.84

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50150	35.166.142.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:28 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0c4-57d2a5c630efe8f67f281a29 Strict-Transport-Security: max-age=15768000
2023-12-28 16:22:28 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50153	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2072	OUT	GET /images/icons/svg_dark/icons_sprite.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 37035 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-90ab" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 9952 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246d7945e99b-DFW
2023-12-28 16:22:28 UTC	1036	IN	Data Raw: 3c 73 76 67 0a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0a 77 69 64 74 68 3d 22 31 36 35 36 22 0a 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 44 65 66 69 6e 65 20 53 56 47 73 20 2d 2d 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 65 61 72 63 68 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 65 61 72 63 68 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a Data Ascii: <svgxmlns="http://www.w3.org/2000/svg"xmlns:xlink="http://www.w3.org/1999/xlink"width="1656"height="24"> ... Define SVGs --> <defs> ... search --> <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 2d 2d 20 6c 69 73 74 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6c 69 73 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 34 22 20 79 3d 22 35 22 20 77 69 64 74 68 3d 22 33 22 20 68 65 69 67 68 74 3d 22 33 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 34 22 20 79 3d 22 31 30 22 20 77 69 64 74 68 3d 22 33 22 20 68 65 69 67 68 74 3d 22 33 22 2f 3e 0a 20 20 20 Data Ascii: -- list --> <symbol id="list" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <rect x="4" y="5" width="3" height="3"/> <rect x="4" y="10" width="3" height="3"/>
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 35 2c 30 2c 31 2c 30 2c 31 32 2c 33 2e 37 5a 4d 38 2e 38 39 31 2c 31 37 2e 35 33 33 61 2e 35 39 33 2e 35 39 33 2c 30 2c 30 2c 31 2d 2e 38 38 32 2e 32 32 32 41 37 2e 30 31 39 2c 37 2e 30 31 39 2c 30 2c 30 2c 31 2c 35 2c 31 32 61 36 2e 39 2c 36 2e 39 2c 30 2c 30 2c 31 2c 2e 31 39 32 2d 31 2e 36 32 39 2e 35 39 31 2e 35 39 31 2c 30 2c 30 2c 31 2c 2e 39 37 39 2d 2e 32 38 36 4c 37 2e 34 31 2c 31 31 2e 32 35 37 61 2e 35 38 38 2e 35 38 38 2c 30 2c 30 2c 30 2c 2e 32 38 31 2e 31 34 37 6c 31 2e 37 38 33 2e 33 37 39 61 31 2e 31 37 31 2c 31 2e 31 37 31 2c 30 2c 30 2c 31 2c 2e 39 31 33 2e 39 36 6c 2e 31 36 34 2c 31 2e 30 32 38 61 2e 35 38 37 2e 35 38 37 2c 30 2c 30 2c 31 2d 2e 30 34 38 2e 33 34 33 5a 6d 37 2e 39 32 31 2d 31 2e 35 30 35 2d 31 2e 36 37 37 2d 31 2e 39 37 Data Ascii: 5,0,1,0,12,3.7ZM8.891,17.533a.593.593,0,0,1-.882.222A7.019,7.019,0,0,1,5,12a6.9,6.9,0,0,1,.192-1.629.591.591,0,0,1,.979-.286L7.41,11.257a.588.588,0,0,0,.281.147l1.783.379a1.171,1.171,0,0,1,.913.96l.164,1.028a.587.587,0,0,1-.048.343Zm7.921-1.505-1.677-1.97
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 63 74 20 78 3d 22 35 2e 30 30 38 22 20 79 3d 22 31 36 2e 30 30 35 22 20 77 69 64 74 68 3d 22 31 32 2e 39 39 32 22 20 68 65 69 67 68 74 3d 22 32 2e 39 39 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 31 2e 35 20 31 35 2e 30 30 39 20 31 38 20 38 20 31 32 2e 39 38 36 20 38 20 31 32 2e 39 38 36 20 34 2e 30 33 32 20 31 30 20 34 2e 30 33 32 20 31 30 20 38 20 35 20 38 20 31 31 2e 35 20 31 35 2e 30 30 39 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 68 61 72 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 68 61 72 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 Data Ascii: ct x="5.008" y="16.005" width="12.992" height="2.995"/> <polygon points="11.5 15.009 18 8 12.986 8 12.986 4.032 10 4.032 10 8 5 8 11.5 15.009"/> </symbol> ... share --> <symbol id="share" viewBox="0 0 24 24" preserveA
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 38 2e 36 35 2c 31 37 2e 30 33 6c 2d 33 2e 36 37 2d 33 2e 36 38 41 35 2e 39 34 32 2c 35 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 36 2c 31 30 61 36 2c 36 2c 30 2c 31 2c 30 2d 36 2c 36 2c 35 2e 39 2c 35 2e 39 2c 30 2c 30 2c 30 2c 32 2e 37 32 2d 2e 36 35 6c 33 2e 38 31 2c 33 2e 38 61 2e 39 34 32 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 2e 33 32 2c 30 6c 2e 38 2d 2e 38 41 2e 39 34 32 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 38 2e 36 35 2c 31 37 2e 30 33 5a 6d 2d 36 2e 39 39 2d 32 2e 37 34 41 34 2e 35 33 37 2c 34 2e 35 33 37 2c 30 2c 30 2c 31 2c 31 30 2c 31 34 2e 36 2c 34 2e 36 2c 34 2e 36 2c 30 2c 31 2c 31 2c 31 Data Ascii: d="M0 0h24v24H0z" fill="none"/> <path d="M18.65,17.03l-3.67-3.68A5.942,5.942,0,0,0,16,10a6,6,0,1,0-6,6,5.9,5.9,0,0,0,2.72-.65l3.81,3.8a.942.942,0,0,0,1.32,0l.8-.8A.942.942,0,0,0,18.65,17.03Zm-6.99-2.74A4.537,4.537,0,0,1,10,14.6,4.6,4.6,0,1,1,1
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 38 20 35 20 31 31 20 35 20 31 37 20 31 31 20 31 37 2e 35 20 31 31 2e 35 20 31 37 20 31 32 20 31 31 20 31 38 20 38 20 31 38 20 31 34 2e 35 20 31 31 2e 35 20 38 20 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 6d 61 6c 6c 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 6d 61 6c 6c 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 Data Ascii: "/> <polygon points="8 5 11 5 17 11 17.5 11.5 17 12 11 18 8 18 14.5 11.5 8 5"/> </symbol> ... small --> <symbol id="small" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" f
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 31 37 2e 37 31 31 48 38 2e 30 35 39 56 31 32 2e 34 71 30 2d 2e 39 31 33 2d 2e 31 34 39 2d 33 2e 36 34 38 68 2e 30 37 6c 32 2e 37 35 2c 38 2e 39 36 31 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 6c 61 72 67 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6c 61 72 67 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 Data Ascii: 17.711H8.059V12.4q0-.913-.149-3.648h.07l2.75,8.961Z"/> </symbol> ... large --> <symbol id="large" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <path d="M15
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2c 35 56 31 38 48 32 30 56 35 5a 4d 36 2c 37 48 31 38 76 35 6c 2d 33 2c 33 2d 33 2d 33 4c 38 2c 31 36 48 36 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 39 22 20 63 79 3d 22 31 30 22 20 72 3d 22 31 2e 36 38 37 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 6d 65 6e 75 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6d 65 6e 75 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 Data Ascii: fill="none"/> <path d="M4,5V18H20V5ZM6,7H18v5l-3,3-3-3L8,16H6Z"/> <circle cx="9" cy="10" r="1.687"/> </symbol> ... menu --> <symbol id="menu" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 31 2c 31 33 2e 35 63 30 2d 31 2e 39 33 2c 32 2e 30 31 2d 33 2e 35 2c 34 2e 35 2d 33 2e 35 53 32 30 2c 31 31 2e 35 37 2c 32 30 2c 31 33 2e 35 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 62 6f 6f 6b 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 62 6f 6f 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2c 31 38 61 34 Data Ascii: 1,13.5c0-1.93,2.01-3.5,4.5-3.5S20,11.57,20,13.5Z"/> </symbol> ... book --> <symbol id="book" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <path d="M12,18a4
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 34 2e 39 39 34 20 31 31 2e 35 20 31 30 20 36 2e 39 39 35 20 31 30 20 31 30 20 31 36 2e 30 30 31 20 31 30 20 31 36 2e 30 30 31 20 34 20 31 39 20 34 20 31 39 20 31 39 20 31 36 2e 30 30 31 20 31 39 20 31 36 2e 30 30 31 20 31 33 20 31 30 20 31 33 20 31 30 20 31 36 2e 30 30 35 20 34 2e 39 39 34 20 31 31 2e 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 66 69 6c 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 66 69 6c 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 Data Ascii: <path d="M0 0h24v24H0z" fill="none"/> <polygon points="4.994 11.5 10 6.995 10 10 16.001 10 16.001 4 19 4 19 19 16.001 19 16.001 13 10 13 10 16.005 4.994 11.5"/> </symbol> ... file --> <symbol id="file" viewBox="0 0 24

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50152	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2369	OUT	GET /images/backgrounds/home_unicorn/collaborate_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 7191 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1c17" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11035 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246d8c5e2e34-DFW
2023-12-28 16:22:28 UTC	1036	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 63 63 65 37 66 66 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 66 66 64 61 63 37 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 65 32 61 36 38 38 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 62 32 62 37 63 34 3b 7d 2e 63 6c 73 2d 36 7b 66 69 6c 6c 3a 23 38 30 63 33 66 66 3b 7d 2e 63 6c 73 2d 37 7b 66 69 6c 6c 3a 23 62 33 64 64 66 66 3b 7d 2e 63 6c 73 2d 38 7b 66 69 6c 6c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#cce7ff;}.cls-3{fill:#ffdac7;}.cls-4{fill:#e2a688;}.cls-5{fill:#b2b7c4;}.cls-6{fill:#80c3ff;}.cls-7{fill:#b3ddff;}.cls-8{fill
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 78 3d 22 31 35 34 22 20 79 3d 22 37 34 22 20 77 69 64 74 68 3d 22 31 31 22 20 68 65 69 67 68 74 3d 22 32 22 2f 3e 3c 72 65 63 74 20 69 64 3d 22 66 69 6c 65 2d 33 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 66 69 6c 65 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 78 3d 22 32 37 22 20 79 3d 22 35 35 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 33 30 22 2f 3e 3c 67 20 69 64 3d 22 70 69 63 2d 33 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 70 69 63 22 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 78 3d 22 34 32 22 20 79 3d 22 35 39 22 20 77 69 64 74 68 3d 22 35 22 20 68 65 69 67 68 74 3d 22 35 22 2f 3e 3c 2f 67 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 Data Ascii: ><rect class="cls-2" x="154" y="74" width="11" height="2"/><rect id="file-3" data-name="file" class="cls-1" x="27" y="55" width="24" height="30"/><g id="pic-3" data-name="pic"><rect class="cls-2" x="42" y="59" width="5" height="5"/></g><rect class="cls-2"
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 2e 35 37 2d 32 43 39 35 2e 38 31 2c 33 34 2e 38 31 2c 39 37 2e 38 38 2c 33 38 2c 39 37 2e 38 38 2c 34 32 2e 33 34 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 36 22 20 64 3d 22 4d 39 32 2c 31 30 33 2e 38 33 56 31 30 36 48 36 39 76 2d 32 2e 31 37 41 34 2e 38 33 2c 34 2e 38 33 2c 30 2c 30 2c 31 2c 37 33 2e 38 33 2c 39 39 48 38 37 2e 31 37 41 34 2e 38 33 2c 34 2e 38 33 2c 30 2c 30 2c 31 2c 39 32 2c 31 30 33 2e 38 33 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 36 22 20 64 3d 22 4d 31 34 30 2c 31 31 33 2e 39 31 56 31 35 33 63 30 2c 35 2e 39 32 2d 35 2c 39 2d 35 2c 39 68 2d 33 73 2d 35 2d 33 2e 30 38 2d 35 2d 39 56 31 31 34 61 38 2c 38 2c 30 2c 30 2c 30 2d 38 2d 38 68 31 33 2e 31 31 41 37 2e 39 31 2c 37 2e 39 31 2c 30 2c 30 Data Ascii: .57-2C95.81,34.81,97.88,38,97.88,42.34Z"/><path class="cls-6" d="M92,103.83V106H69v-2.17A4.83,4.83,0,0,1,73.83,99H87.17A4.83,4.83,0,0,1,92,103.83Z"/><path class="cls-6" d="M140,113.91V153c0,5.92-5,9-5,9h-3s-5-3.08-5-9V114a8,8,0,0,0-8-8h13.11A7.91,7.91,0,0
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 31 34 2c 31 34 2c 30 2c 30 2c 30 2c 36 35 2c 36 38 48 35 38 76 32 68 37 41 31 32 2c 31 32 2c 30 2c 30 2c 31 2c 37 37 2c 38 32 76 34 48 37 31 2e 39 4c 37 38 2c 39 30 2e 37 39 2c 38 34 2c 38 36 48 37 39 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 31 30 37 2c 38 32 76 34 68 2d 35 2e 31 4c 31 30 38 2c 39 30 2e 37 39 2c 31 31 34 2c 38 36 68 2d 35 56 38 32 61 31 32 2c 31 32 2c 30 2c 30 2c 31 2c 31 32 2d 31 32 68 37 56 36 38 68 2d 37 41 31 34 2c 31 34 2c 30 2c 30 2c 30 2c 31 30 37 2c 38 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 30 2c 35 35 68 37 2e 34 33 61 31 2c 31 2c 30 2c 30 2c 30 2c 31 2d 31 56 35 30 2e 32 35 61 31 33 2c 31 33 2c 30 2c 30 2c 30 2c 31 38 2e 34 35 2c 30 56 Data Ascii: 14,14,0,0,0,65,68H58v2h7A12,12,0,0,1,77,82v4H71.9L78,90.79,84,86H79Z"/><path class="cls-9" d="M107,82v4h-5.1L108,90.79,114,86h-5V82a12,12,0,0,1,12-12h7V68h-7A14,14,0,0,0,107,82Z"/><path class="cls-9" d="M70,55h7.43a1,1,0,0,0,1-1V50.25a13,13,0,0,0,18.45,0V
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 35 34 2d 32 2e 32 34 2c 32 2e 36 35 2d 35 2e 36 31 2c 32 2e 36 35 2d 33 2e 32 31 2c 30 2d 37 2e 34 34 2c 30 2d 39 2e 31 34 2c 34 2e 36 38 2d 2e 37 35 2d 33 2e 30 37 2d 2e 37 33 2d 36 2e 36 32 2e 38 35 2d 39 2e 32 38 2c 31 2e 38 36 2d 33 2e 31 34 2c 35 2e 36 2d 34 2e 38 34 2c 31 31 2e 31 33 2d 35 2e 30 38 68 2e 31 36 61 34 2c 34 2c 30 2c 30 2c 31 2c 33 2e 30 37 2c 31 2e 35 35 6c 2e 34 33 2e 36 32 2e 37 31 2d 2e 32 35 61 35 2e 38 2c 35 2e 38 2c 30 2c 30 2c 31 2c 33 2e 34 2d 2e 31 31 2c 35 2e 38 36 2c 35 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 33 33 2c 33 2e 35 39 2c 31 35 2e 30 35 2c 31 35 2e 30 35 2c 30 2c 30 2c 31 2c 2e 30 36 2c 38 41 36 2e 34 31 2c 36 2e 34 31 2c 30 2c 30 2c 30 2c 33 37 2e 36 38 2c 37 34 2e 39 35 5a 4d 32 38 2c 35 36 48 35 30 56 38 34 48 34 Data Ascii: 54-2.24,2.65-5.61,2.65-3.21,0-7.44,0-9.14,4.68-.75-3.07-.73-6.62.85-9.28,1.86-3.14,5.6-4.84,11.13-5.08h.16a4,4,0,0,1,3.07,1.55l.43.62.71-.25a5.8,5.8,0,0,1,3.4-.11,5.86,5.86,0,0,1,3.33,3.59,15.05,15.05,0,0,1,.06,8A6.41,6.41,0,0,0,37.68,74.95ZM28,56H50V84H4
2023-12-28 16:22:28 UTC	679	IN	Data Raw: 2c 30 2c 30 2c 31 35 38 2e 31 2c 36 36 63 2d 32 2e 33 34 2d 33 2e 31 39 2d 35 2e 39 34 2d 34 2e 38 31 2d 31 30 2e 37 2d 34 2e 38 31 2d 2e 34 38 2c 30 2d 2e 39 34 2c 30 2d 31 2e 34 2e 30 37 56 35 36 68 32 32 5a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 66 6f 6c 64 65 72 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 31 33 32 2e 30 39 2c 31 30 35 48 39 33 76 2d 31 2e 31 37 41 35 2e 38 33 2c 35 2e 38 33 2c 30 2c 30 2c 30 2c 38 37 2e 31 37 2c 39 38 48 37 33 2e 38 33 41 35 2e 38 33 2c 35 2e 38 33 2c 30 2c 30 2c 30 2c 36 38 2c 31 30 33 2e 38 33 56 31 30 35 48 35 37 2e 39 31 41 38 2e 39 32 2c 38 2e 39 32 2c 30 2c 30 2c 30 2c 34 39 2c 31 31 33 2e 39 31 56 31 35 33 63 30 2c 36 2e 34 2c 35 2e 32 35 2c 39 2e 37 31 2c 35 2e 34 38 2c 39 2e 38 35 41 31 2c 31 Data Ascii: ,0,0,158.1,66c-2.34-3.19-5.94-4.81-10.7-4.81-.48,0-.94,0-1.4.07V56h22Z"/><path id="folder" class="cls-9" d="M132.09,105H93v-1.17A5.83,5.83,0,0,0,87.17,98H73.83A5.83,5.83,0,0,0,68,103.83V105H57.91A8.92,8.92,0,0,0,49,113.91V153c0,6.4,5.25,9.71,5.48,9.85A1,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50154	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2068	OUT	GET /images/icons/svg_light/twitter.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 949 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3b5" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 4212 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246d8aca2c87-DFW
2023-12-28 16:22:28 UTC	949	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50155	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2357	OUT	GET /images/backgrounds/home_unicorn/store.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 2795 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-aeb" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 7824 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246d8f0d466b-DFW
2023-12-28 16:22:28 UTC	1038	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 6f 6d 65 70 61 67 65 20 2d 20 66 65 61 74 75 72 65 73 20 62 75 6c 6c 65 74 73 20 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 33 22 3e 3c 67 20 69 64 3d 22 6f 75 74 6c 69 6e 65 73 22 3e 3c 70 61 74 68 20 69 64 3d 22 62 67 22 20 63 6c 61 73 73 3d 22 63 6c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab3"><g id="outlines"><path id="bg" class="cl
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 34 32 2c 30 2c 30 2c 30 2d 33 2d 37 2e 33 32 2c 31 2e 35 2c 31 2e 35 2c 30 2c 30 2c 30 2c 30 2d 2e 33 37 2c 32 2c 32 2c 30 2c 31 2c 30 2d 32 2c 32 2c 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 30 2c 2e 36 34 2d 2e 31 32 41 38 2e 34 33 2c 38 2e 34 33 2c 30 2c 30 2c 31 2c 32 30 2c 31 30 37 2e 36 39 56 31 32 33 48 31 38 61 31 2c 31 2c 30 2c 30 2c 30 2c 30 2c 32 68 39 76 31 61 34 2e 30 38 2c 34 2e 30 38 2c 30 2c 30 2c 30 2d 2e 35 2c 30 2c 34 2e 35 2c 34 2e 35 2c 30 2c 30 2c 30 2d 33 2e 37 34 2c 37 48 31 31 2e 32 51 39 2e 39 32 2c 31 33 30 2e 32 2c 38 2e 38 33 2c 31 32 37 2e 33 5a 4d 35 39 2e 37 36 2c 31 33 33 48 33 30 2e 32 34 41 34 2e 35 2c 34 2e 35 2c 30 2c 30 2c 30 2c 32 39 2c 31 32 36 2e 37 36 56 31 32 35 48 36 34 76 31 61 34 2e 30 38 2c 34 2e 30 38 2c 30 Data Ascii: 42,0,0,0-3-7.32,1.5,1.5,0,0,0,0-.37,2,2,0,1,0-2,2,1.91,1.91,0,0,0,.64-.12A8.43,8.43,0,0,1,20,107.69V123H18a1,1,0,0,0,0,2h9v1a4.08,4.08,0,0,0-.5,0,4.5,4.5,0,0,0-3.74,7H11.2Q9.92,130.2,8.83,127.3ZM59.76,133H30.24A4.5,4.5,0,0,0,29,126.76V125H64v1a4.08,4.08,0
2023-12-28 16:22:28 UTC	388	IN	Data Raw: 30 2c 30 2c 30 2d 31 2e 31 39 2d 35 48 31 38 34 2e 38 43 31 38 34 2e 36 31 2c 31 31 35 2e 39 2c 31 38 34 2e 33 39 2c 31 31 36 2e 38 31 2c 31 38 34 2e 31 35 2c 31 31 37 2e 37 34 5a 6d 31 2e 35 31 2d 37 2e 32 36 63 2d 2e 31 32 2e 37 33 2d 2e 32 33 2c 31 2e 34 35 2d 2e 33 37 2c 32 2e 31 37 61 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 63 30 2c 2e 31 31 2c 30 2c 2e 32 31 2d 2e 30 36 2e 33 32 48 31 37 30 2e 37 39 61 31 37 2e 34 39 2c 31 37 2e 34 39 2c 30 2c 30 2c 30 2d 33 30 2e 35 38 2c 30 48 31 31 34 2e 35 39 61 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2d 31 2e 35 39 2d 31 2e 35 39 56 34 39 2e 35 39 41 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2c 31 31 34 2e 35 39 2c 34 38 48 31 37 34 2e 31 6c 2e 32 2e 33 34 63 2e 36 34 2c 31 2e 30 39 2c 31 2e 32 37 2c 32 Data Ascii: 0,0,0-1.19-5H184.8C184.61,115.9,184.39,116.81,184.15,117.74Zm1.51-7.26c-.12.73-.23,1.45-.37,2.17a0,0,0,0,1,0,0c0,.11,0,.21-.06.32H170.79a17.49,17.49,0,0,0-30.58,0H114.59a1.59,1.59,0,0,1-1.59-1.59V49.59A1.59,1.59,0,0,1,114.59,48H174.1l.2.34c.64,1.09,1.27,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50161	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	537	OUT	GET /lp/global/img/start_menu_w10_dark_theme.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
2023-12-28 16:22:29 UTC	358	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/png Content-Length: 97578 Connection: close Last-Modified: Mon, 08 May 2023 14:44:21 GMT ETag: "64590ac5-17d2a" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:29 UTC	16026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 db 00 00 01 ca 08 03 00 00 00 e5 cc 77 39 00 00 03 00 50 4c 54 45 ff ff ff 26 2d 38 18 22 2d 1c 25 2f 21 2a 34 1f 27 31 29 31 3a 18 20 2a 16 20 2b 25 2b 34 2c 34 3d 31 37 40 00 0f 2c 15 1e 28 00 00 03 ff 1f 13 34 3c 44 00 58 ff 00 12 32 00 60 ff 00 15 38 51 66 f7 00 0b 1c 00 20 48 00 6a ff 25 34 4e 00 73 ff 18 1e 24 d8 2c 22 00 4f ff 00 0d 22 10 1e 2f 00 18 3e 3c 42 4a 01 1b 43 00 47 ff 00 02 12 00 1c 55 39 3e 47 20 2b 3a 26 2a 30 00 3e ff 00 7b ff 00 1d 4e 0c 14 1d 00 22 51 00 00 20 00 22 42 00 00 2f 05 16 25 0d 1a 28 00 35 fe 00 04 66 00 84 ff 00 07 71 00 7c dc 00 01 3d 20 20 20 16 24 32 29 34 41 00 01 49 24 30 3e 1a 28 38 00 05 7b 00 2a b7 00 8c ff 00 04 5d 00 02 54 41 46 4c 00 2f f8 0c 19 4b 01 Data Ascii: PNGIHDRw9PLTE&-8"-%/!4'1)1: +%+4,4=17@,(4<DX2`8Qf Hj%4Ns$,"O"/><BJCGU9>G +:&0>{N"Q "B/%(5fq\|= $2)4AI$0>(8{]TAFL/K
2023-12-28 16:22:29 UTC	16384	IN	Data Raw: f5 7a bf 09 ea 09 b5 ed b4 0b 36 be 31 57 da 35 11 5e 2e 8a f9 72 59 de a8 a2 79 d0 94 0f 60 4f e4 b1 fb df d4 6d 77 5b 46 a7 a1 be 9c af e2 d0 e7 d7 36 6a 74 b2 b3 da af 69 d6 91 74 a2 1f d0 90 8f 3e dd 9c 32 97 ed 11 c5 76 60 79 1d 36 da 43 53 7f 32 84 0c 4e 3c e0 b2 3a b3 ec 8a 35 a3 ae 91 ed 9f f9 85 ed cc 73 9a 68 4f 6e a7 92 ab 40 5b 8a ee b8 98 f6 c9 46 30 d9 58 94 64 75 23 3a 45 75 f7 b9 a5 cb 4b 6b 24 d8 94 25 71 05 db 83 fa 75 95 ff 43 02 50 e2 0e fa a5 38 bf ed c2 2c 33 23 dd 93 17 24 d2 8c b3 10 8e f0 73 80 7f 3e 17 17 dd c6 fb 23 fb c7 c7 47 81 e9 f8 f8 fe 91 d9 91 b1 10 ae 46 51 ce 41 3a 70 df 81 d9 43 83 5a 5b 71 dc 4b b6 f5 1c a0 02 3b e8 49 ca 45 c3 72 ba 76 b3 5b 71 12 f9 c3 25 a3 88 6e d4 a2 5d df 59 ef 1a f5 bc 51 6a 37 3b 4e b5 d4 04 Data Ascii: z61W5^.rYy`Omw[F6jtit>2v`y6CS2N<:5shOn@[F0Xdu#:EuKk$%quCP8,3#$s>#GFQA:pCZ[qK;IErv[q%n]YQj7;N
2023-12-28 16:22:29 UTC	16384	IN	Data Raw: 75 53 05 ea db e0 db 54 51 3e 17 17 8f 7a de ed e4 6a 69 c5 60 d6 e4 95 1d 25 52 46 71 8f c7 80 1b 74 e3 24 ec 14 92 07 2e 43 37 6a 48 6e 34 68 4b 43 5a c6 ba 99 47 48 37 79 c6 c1 d2 2d ce 55 b6 45 f5 6c 83 33 c9 aa 24 08 fb 38 4c 2a dd 78 2c 70 ef 9e e3 50 0b be 02 5c 2c 6c cc 0e 00 b9 22 36 2c 2e 11 eb da 7a 42 38 25 fb 1e d3 14 5a 16 d4 94 fb f6 68 83 ed da 35 4b 9c ac 5c d5 c1 9d 17 b8 57 aa 4f 00 ee dd 46 74 f0 39 e1 7b 5c a2 c9 d8 7a c1 fb d7 5b bc f1 46 e9 24 79 e3 31 fa 36 a5 7d da 8e d4 b8 23 16 e7 0c 24 2e e2 9d 9d 07 0f 82 55 c2 dd 1c 6f 8d 21 6c b5 18 89 a4 69 d3 ae d9 0d e8 06 6f b8 34 0a 94 c4 9a 45 4f 77 73 d7 36 62 85 07 6d a5 f9 da 34 db 4b c7 59 e8 d7 bc 97 8b 6d a6 10 a7 77 3b 86 58 62 19 b6 f6 7c a3 02 f6 75 21 5b 3d dd 75 f0 c0 76 21 Data Ascii: uSTQ>zji`%RFqt$.C7jHn4hKCZGH7y-UEl3$8L*x,pP\,l"6,.zB8%Zh5K\WOFt9{\z[F$y16}#$.Uo!lio4EOws6bm4KYmw;Xb\|u![=uv!
2023-12-28 16:22:29 UTC	16384	IN	Data Raw: 3f 7b cf c0 97 19 e3 b7 89 b6 35 75 e3 b2 8d dd 91 11 7c 81 b7 96 dc fc 4c b3 ab da 2d 0b 89 50 e8 f5 ed b4 da e0 98 01 3f 92 bd 95 dd f6 23 c4 9a 68 3f b4 77 bc c9 b0 ad b3 92 56 5a 84 58 6b f0 2b 45 7c e7 3b 6f 64 c5 3b 17 f1 c7 ee 4c 64 61 81 23 d6 05 85 01 63 d4 5d 9d 26 cc 3c a4 61 df 17 96 33 d1 ef 09 b3 34 f4 db 1c 4a 2a db 08 80 8d a0 35 e1 ac ba 59 c7 ea 50 7b ce 67 47 1d f5 e4 6d d7 e1 cb 43 fb f7 3f a1 96 44 7d 8c a3 db 52 eb 72 35 4f a2 9b dc f9 50 c9 ce ad db 67 89 df 3e 2b 07 db 9c 9c f4 c3 fd 05 ca 16 9f f9 07 dc f6 f7 2a db 3e bf 6d ed 29 43 fd 56 09 8a 76 44 3e 96 d9 ce 85 b6 66 b6 d5 6b 13 6d db 91 20 8c 66 d3 90 98 75 51 5b 27 b6 fc c0 1d 33 1e c2 9b 36 cd 3e 6a b3 4d d9 56 dd 96 bf 2f de 8c e7 50 ed 67 9e 99 69 ae d9 24 68 0f 08 da 55 Data Ascii: ?{5u\|L-P?#h?wVZXk+E\|;od;Lda#c]&<a34J5YP{gGmC?D}Rr5OPg>+>m)CVvD>fkm fuQ['36>jMV/Pgi$hU
2023-12-28 16:22:29 UTC	16384	IN	Data Raw: 1b 68 73 08 db 0c 36 54 fb 3e 1c 89 d8 6d b8 6a 82 9b 6c 09 e9 f3 d5 6b 17 5d fe 99 6f 17 6e 61 7b 40 79 92 81 9e c1 07 23 1d 34 a6 38 70 e5 c8 be d8 67 c3 9d 8c 76 2b a3 3d 3c 33 7a 41 b1 8d ce 24 84 1b 9d 49 7a 83 f6 3b 33 8f da 79 d2 c8 f0 f4 d9 03 0f 29 05 78 a0 71 ea 01 61 0a b6 59 b2 fd 68 03 6c a6 1e 6d 47 b6 1d b2 7d 68 97 c8 76 17 d0 56 6c cf d9 40 35 a8 ef 1d cf a1 4f e1 13 e4 71 a1 af 59 b3 a9 62 be a2 62 25 f1 aa 68 46 f0 2d ee 4b 2e 36 19 45 5a 7a 9b 2e 86 e6 b3 4d 73 73 76 c6 de 4c 2e 14 33 85 66 bb 74 89 58 77 a9 3f d1 b0 f6 cf 67 d5 da dd 4c 36 d6 4b 7a 46 23 68 84 e8 ff 2b 4c db 8a 04 4e d8 76 c0 a4 ec 8c 15 ad 8e 58 76 00 12 cd 4c 73 a9 5a c4 ba 0c a6 cb 49 77 5c bb 0d 88 f1 1c 05 52 e5 e0 f5 3f 87 30 2e 73 49 64 0c 3e ba b3 df d6 44 db Data Ascii: hs6T>mjlk]ona{@y#48pgv+=<3zA$Iz;3y)xqaYhlmG}hvVl@5OqYbb%hF-K.6EZz.MssvL.3ftXw?gL6KzF#h+LNvXvLsZIw\R?0.sId>D
2023-12-28 16:22:29 UTC	16016	IN	Data Raw: 99 e7 de bc de d3 da fd 3c e2 2f 97 45 63 9d 8e 54 cd 6f cf a4 32 db 31 7e 7b 54 59 c6 35 bc 05 a6 a5 03 6c bf fa e8 b3 57 a8 f1 bc 5c bb 31 63 bb ec d4 a9 6f de fd 10 bf bb fe d0 dd df 3c 75 b8 cc 3c c3 6d 9e 27 91 f3 46 b9 a9 cc b0 96 f3 13 53 dd 06 dc f4 d0 d9 46 10 dd aa 23 89 d6 6d 5e 9a 4c 24 e2 88 ed 49 9a 4c 1e 5c f8 b8 3d b4 bb 79 35 b6 9b 89 6d 1f 19 6e b0 4d 30 3b 2a 0f 92 e5 4e 46 8a a2 b1 aa b1 11 09 ef a1 21 ec c9 c1 c9 bf ea 6c 92 85 3b 20 da 90 08 b6 1b 26 d9 94 a4 f9 b2 73 05 dc 79 80 db d7 e2 c0 3e 77 29 dd ac dd 7a de 64 91 9e 38 b4 cf be 30 bf b8 d8 d3 43 df 47 5d 6c a4 31 19 0b 46 8d f9 35 39 82 75 44 06 02 1e 9c 6a 0c db 96 1a 1c 08 3a 17 58 ce 16 cd 1a a3 c5 5b 54 b2 e9 a9 de a2 71 92 cb 15 4c 22 25 17 41 f8 72 99 9e e4 50 63 59 c2 Data Ascii: </EcTo21~{TY5lW\1co<u<m'FSF#m^L$IL\=y5mnM0;*NF!l; &sy>w)zd80CG]l1F59uDj:X[TqL"%ArPcY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50156	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2363	OUT	GET /images/backgrounds/home_unicorn/store_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 6086 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-17c6" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6468 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246da9a9e528-DFW
2023-12-28 16:22:28 UTC	1037	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 62 32 62 37 63 34 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 66 66 64 62 38 30 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 62 33 64 64 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 6f 6d 65 70 61 67 65 20 2d 20 66 65 61 74 75 72 65 73 20 62 75 6c 6c 65 74 73 20 73 76 67 20 72 65 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#07f;}.cls-2{fill:#fff;}.cls-3{fill:#b2b7c4;}.cls-4{fill:#ffdb80;}.cls-5{fill:#b3ddff;}</style></defs><title>homepage - features bullets svg re
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 32 68 39 76 31 61 34 2e 30 38 2c 34 2e 30 38 2c 30 2c 30 2c 30 2d 2e 35 2c 30 2c 34 2e 35 2c 34 2e 35 2c 30 2c 30 2c 30 2d 33 2e 37 34 2c 37 48 31 31 2e 32 43 31 30 2e 33 35 2c 31 33 31 2e 31 33 2c 39 2e 35 36 2c 31 32 39 2e 32 33 2c 38 2e 38 33 2c 31 32 37 2e 33 5a 4d 35 39 2e 37 36 2c 31 33 33 48 33 30 2e 32 34 41 34 2e 34 39 2c 34 2e 34 39 2c 30 2c 30 2c 30 2c 32 39 2c 31 32 36 2e 37 36 56 31 32 35 48 36 34 76 31 61 34 2e 30 38 2c 34 2e 30 38 2c 30 2c 30 2c 30 2d 2e 35 2c 30 2c 34 2e 35 2c 34 2e 35 2c 30 2c 30 2c 30 2d 33 2e 37 34 2c 37 5a 6d 33 2e 37 34 2d 35 61 32 2e 37 33 2c 32 2e 37 33 2c 30 2c 30 2c 31 2c 2e 35 2c 30 68 30 61 32 2e 35 34 2c 32 2e 35 34 2c 30 2c 30 2c 31 2c 31 2e 34 31 2e 38 35 2c 32 2e 35 2c 32 2e 35 2c 30 2c 31 2c 31 2d 31 2e 39 Data Ascii: 2h9v1a4.08,4.08,0,0,0-.5,0,4.5,4.5,0,0,0-3.74,7H11.2C10.35,131.13,9.56,129.23,8.83,127.3ZM59.76,133H30.24A4.49,4.49,0,0,0,29,126.76V125H64v1a4.08,4.08,0,0,0-.5,0,4.5,4.5,0,0,0-3.74,7Zm3.74-5a2.73,2.73,0,0,1,.5,0h0a2.54,2.54,0,0,1,1.41.85,2.5,2.5,0,1,1-1.9
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 2e 33 32 48 31 37 30 2e 37 39 61 31 37 2e 34 39 2c 31 37 2e 34 39 2c 30 2c 30 2c 30 2d 33 30 2e 35 38 2c 30 48 31 31 34 2e 35 39 61 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2d 31 2e 35 39 2d 31 2e 35 39 56 34 39 2e 35 39 41 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2c 31 31 34 2e 35 39 2c 34 38 48 31 37 34 2e 31 6c 2e 32 2e 33 34 71 31 2c 31 2e 36 33 2c 31 2e 38 36 2c 33 2e 33 6c 2e 33 37 2e 37 63 2e 36 2c 31 2e 31 35 2c 31 2e 31 39 2c 32 2e 33 31 2c 31 2e 37 34 2c 33 2e 34 37 6c 30 2c 30 61 39 31 2e 36 36 2c 39 31 2e 36 36 2c 30 2c 30 2c 31 2c 37 2e 33 38 2c 35 34 2e 36 33 5a 22 2f 3e 3c 2f 67 3e 3c 70 61 74 68 20 69 64 3d 22 62 67 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 38 39 2c 39 35 61 39 33 2e 36 36 2c 39 33 2e 36 36 2c Data Ascii: .32H170.79a17.49,17.49,0,0,0-30.58,0H114.59a1.59,1.59,0,0,1-1.59-1.59V49.59A1.59,1.59,0,0,1,114.59,48H174.1l.2.34q1,1.63,1.86,3.3l.37.7c.6,1.15,1.19,2.31,1.74,3.47l0,0a91.66,91.66,0,0,1,7.38,54.63Z"/></g><path id="bg" class="cls-2" d="M189,95a93.66,93.66,
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 37 5a 6d 30 2c 37 61 32 2e 35 2c 32 2e 35 2c 30 2c 31 2c 31 2c 32 2e 35 2d 32 2e 35 41 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 31 35 35 2e 35 2c 31 32 34 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 38 30 2e 30 39 2c 35 35 41 39 34 2c 39 34 2c 30 2c 30 2c 30 2c 31 2c 39 35 61 39 34 2e 37 31 2c 39 34 2e 37 31 2c 30 2c 30 2c 30 2c 36 2c 33 33 41 39 34 2c 39 34 2c 30 2c 30 2c 30 2c 31 38 35 2c 31 32 32 63 2e 36 39 2d 32 2e 33 2c 31 2e 33 2d 34 2e 36 33 2c 31 2e 38 31 2d 37 2c 2e 31 34 2d 2e 36 36 2e 32 38 2d 31 2e 33 33 2e 34 2d 32 61 39 34 2e 31 36 2c 39 34 2e 31 36 2c 30 2c 30 2c 30 2d 37 2e 31 37 2d 35 38 5a 4d 38 2e 38 33 2c 31 32 37 2e 33 41 39 33 2e 31 2c 39 33 2e 31 2c 30 2c 30 2c 31 2c 33 2c 39 35 2c 39 32 Data Ascii: 7Zm0,7a2.5,2.5,0,1,1,2.5-2.5A2.5,2.5,0,0,1,155.5,124Z"/><path class="cls-1" d="M180.09,55A94,94,0,0,0,1,95a94.71,94.71,0,0,0,6,33A94,94,0,0,0,185,122c.69-2.3,1.3-4.63,1.81-7,.14-.66.28-1.33.4-2a94.16,94.16,0,0,0-7.17-58ZM8.83,127.3A93.1,93.1,0,0,1,3,95,92
2023-12-28 16:22:28 UTC	942	IN	Data Raw: 32 2c 39 32 2c 30 2c 30 2c 31 2c 31 32 2e 31 34 2c 31 33 35 68 31 36 35 2e 37 43 31 37 37 2e 35 37 2c 31 33 35 2e 35 36 2c 31 37 37 2e 32 39 2c 31 33 36 2e 31 31 2c 31 37 37 2c 31 33 36 2e 36 36 5a 6d 31 2e 37 36 2d 33 2e 36 36 48 31 36 30 2e 33 39 61 31 32 2e 35 2c 31 32 2e 35 2c 30 2c 31 2c 30 2d 39 2e 37 38 2c 30 48 37 39 2e 34 32 6c 33 31 2e 38 32 2d 32 30 2e 33 33 61 33 2e 35 39 2c 33 2e 35 39 2c 30 2c 30 2c 30 2c 33 2e 33 35 2c 32 2e 33 33 48 31 32 35 76 37 68 31 34 2e 38 36 61 31 2e 37 35 2c 31 2e 37 35 2c 30 2c 30 2c 30 2c 2e 31 34 2d 2e 35 2c 31 34 2e 37 38 2c 31 34 2e 37 38 2c 30 2c 30 2c 31 2c 2e 30 37 2d 31 2e 35 2c 31 35 2e 32 35 2c 31 35 2e 32 35 2c 30 2c 30 2c 31 2c 31 2e 33 36 2d 35 2c 31 34 2c 31 34 2c 30 2c 30 2c 31 2c 31 2e 31 32 2d 32 Data Ascii: 2,92,0,0,1,12.14,135h165.7C177.57,135.56,177.29,136.11,177,136.66Zm1.76-3.66H160.39a12.5,12.5,0,1,0-9.78,0H79.42l31.82-20.33a3.59,3.59,0,0,0,3.35,2.33H125v7h14.86a1.75,1.75,0,0,0,.14-.5,14.78,14.78,0,0,1,.07-1.5,15.25,15.25,0,0,1,1.36-5,14,14,0,0,1,1.12-2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50157	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2358	OUT	GET /images/backgrounds/home_unicorn/access.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 4230 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1086" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 3559 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246db9506ba1-DFW
2023-12-28 16:22:28 UTC	1037	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 63 63 65 37 66 66 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 6f 6d 65 70 61 67 65 20 2d 20 66 65 61 74 75 72 65 73 20 62 75 6c 6c 65 74 73 20 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 34 22 3e 3c 67 20 69 64 3d 22 6f 75 74 6c 69 6e 65 73 22 3e 3c 63 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#cce7ff;}.cls-3{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab4"><g id="outlines"><c
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 38 2c 31 39 2e 38 38 2c 30 2c 30 2c 30 2c 31 37 2e 37 37 2c 30 2c 31 37 2e 38 38 2c 31 37 2e 38 38 2c 30 2c 30 2c 31 2c 31 36 2e 30 36 2c 30 2c 31 39 2e 38 38 2c 31 39 2e 38 38 2c 30 2c 30 2c 30 2c 31 37 2e 37 37 2c 30 2c 31 36 2e 31 31 2c 31 36 2e 31 31 2c 30 2c 30 2c 31 2c 37 2e 34 37 2d 31 2e 38 39 41 39 32 2e 31 33 2c 39 32 2e 31 33 2c 30 2c 30 2c 31 2c 39 35 2c 31 38 37 5a 6d 35 2e 35 36 2d 38 37 2e 33 39 61 31 38 2c 31 38 2c 30 2c 30 2c 30 2c 39 2e 32 34 2c 34 2e 32 36 2c 31 39 2e 32 38 2c 31 39 2e 32 38 2c 30 2c 30 2c 30 2c 31 32 2e 32 37 2d 32 2e 37 33 71 2e 38 36 2d 2e 35 2c 31 2e 36 38 2d 31 2e 30 38 63 2e 33 2d 2e 32 31 2e 36 2d 2e 34 34 2e 39 2d 2e 36 37 61 31 2c 31 2c 30 2c 30 2c 30 2c 2e 31 36 2d 31 2e 34 31 2c 31 2c 31 2c 30 2c 30 2c 30 2d Data Ascii: 8,19.88,0,0,0,17.77,0,17.88,17.88,0,0,1,16.06,0,19.88,19.88,0,0,0,17.77,0,16.11,16.11,0,0,1,7.47-1.89A92.13,92.13,0,0,1,95,187Zm5.56-87.39a18,18,0,0,0,9.24,4.26,19.28,19.28,0,0,0,12.27-2.73q.86-.5,1.68-1.08c.3-.21.6-.44.9-.67a1,1,0,0,0,.16-1.41,1,1,0,0,0-
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 38 2e 36 34 2c 30 2c 30 2c 31 2c 31 31 31 2e 31 33 2c 38 33 43 31 31 30 2e 34 31 2c 38 33 2e 31 34 2c 31 30 39 2e 36 39 2c 38 33 2e 32 2c 31 30 39 2c 38 33 2e 32 34 5a 4d 31 36 34 2c 31 31 34 76 35 48 39 31 63 2d 36 2e 34 37 2c 30 2d 31 38 2e 39 33 2d 31 2d 32 34 2e 35 33 2d 32 2e 39 4c 35 33 2e 38 39 2c 31 31 32 76 2d 34 2e 39 6c 31 32 2c 33 2e 38 35 63 36 2c 32 2c 32 30 2c 33 2c 32 36 2e 31 35 2c 33 5a 6d 2d 39 38 2e 31 35 2c 34 63 35 2e 37 39 2c 31 2e 39 33 2c 31 38 2e 35 35 2c 33 2c 32 35 2e 31 35 2c 33 68 37 30 2e 33 6c 2d 31 2e 32 31 2c 31 33 2e 38 37 61 31 36 2e 33 32 2c 31 36 2e 33 32 2c 30 2c 30 2c 31 2d 35 2e 37 2d 31 2e 37 38 2c 31 39 2e 38 38 2c 31 39 2e 38 38 2c 30 2c 30 2c 30 2d 31 37 2e 37 37 2c 30 2c 31 37 2e 38 38 2c 31 37 2e 38 38 2c 30 Data Ascii: 8.64,0,0,1,111.13,83C110.41,83.14,109.69,83.2,109,83.24ZM164,114v5H91c-6.47,0-18.93-1-24.53-2.9L53.89,112v-4.9l12,3.85c6,2,20,3,26.15,3Zm-98.15,4c5.79,1.93,18.55,3,25.15,3h70.3l-1.21,13.87a16.32,16.32,0,0,1-5.7-1.78,19.88,19.88,0,0,0-17.77,0,17.88,17.88,0
2023-12-28 16:22:28 UTC	455	IN	Data Raw: 30 2c 31 2c 30 2c 35 33 2c 38 38 2e 36 35 61 37 31 2c 37 31 2c 30 2c 30 2c 31 2c 31 36 2e 39 35 2c 31 31 2e 34 36 2c 31 2e 35 2c 31 2e 35 2c 30 2c 31 2c 30 2c 32 2c 31 2e 38 38 63 31 2e 36 2c 31 2e 35 38 2c 33 2e 31 34 2c 33 2e 32 33 2c 34 2e 35 38 2c 35 6c 33 2e 36 38 2c 34 2e 34 32 63 2d 35 2e 32 34 2d 2e 34 38 2d 31 30 2e 36 2d 31 2e 32 34 2d 31 33 2e 37 2d 32 2e 32 37 4c 35 33 2e 32 2c 31 30 34 2e 38 33 61 31 2c 31 2c 30 2c 30 2c 30 2d 31 2e 33 31 2c 31 76 37 61 31 2c 31 2c 30 2c 30 2c 30 2c 2e 36 39 2c 31 6c 33 2e 34 31 2c 31 2e 31 41 33 35 2c 33 35 2c 30 2c 30 2c 30 2c 37 30 2c 31 33 32 2e 36 6c 2d 31 2e 30 37 2e 35 61 31 36 2e 31 32 2c 31 36 2e 31 32 2c 30 2c 30 2c 31 2d 38 2c 31 2e 39 2c 31 36 2e 31 32 2c 31 36 2e 31 32 2c 30 2c 30 2c 31 2d 38 2d Data Ascii: 0,1,0,53,88.65a71,71,0,0,1,16.95,11.46,1.5,1.5,0,1,0,2,1.88c1.6,1.58,3.14,3.23,4.58,5l3.68,4.42c-5.24-.48-10.6-1.24-13.7-2.27L53.2,104.83a1,1,0,0,0-1.31,1v7a1,1,0,0,0,.69,1l3.41,1.1A35,35,0,0,0,70,132.6l-1.07.5a16.12,16.12,0,0,1-8,1.9,16.12,16.12,0,0,1-8-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50163	142.250.138.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	1161	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=invisible&cb=gmcztux0n3li HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:28 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-DTcwjv3Vbm4AiIBlqpW5Qw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:28 UTC	361	IN	Data Raw: 36 31 39 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 6192<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2023-12-28 16:22:28 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2023-12-28 16:22:28 UTC	1252	IN	Data Raw: 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 Data Ascii: boto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2023-12-28 16:22:28 UTC	1252	IN	Data Raw: 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-sty
2023-12-28 16:22:28 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: to/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2023-12-28 16:22:28 UTC	1252	IN	Data Raw: 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d Data Ascii: * vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-
2023-12-28 16:22:28 UTC	1252	IN	Data Raw: 76 33 56 62 6d 34 41 69 49 42 6c 71 70 57 35 51 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 75 2d 78 63 71 33 50 4f 43 57 46 6c 43 72 33 78 38 5f 49 50 78 67 50 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 44 54 63 77 6a Data Ascii: v3Vbm4AiIBlqpW5Qw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js" nonce="DTcwj
2023-12-28 16:22:28 UTC	1252	IN	Data Raw: 49 51 6e 32 4b 5a 46 4d 71 62 36 76 4a 62 64 4b 6d 45 6d 75 6e 74 35 36 70 64 73 45 46 33 7a 47 70 50 7a 61 38 56 41 49 70 33 65 49 66 4e 57 35 74 70 4b 70 34 43 4c 74 59 69 4d 68 54 67 4d 67 71 4d 53 38 6c 34 4b 6a 55 43 55 4d 72 59 72 65 56 53 74 6b 42 67 45 4b 55 59 49 5a 4d 39 2d 42 6b 53 65 69 35 4d 46 6a 41 32 61 6d 2d 79 4b 77 42 5a 67 51 58 47 4e 75 34 62 38 37 39 74 62 73 48 51 57 49 57 35 6e 4e 68 6a 49 33 37 4f 5f 6e 4e 47 31 4e 4e 61 51 59 4e 2d 57 43 49 42 51 6a 47 43 32 47 47 6b 42 34 41 30 4b 79 44 69 53 7a 43 31 6e 72 76 42 2d 7a 48 63 4c 6d 4b 35 57 39 44 4e 50 67 78 4f 6a 72 69 56 68 6d 78 66 73 5a 65 4e 54 42 51 59 6a 38 73 68 6c 53 4f 63 43 6d 5a 42 6e 41 4a 5a 39 71 63 32 4e 51 34 4b 6b 5a 75 4e 6b 48 6a 4e 7a 6a 68 7a 5f 4a 38 59 32 Data Ascii: IQn2KZFMqb6vJbdKmEmunt56pdsEF3zGpPza8VAIp3eIfNW5tpKp4CLtYiMhTgMgqMS8l4KjUCUMrYreVStkBgEKUYIZM9-BkSei5MFjA2am-yKwBZgQXGNu4b879tbsHQWIW5nNhjI37O_nNG1NNaQYN-WCIBQjGC2GGkB4A0KyDiSzC1nrvB-zHcLmK5W9DNPgxOjriVhmxfsZeNTBQYj8shlSOcCmZBnAJZ9qc2NQ4KkZuNkHjNzjhz_J8Y2
2023-12-28 16:22:28 UTC	1252	IN	Data Raw: 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 54 53 46 56 72 52 57 6c 77 61 46 46 31 57 6e 46 59 65 55 78 36 52 45 35 42 4d 55 78 6a 54 32 70 4a 57 54 56 51 4f 54 4e 76 55 32 4a 4a 4d 45 39 4c 54 55 74 73 64 46 6c 5a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 63 31 6c 35 57 48 6f 7a 52 30 6c 42 63 6a 4a 54 65 48 67 7a 51 55 68 61 51 31 42 69 5a 45 5a 4d 64 30 6c 6b 65 47 39 4c 56 54 68 6c 4d 45 31 42 51 31 55 79 65 6c 4e 6c 4b 33 52 58 4d 6b 74 4b 51 32 64 74 4e 47 78 4f 4e 45 35 4c 62 6d 59 79 56 6a 42 70 65 6c 5a 43 64 44 68 4b 4f 45 74 4c 4f 47 77 32 57 6e 41 30 4d 6a 4a 6e 52 45 74 53 4f 57 30 78 4d 54 56 36 54 56 4a 6a 64 30 46 48 4d 32 6f 72 65 6a 64 50 55 56 59 32 5a 31 Data Ascii: x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9TSFVrRWlwaFF1WnFYeUx6RE5BMUxjT2pJWTVQOTNvU2JJME9LTUtsdFlZLmpz\x22,\x22\x22,\x22c1l5WHozR0lBcjJTeHgzQUhaQ1BiZEZMd0lkeG9LVThlME1BQ1UyelNlK3RXMktKQ2dtNGxONE5LbmYyVjBpelZCdDhKOEtLOGw2WnA0MjJnREtSOW0xMTV6TVJjd0FHM2orejdPUVY2Z1
2023-12-28 16:22:28 UTC	1252	IN	Data Raw: 34 61 32 6c 36 62 31 52 32 52 46 52 42 4b 31 64 7a 53 6e 4a 54 4c 32 31 70 56 46 52 7a 62 44 4a 4d 59 57 68 52 4e 6e 70 74 62 47 4e 77 59 32 6c 7a 62 6a 42 61 62 45 52 57 57 6e 52 4e 54 6b 56 52 55 55 68 59 65 6b 46 34 59 33 41 77 4d 45 5a 5a 63 47 70 36 62 47 67 31 65 6c 6f 35 57 55 70 71 55 31 4e 61 5a 45 4a 73 5a 6c 52 4d 53 54 56 51 5a 57 73 33 59 57 4e 54 57 46 51 77 57 55 46 79 59 55 74 54 57 54 4a 55 4d 56 4a 54 4b 31 4e 54 65 6b 68 32 4d 47 78 73 57 6c 5a 4c 56 31 68 73 4d 47 52 79 57 6a 52 50 63 6b 4e 58 54 6a 59 78 59 32 35 68 64 47 52 70 64 55 31 69 63 6b 35 53 65 6a 52 61 4e 47 68 35 63 45 70 48 5a 6e 42 4a 53 33 41 7a 4d 6d 4e 5a 61 46 70 7a 52 58 46 50 59 30 78 34 53 44 5a 6e 64 6e 64 4e 61 55 31 46 61 54 64 53 52 7a 42 6b 61 32 31 51 54 6e Data Ascii: 4a2l6b1R2RFRBK1dzSnJTL21pVFRzbDJMYWhRNnptbGNwY2lzbjBabERWWnRNTkVRUUhYekF4Y3AwMEZZcGp6bGg1elo5WUpqU1NaZEJsZlRMSTVQZWs3YWNTWFQwWUFyYUtTWTJUMVJTK1NTekh2MGxsWlZLV1hsMGRyWjRPckNXTjYxY25hdGRpdU1ick5SejRaNGh5cEpHZnBJS3AzMmNZaFpzRXFPY0x4SDZndndNaU1FaTdSRzBka21QTn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50158	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2069	OUT	GET /images/icons/svg_light/facebook.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 401 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-191" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 9407 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246dda3c6c7c-DFW
2023-12-28 16:22:28 UTC	401	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50159	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2079	OUT	GET /images/backgrounds/home_unicorn/hero_tile.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	401	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/png Content-Length: 26402 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-6722" Expires: Sat, 27 Jan 2024 12:13:34 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1308 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246e1a824788-DFW
2023-12-28 16:22:28 UTC	968	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 6e 00 00 03 b4 02 03 00 00 00 61 14 52 7d 00 00 00 0c 50 4c 54 45 0e 28 66 0c 32 78 0d 2e 72 0e 2b 6b 67 f2 45 6a 00 00 66 d1 49 44 41 54 78 da ac 5d bb 6f 33 45 10 5f df ca c5 22 ce 34 40 f8 03 38 47 3c 0a 9a 03 c2 d3 12 ff c0 49 64 ed 23 3e e0 24 84 04 24 c0 09 04 0d 0f 1d 50 f3 28 72 8e 11 14 34 e1 19 81 1b 0a 10 8f 05 44 41 01 95 cd 07 88 82 c6 3c 1b 10 a2 08 6f bc 3b c9 78 b3 eb dd b3 c3 4a 5f 92 f9 fc c5 9e 9b 9b fb cd ec 6f 76 e6 23 b0 9a 84 90 cb 67 3f 04 c5 61 fe 9f 28 88 5c f0 b7 6d 42 c8 f5 c4 b9 9a c7 3f d1 69 77 d4 da c4 57 86 84 90 73 e1 1f 6d f0 1d b2 fc 62 02 de 9f de c9 0b 25 c2 8a 09 21 eb 84 5c d7 25 ce 15 1f ff 34 e5 23 42 f6 f0 95 2f e4 1b 28 e5 c4 0f 7c b4 82 72 1d 30 17 e5 db Data Ascii: PNGIHDRnaR}PLTE(f2x.r+kgEjfIDATx]o3E_"4@8G<Id#>$$P(r4DA<o;xJ_ov#g?a(\mB?iwWsmb%!\%4#B/(\|r0
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: f8 ae ae 6e 2d 48 08 2f f5 5c e8 00 05 f7 3b 8f f1 cd 85 2d 67 a2 bd a9 e3 26 c4 f3 78 d7 e5 99 9e 33 cd c4 e8 ad 22 b8 59 77 8b 3f 35 c9 95 e8 67 ba a8 43 a5 4a 92 df 71 46 40 c4 3b d1 4a cd f8 ce 78 d9 b8 3f 25 4b 2e 00 b2 04 45 3d 67 82 f0 fc 83 f3 26 ac 6b 78 07 50 89 f1 5d 81 30 eb 9c 59 56 35 00 b2 44 13 35 93 0c 71 e7 e9 0b cf 00 aa 67 ec 9c 88 88 c4 4a 5b 67 a2 f9 b0 ee 4c 43 08 1e 7e cb 51 00 ae f3 6d 39 d3 1b 11 61 c5 0a 5b 67 5d b9 13 39 13 cd c8 55 fc de 3a 59 17 9d 02 a8 5e 69 e1 44 28 ef 01 1c 2e b1 00 87 9e 47 31 d1 01 2c 48 20 b0 79 09 1b 7c 9e 2d 9c 48 70 67 8a ce 68 5f d4 76 d7 e1 89 42 51 83 7e 76 8f 93 4b 42 6c 0c f0 79 b6 e4 4c 61 e7 32 42 07 4e dd aa 3e 00 e5 1d 27 12 fd b1 26 e2 1a 90 09 ef d7 83 ca 78 67 81 4d 99 50 08 45 f7 17 c1 Data Ascii: n-H/\;-g&x3"Yw?5gCJqF@;Jx?%K.E=g&kxP]0YV5D5qgJ[gLC~Qm9a[g]9U:Y^iD(.G1,H y\|-Hpgh_vBQ~vKBlyLa2BN>'&xgMPE
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: b1 72 16 63 37 e6 5e c9 94 f5 0e 85 cf 69 41 b7 9f 91 95 33 80 60 97 44 bc e3 3e 7b 45 37 09 9d b1 03 34 35 e2 bb bc 1f 57 6b a5 eb a1 bc f0 0d 5e fa 6a 1e 40 d6 80 b9 ac 39 d3 98 70 be 30 49 02 1e f2 3c 60 2e ce 98 f1 7d 0d 75 45 b5 59 b9 e1 49 f3 21 2b 8a f9 08 cd 65 c9 99 ce 6d 64 8d 85 78 04 29 71 f3 15 55 f6 88 cd f8 fe 05 22 27 be 12 fd ee 4b f3 01 87 aa 11 9a cb 96 33 ad 87 1d 0b 9a 22 28 4b 15 f9 81 11 df 41 7c 1e 45 24 75 07 bc 5f 8b 24 0c 32 34 97 35 67 6a 33 41 12 0f 43 1b a8 6d e2 1f 9f 98 9c 48 86 22 e2 b8 57 37 30 79 58 68 b8 69 d4 91 e8 6f 4c 38 72 df b1 76 f6 ea 26 93 13 49 0c e5 48 e5 29 f5 80 3b e9 04 d0 37 b6 3a d2 94 7f 52 b0 c2 bb b3 57 14 26 37 b6 42 36 e5 ae f2 e8 86 5e ca 04 9a cb 92 33 05 9c 3f b6 c5 85 d3 6d 91 cd 8b cd ad 50 82 Data Ascii: rc7^iA3`D>{E745Wk^j@9p0I<`.}uEYI!+emdx)qU"'K3"(KA\|E$u_$245gj3ACmH"W70yXhioL8rv&IH);7:RW&7B6^3?mP
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 77 c0 de 96 16 4a b6 5f ea 08 3f 20 11 df ae 09 25 11 e8 06 a2 91 33 35 73 b2 b1 70 1b 02 5c f6 d9 ea 2a fb 73 50 99 1f 9b 6b 72 22 d1 8f ef e2 fd 9a 2d 16 94 8f 50 d4 73 a6 75 c0 e8 ab 78 59 07 2a a7 08 95 5a 0b e5 f7 20 22 6c f5 ea b6 58 b0 1d 6b 37 5a 13 73 a6 b7 f9 b6 cb 33 50 b7 77 ae d5 4f 56 c3 d9 e3 9e 38 51 13 ba 5e d4 da 3a 6b cf 28 b5 77 f0 5f cc fb 75 a0 52 6e 7a 06 b6 16 ca 3b 57 1f 3b d1 d6 44 cd 24 31 ee 8a 9d ca e1 d9 e8 c8 36 76 22 2e 56 1e 3b b1 ae 89 5a f8 89 21 76 b8 95 c3 6a 8a 11 df d7 94 d3 ae 56 eb 79 5e 57 6e 78 e2 61 b9 dc bf 07 61 02 75 83 9a bd 31 76 a2 fa 79 d5 b1 13 3a af a7 fb 63 1b f0 d9 0b 95 67 f1 6d 14 d1 69 c1 5c 3f a4 20 9e 72 ec 84 ee 8f 67 40 37 2f 54 56 db 28 1a 39 13 69 ec 80 58 63 f9 c6 4e 20 43 db 87 d8 e1 e3 44 Data Ascii: wJ_? %35sp\sPkr"-PsuxYZ "lXk7Zs3PwOV8Q^:k(w_uRnz;W;D$16v".V;Z!vjVy^Wnxaau1vy:cgmi\? rg@7/TV(9iXcN CD
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 67 48 aa e6 79 d2 cc 32 b5 98 26 e4 52 7d 6a 31 a9 ba 35 a7 16 7f 2e 3c 63 27 9e 48 c8 ba 7b 16 f5 65 e4 73 d8 2b ec a2 0a 02 22 d5 90 24 27 26 72 55 af d4 39 53 1e e3 33 ea f8 ef 49 6e c8 c9 9a 9b da c6 ee d8 35 93 13 19 d3 9c 70 a1 27 6a 79 cd 6e 34 9a b8 c7 4e b4 9e bd 3f 21 bb 1e 6a 9b 30 89 17 f4 cf cb cd f8 7e fe a7 05 bd 5b cf 3e fe a9 3b b5 18 01 d6 3e aa 2b e2 f9 e0 30 73 53 22 18 03 f7 2d f4 31 2f 1b f7 65 ab 4d 2d 46 e5 ec 39 53 f7 af 24 e2 23 3f eb a0 7a a2 b8 30 a0 32 e8 93 b0 dc 5b 65 6a b1 a6 1c 35 3a f8 65 20 4b 5b af b9 bc 56 8b cf 93 72 c1 d4 62 62 ac d3 8e 9d 50 fa a7 5e 82 16 63 60 b3 63 c9 99 7e be dc d1 a9 e8 19 3b e1 b4 69 a3 24 59 9d 8c 10 32 f7 b0 58 30 b5 b8 36 25 62 8b ef 3f 8e ec 36 6d 74 82 a4 8e 72 90 b9 37 72 cb d4 e2 db 53 Data Ascii: gHy2&R}j15.<c'H{es+"$'&rU9S3In5p'jyn4N?!j0~[>;>+0sS"-1/eM-F9S$#?z02[ej5:e K[VrbbP^c`c~;i$Y2X06%b?6mtr7rS
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 0a 43 3d a3 6a 20 36 ae 5f a3 7e 5c d8 c6 58 69 91 9d e8 97 ba a0 e4 71 a7 4b 96 ea ec 96 7a fa c7 ae 30 39 42 fc 38 f8 94 55 69 29 a1 bc f2 a6 ad 65 27 c2 18 86 7a 0c 67 4f 7c 83 13 e7 86 07 db c0 55 2a b2 13 d7 5c d8 5a 76 22 28 61 a8 2b ef 44 7c cd fd 73 80 1b 27 2b 25 7b b9 45 76 c2 4b c5 70 c3 67 04 c6 99 98 e9 7f bd 4b 96 e3 c6 49 a7 da cb 2d b2 13 de cb 7c 78 4e 29 4e 1d 33 49 61 85 a3 1a 71 95 50 ec 40 13 8b ec 84 7f 87 18 6e f8 f8 1a af a7 61 26 ae cc 97 21 ae 12 6c 13 43 13 33 5d 52 d5 58 6b 07 07 35 0e 43 cd 45 0c 48 bf ca 3a 70 22 d1 64 01 43 1d 33 09 ba 9a 6e 6e 5c a9 57 54 aa 3e ef 79 1e e7 c0 39 91 6a 01 43 13 33 d1 39 71 ce 1c f4 7c 00 41 50 a0 c6 61 a8 71 1d bc ee 01 e7 44 68 0a 43 8b ec 44 6f 5a b7 ac 39 a0 3e a7 22 d4 c3 a6 86 14 27 0c Data Ascii: C=j 6_~\XiqKz09B8Ui)e'zgO\|U*\Zv"(a+D\|s'+%{EvKpgKI-\|xN)N3IaqP@na&!lC3]RXk5CEH:p"dC3nn\WT>y9jC39q\|APaqDhCDoZ9>"'
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: ed 65 67 b2 62 81 59 8d e6 d7 bb 5a 1d 47 c0 80 ac 39 a7 ec c4 0d f3 2b 48 e4 56 f1 26 17 78 05 8b 01 92 64 f0 78 49 86 ea 01 ff 0a 28 d1 9d 4f 76 c2 63 e9 a8 6e 27 58 c5 9f 9c 95 21 de f0 71 6c 70 22 bd 5b 32 f2 35 56 64 88 cb 4e 50 1b d0 8f ee 9b fa 2c 75 6a 7d 81 b2 14 bb a5 30 5c 25 ad 0a 32 47 35 70 70 d9 89 97 2d 98 69 87 9c 78 6c d1 85 77 a7 2f 93 5b 59 6e ba ca 1b 08 4d 50 f5 20 5c 76 82 58 80 fe 9c 0c c9 a5 5d 78 77 da 24 32 5f c5 e4 44 f2 5e 72 6e 29 4e a2 71 22 c2 ca 11 4a d0 02 0f 4a 53 0b 66 1a bd 16 d3 83 73 25 e3 d7 2d 73 9a 91 13 9c da 06 8e f6 40 c7 4c 92 a1 3d d9 5a 8a 13 8e 09 73 4e e7 f4 00 6f 15 01 99 d9 4b 0b 66 ba 70 e4 6e 96 04 25 30 f4 d4 c6 89 84 8c 65 97 bd a5 cd e9 2e ff da 77 27 f8 cc 81 20 cd 75 3a 27 22 97 48 53 b8 13 b7 17 Data Ascii: egbYZG9+HV&xdxI(Ovcn'X!qlp"[25VdNP,uj}0\%2G5pp-ixlw/[YnMP \vX]xw$2_D^rn)Nq"JJSfs%-s@L=ZsNoKfpn%0e.w' u:'"HS
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 8c 03 1b a0 ae 07 b6 96 ad f7 e6 7c d8 e9 41 4a 2c f4 8a a8 eb 70 48 e8 b1 43 47 fb 31 12 41 8b 16 fc 31 1d 86 99 3f 3d 92 2a de 49 17 57 19 3d e8 ac 46 db 27 98 71 8d 64 67 8f 8e cd 4b 16 0c 15 9f 97 91 3e 4b ba 90 84 3b 35 0c 4d cc 44 aa 53 e4 67 fd 49 68 8d 50 50 2c 02 6a 1c 86 8a 97 f1 92 0e 19 75 be b2 d8 f5 f4 b5 5d e8 8a 3a 77 d9 76 3c ce b9 17 ff a8 c9 35 29 4e 99 da a2 7e bb 30 27 c1 e3 02 12 e0 ae 32 43 aa d1 0e 5b 5d 09 50 9f a2 c2 c5 4b 2d 97 ac e1 54 33 8e a6 a4 e9 60 1b 09 a5 1f 77 b5 6c 0d 62 47 d5 ad 6c bc 72 c2 bd b8 ae 69 29 45 a7 9a 5a 13 c3 5f 1d 41 59 2b e6 2a c1 38 3b 66 7a 58 40 2b f3 01 c1 09 ff 35 e1 c5 47 66 ba 20 4d 82 d2 98 6c 84 1f b4 b6 1f f3 0c cc 24 bb a2 36 b5 fb f2 1c de 7d dc 96 2e e8 e5 61 2c 12 15 e0 f9 73 1b d5 62 cf Data Ascii: \|AJ,pHCG1A1?=IW=F'qdgK>K;5MDSgIhPP,ju]:wv<5)N~0'2C[]PK-T3`wlbGlri)EZ_AY+8;fzX@+5Gf Ml$6}.a,sb
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: ee b9 de ab cc 6a c3 d8 d4 8a 99 fc 2a 27 c8 19 73 99 53 76 62 c5 52 fb 9c fa 0f bc 80 5c 63 20 51 84 4e ac 71 a4 11 a9 11 d9 e8 be f4 df 63 ab 6a b1 37 f9 a7 fa 82 e5 ca a7 0a e3 42 96 62 e2 09 80 1e ae b4 d2 c7 03 82 c8 46 f7 d9 2d 13 6e 9b 5d b5 38 2a c8 f8 6e 36 35 5b be 5c 4a 7e ae 31 e3 a0 1d 43 54 db 9a 7f cd 49 6b e6 36 50 9f 31 4f 52 a5 55 69 9e ef 3b 3c b5 bb a9 55 f9 f2 9a f4 2f 60 8b 56 e9 89 ea 97 16 cc 44 33 77 e0 43 f6 21 e2 15 2e 40 3b c0 f9 ce a3 65 df 91 a0 50 1c 41 44 68 75 07 76 75 86 50 0f 0c 35 cc 74 17 27 10 ad 0f 24 0b a6 1c 7d 5a 55 8b 33 a8 f7 83 bd 36 82 6f ec de ad 7d 76 3f 0c 0d cc 14 8a f8 3a a2 5a bc c3 66 2d aa c5 5e 0e 43 b8 02 5c 40 43 3d d2 0f 55 33 58 c3 66 1c 29 10 5b 10 53 2d be d5 ae 5a 0c 2f 9d af 33 15 9e f8 c6 f8 Data Ascii: j'sSvbR\c QNqcj7BbF-n]8n65[\J~1CTIk6P1ORUi;<U/`VD3wC!.@;ePADhuvuP5t'$}ZU36o}v?:Zf-^C\@C=U3Xf)[S-Z/3
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 51 16 5e 4f c8 86 8d 1f c3 62 a6 41 55 b2 28 27 86 6c 98 76 ba 1e e2 df 0f 60 53 fb bb ec 65 2c 86 e4 56 57 53 69 1c e2 41 92 57 25 31 64 43 2c 24 52 79 c5 75 07 7b 56 1b bf 36 fb 85 48 f5 50 f0 31 c4 4c ec 61 5e cd a9 21 1b 1f 28 d9 4e fd d6 c1 44 f4 ce d9 08 68 4c 74 f5 90 f0 31 8c 6c 0d e6 38 48 08 7a 0f 84 69 33 a7 c5 42 eb 9c 28 6c c4 f3 eb 4e f0 31 12 33 71 4f 67 15 3c 99 46 09 1f cc 5c ff 9e 88 22 38 1b fe 7b 47 d2 46 77 13 df 37 87 3b e2 e9 80 a4 27 38 b7 e6 df b5 9d eb 15 24 4f f6 29 66 33 4f a5 c7 93 00 41 01 23 48 7a 94 22 40 68 f3 1e 12 33 1d c3 c2 c9 81 5e c9 20 68 1b 8b b4 31 8b 18 da 7b ba 82 83 27 25 9c 31 aa 07 fd cd 16 0b d0 88 aa 54 b2 5d 2e a4 63 2a 71 4d bf 9f 4e a7 8c 40 36 57 69 cd 72 cf 43 54 09 4b 75 be 0c a7 fa 20 33 ce 31 d2 46 Data Ascii: Q^ObAU('lv`Se,VWSiAW%1dC,$Ryu{V6HP1La^!(NDhLt1l8Hzi3B(lN13qOg<F\"8{GFw7;'8$O)f3OA#Hz"@h3^ h1{'%1T].c*qMN@6WirCTKu 31F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50160	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2067	OUT	GET /images/icons/svg_light/upload.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	329	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 209 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-d1" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1668 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246e1cea6b17-DFW
2023-12-28 16:22:28 UTC	209	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e 3c 67 20 66 69 6c 6c 3d 22 23 66 66 66 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 20 31 36 68 31 33 76 33 48 35 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 30 20 31 34 2e 39 36 38 68 32 2e 39 37 39 76 2d 33 2e 39 38 39 68 35 2e 30 32 39 6c 2d 36 2e 35 30 37 2d 36 2e 39 38 38 2d 36 2e 35 30 38 20 36 2e 39 38 38 48 31 30 76 33 2e 39 38 39 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24"><g fill="#fff"><path d="M5 16h13v3H5z"/><path fill-rule="evenodd" d="M10 14.968h2.979v-3.989h5.029l-6.507-6.988-6.508 6.988H10v3.989z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50147	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2075	OUT	GET /images/backgrounds/home_unicorn/share.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 3752 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-ea8" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 10054 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246e59a2474a-DFW
2023-12-28 16:22:28 UTC	1037	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 61 62 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 6f 6d 65 70 61 67 65 20 2d 20 66 65 61 74 75 72 65 73 20 62 75 6c 6c 65 74 73 20 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 6f 75 74 6c 69 6e 65 73 22 3e 3c 70 61 74 68 20 69 64 3d 22 62 67 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 Data Ascii: <svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="outlines"><path id="bg" class="cls-1
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 2c 30 2c 30 2d 31 2e 32 36 2c 34 2e 32 31 6c 2e 30 36 2e 32 36 61 2e 33 2e 33 2c 30 2c 30 2c 30 2c 30 2c 2e 31 63 31 2e 30 36 2c 33 2e 31 36 2c 34 2e 31 33 2c 34 2e 36 38 2c 36 2e 36 39 2c 35 2e 36 34 6c 2e 38 31 2e 32 39 61 32 37 2e 30 37 2c 32 37 2e 30 37 2c 30 2c 30 2c 31 2c 32 2e 36 31 2c 31 2c 37 34 2e 32 37 2c 37 34 2e 32 37 2c 30 2c 30 2c 31 2d 37 2e 36 35 2e 34 34 48 31 31 37 2e 39 32 63 2d 32 2e 31 38 2c 30 2d 34 2e 38 32 2c 31 2e 37 35 2d 34 2e 38 32 2c 33 2e 39 32 56 38 36 2e 31 61 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2c 2e 36 2c 32 2e 30 37 2c 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2d 32 2e 37 2c 33 2e 36 37 76 33 2e 32 38 61 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2c 31 2e 38 38 2c 33 2e 33 32 2c 33 2e 38 37 2c 33 2e 38 37 Data Ascii: ,0,0-1.26,4.21l.06.26a.3.3,0,0,0,0,.1c1.06,3.16,4.13,4.68,6.69,5.64l.81.29a27.07,27.07,0,0,1,2.61,1,74.27,74.27,0,0,1-7.65.44H117.92c-2.18,0-4.82,1.75-4.82,3.92V86.1a3.86,3.86,0,0,0,.6,2.07,3.86,3.86,0,0,0-2.7,3.67v3.28a3.86,3.86,0,0,0,1.88,3.32,3.87,3.87
2023-12-28 16:22:28 UTC	1346	IN	Data Raw: 33 2e 38 37 2c 33 2e 38 37 2c 30 2c 30 2c 30 2d 2e 38 38 2d 32 2e 34 36 41 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2c 36 39 2c 39 35 2e 31 32 56 39 31 2e 38 34 61 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2d 32 2e 37 2d 33 2e 36 37 2c 33 2e 38 36 2c 33 2e 38 36 2c 30 2c 30 2c 30 2c 2e 36 2d 32 2e 30 37 56 38 32 2e 39 32 63 30 2d 32 2e 31 37 2d 32 2e 36 34 2d 33 2e 39 32 2d 34 2e 38 32 2d 33 2e 39 32 48 35 31 2e 33 32 41 37 32 2e 33 38 2c 37 32 2e 33 38 2c 30 2c 30 2c 31 2c 34 34 2c 37 38 2e 35 39 56 35 38 48 38 32 56 37 38 41 31 2c 31 2c 30 2c 30 2c 30 2c 38 33 2c 37 39 5a 6d 31 2d 32 56 35 39 2e 34 31 6c 31 36 2e 31 39 2c 31 36 2e 31 39 61 39 2e 35 36 2c 39 2e 35 36 2c 30 2c 30 2c 31 2c 32 2e 32 35 2c 33 2e 35 35 41 39 2e 32 34 2c 39 2e 32 34 2c Data Ascii: 3.87,3.87,0,0,0-.88-2.46A3.86,3.86,0,0,0,69,95.12V91.84a3.86,3.86,0,0,0-2.7-3.67,3.86,3.86,0,0,0,.6-2.07V82.92c0-2.17-2.64-3.92-4.82-3.92H51.32A72.38,72.38,0,0,1,44,78.59V58H82V78A1,1,0,0,0,83,79Zm1-2V59.41l16.19,16.19a9.56,9.56,0,0,1,2.25,3.55A9.24,9.24,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50165	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	789	OUT	GET /src/main.js HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
2023-12-28 16:22:29 UTC	413	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: application/javascript Content-Length: 578 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 14 Jun 2023 11:05:52 GMT Vary: Accept-Encoding ETag: "64899f10-242" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:29 UTC	578	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 70 69 78 65 6c 45 76 65 6e 74 20 21 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 0a 20 20 76 61 72 20 73 31 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 0a 20 20 20 20 73 30 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 0a 20 20 73 31 2e 73 72 63 20 3d 20 22 2f 73 72 63 2f 6d 61 69 6e 5f 63 6f 64 65 2e 6a 73 3f 6e 6f 63 61 63 68 65 3d 31 36 35 33 32 38 39 31 39 32 35 34 33 22 3b 0a 20 20 73 30 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 73 31 2c 20 73 30 29 3b 0a 7d 0a 0a 2f 2f 2f 2f 2f 21 21 21 21 21 2d 2d 2d 2d 2d 2d 2d 41 6e 74 69 76 69 Data Ascii: if (typeof pixelEvent != "function") { var s1 = document.createElement("script"), s0 = document.getElementsByTagName("script")[0]; s1.src = "/src/main_code.js?nocache=1653289192543"; s0.parentNode.insertBefore(s1, s0);}/////!!!!!-------Antivi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50166	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	881	OUT	GET /lp/global/img/start_menu_w11_dark_theme.png HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36
2023-12-28 16:22:29 UTC	358	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/png Content-Length: 69974 Connection: close Last-Modified: Mon, 08 May 2023 14:44:21 GMT ETag: "64590ac5-11156" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:29 UTC	16026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 db 00 00 01 ca 08 03 00 00 00 e5 cc 77 39 00 00 03 00 50 4c 54 45 0b 0b 0b 12 12 12 21 21 21 18 18 18 27 27 27 2c 2c 2b 02 02 02 31 31 31 36 36 36 0f 26 43 f7 1c 13 c3 df e2 5e af cb 77 b0 c9 da ef fa 4a b0 cd 6d ab c3 65 b0 cb 6f c1 dc 68 ac c5 78 c7 e0 74 c4 dd 70 b2 cc 47 ae cb 15 29 46 41 aa c8 7c bd d7 6b af c9 5a aa c5 78 b9 d2 2d a5 c5 62 b4 d0 7c b3 cc 4f b1 cf 61 ac c7 52 b4 d2 06 09 14 52 ad ca 72 af c7 7c c9 e1 59 b2 cf 74 b6 cf da df e3 4e aa c7 6d b7 d2 6a b3 ce c9 dc f3 df e2 e6 48 ab c8 56 b0 cc 72 bb d6 fe ff ff d9 db df 00 19 7f 64 bf d9 1e a5 c5 04 1f 35 80 c0 d9 c1 d6 ed c3 d8 e2 30 a9 c9 cc de f5 5c b6 d2 ff 29 01 3c a6 c5 00 34 b5 cb e2 ed c8 db e6 c5 d1 e2 47 a8 c5 00 06 52 d2 Data Ascii: PNGIHDRw9PLTE!!!''',,+111666&C^wJmeohxtpG)FA\|kZx-b\|OaRRr\|YtNmjHVrd50\)<4GR
2023-12-28 16:22:29 UTC	16384	IN	Data Raw: 71 b8 92 35 5e db d5 ed f5 80 eb e3 ea e5 23 10 a1 19 96 3f 68 a0 27 8f e5 c3 e4 b7 57 fd f6 19 87 6e 9d 2d 79 f0 61 99 d7 d6 aa 0d a6 8f c4 36 02 9a 5d c8 36 74 1b 1e 1a 86 9a 93 7f 8d 76 bb c1 03 43 bc 69 0d e7 eb d8 e6 ca c5 d1 6d 68 b6 1e 81 6e b0 ad cc b6 3c 59 66 f6 95 e8 b3 65 2a 57 02 b7 0d bc 91 32 b1 d8 26 a2 25 da a6 a1 78 c1 71 75 db 3e 37 56 5a b7 01 73 39 dd c6 3b af b3 cb 6a 34 02 f6 db c5 51 de 6f e7 e7 00 6d dd 0e a3 d0 f1 db 8a 63 f5 bc 92 5f f1 6e 57 79 4f 36 aa 16 b3 4d ed 91 03 f9 6d e4 49 28 80 b7 35 be cc 61 6e 40 b7 71 47 2b d0 3a dd 66 5b 72 2e fb 5c f0 39 98 ec b3 d6 64 d2 3e 13 bc f2 ba 77 e5 4c 78 dd a6 38 4f 42 24 b3 21 e1 4b 21 6e 84 fb 18 6c 43 ac 31 00 da 25 bd 36 a0 5e 4b 37 f0 2d 05 6c b5 ca 6c 57 4a 04 d8 95 6b ee 85 ea Data Ascii: q5^#?h'Wn-ya6]6tvCimhn<Yfe*W2&%xqu>7VZs9;j4Qomc_nWyO6MmI(5an@qG+:f[r.\9d>wLx8OB$!K!nlC1%6^K7-llWJk
2023-12-28 16:22:29 UTC	16384	IN	Data Raw: 1c b2 e9 40 9d 44 11 0e b4 6d df d6 b1 c4 f2 6d c4 92 3b 1c df 76 04 b6 43 c7 b8 81 b8 2f 34 fd 6e 19 c4 0c ae 6f db 45 6e 68 c5 be ed 65 c6 b2 f9 52 bd 98 2f d3 3a f0 4a b1 5e aa 0f 54 6b 85 6a a1 5a f4 83 7a 31 43 8b 69 eb f9 5c be b1 a3 19 0d 0d db 5b a6 e6 67 e7 ab 07 5a 2f 9e 3c b2 7b e6 18 6d 79 9f 1f e7 d5 da 8d d9 c9 5c 65 f6 d8 f8 91 e2 d5 ab bb 77 5f 65 b1 6f 6f 65 df 0e d3 f5 7c 25 53 da 48 8b 19 73 b5 f1 52 10 00 e6 4e be ed b9 99 04 38 77 a2 7b d5 bf a7 8c 7c 1b 81 04 74 83 6f 24 6e de a4 80 50 a2 c8 a6 ae 85 27 ba d2 61 f6 26 60 1d 20 66 27 8d 14 d5 dc a5 34 de 2a 8c 3c 8c 06 10 ee d4 49 50 f9 58 80 b8 08 ea 03 3e e8 75 1a d8 05 d8 8b 2e 1c 09 56 34 e7 ee 15 f3 eb 1b f5 5c b5 14 0e d0 0a f1 64 25 5b 6c e6 a3 c5 5c aa 50 f6 e3 41 be 99 29 e4 Data Ascii: @Dmm;vC/4noEnheR/:J^TkjZz1Ci\[gZ/<{my\ew_eooe\|%SHsRN8w{\|to$nP'a&` f'4*<IPX>u.V4\d%[l\PA)
2023-12-28 16:22:29 UTC	16384	IN	Data Raw: eb 59 92 41 55 24 4b b8 67 22 13 03 07 0f 6e db 26 71 3f 78 70 60 06 ae 0d 47 67 b6 19 c6 24 b6 a1 15 97 57 bc fb 28 97 48 c6 be 3e a6 c5 84 6f 19 3b a7 5d 1b 32 e7 dc 43 29 d9 7e ea db df fe f6 d5 6f ff e2 0f a5 7f ee e5 8d 64 e7 8d bf bf 5f 0c d4 8c 4c e2 80 6d cb b9 51 0a d4 d2 70 1b a9 04 3f b6 2a c1 c6 22 6e a1 52 da 19 3c bc 8e 2c 9b f3 36 7b b7 94 9c 76 47 28 81 80 74 8a d9 c9 c5 69 7d 9b 45 79 e4 3d ef d9 7a 00 53 ee b6 60 d9 5a 99 ed 39 77 df 66 6d 25 b6 77 d4 9f 5a 35 c4 6c 3f 21 d8 de ba d3 f4 ed 0c 9b 0e 7c 64 17 45 90 3d d0 fc 24 f8 61 b6 09 61 6a 24 1a a4 4d f3 32 a9 eb 03 4c 35 13 3e 70 9d 2b 82 74 a1 be 41 e2 93 f2 ed 94 99 04 f3 ee dd 97 bb bb bb cf 8d 6d b9 8b 45 5c d3 23 e5 96 de 2b f6 d4 cd 7d 29 e7 dc 4d 72 7f fb 6d d2 2f 7e f1 d4 a6 Data Ascii: YAU$Kg"n&q?xp`Gg$W(H>o;]2C)~od_LmQp?*"nR<,6{vG(ti}Ey=zS`Z9wfm%wZ5l?!\|dE=$aaj$M2L5>p+tAmE\#+})Mrm/~
2023-12-28 16:22:29 UTC	4796	IN	Data Raw: ed a4 44 5b a6 6d b4 d9 66 b4 0f a9 3d 66 a0 d9 90 0d 6d 1f 39 33 3f 49 56 7a 63 33 97 44 c3 bd d3 df 6e 0f b3 dd 5e 41 9c c4 50 e6 be df 35 2e 7f 7d 70 e1 ea e5 41 15 03 14 22 5f 8f d4 77 e7 0a b7 eb 99 72 be 98 af 67 e2 37 72 b5 42 2a 9f 4b 89 ea 74 31 57 4b a5 ab 85 7a 25 da 16 dc 01 3f 9f a3 e7 9c eb ae db ed 9e 50 52 be 2b 9a f8 9f f6 48 d8 d9 a6 ea 6c f3 99 62 0a 01 26 c4 cb 85 ef e0 d7 15 67 6e 4c 3d 20 20 b6 cb 49 6c c3 2d cf 2b b0 db 0c 1c c4 60 36 1a 83 3f ce 82 6b 95 96 94 fb 6e f6 a4 b3 d3 19 04 a3 ca d3 a5 70 be 96 df 55 0f 88 db 39 01 bb 1d ca d5 b2 c5 72 21 92 4b 0b 26 d6 17 6d 9c ec 87 58 f6 ba 7f a9 54 d7 69 ef 4f bb 7d c4 f6 48 98 6d a0 3d 0e b2 13 d2 68 53 23 a3 9d 1c e6 7c 8d eb 8e 30 db 66 c2 fb ca 58 5b 9d 52 12 74 3b 85 43 dd cf df Data Ascii: D[mf=fm93?IVzc3Dn^AP5.}pA"_wrg7rB*Kt1WKz%?PR+Hlb&gnL= Il-+`6?knpU9r!K&mXTiO}Hm=hS#\|0fX[Rt;C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50164	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	2364	OUT	GET /images/backgrounds/home_unicorn/access_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:28 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:28 GMT Content-Type: image/svg+xml Content-Length: 5940 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1734" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11138 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb246ebc6de7c3-DFW
2023-12-28 16:22:28 UTC	1036	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 64 62 38 30 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 66 66 64 61 63 37 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 65 32 61 36 38 38 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 62 33 64 64 66 66 3b 7d 2e 63 6c 73 2d 36 7b 66 69 6c 6c 3a 23 63 63 65 37 66 66 3b 7d 2e 63 6c 73 2d 37 7b 66 69 6c 6c 3a 23 62 32 62 37 63 34 3b 7d 2e 63 6c 73 2d 38 7b 66 69 6c 6c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#ffdb80;}.cls-3{fill:#ffdac7;}.cls-4{fill:#e2a688;}.cls-5{fill:#b3ddff;}.cls-6{fill:#cce7ff;}.cls-7{fill:#b2b7c4;}.cls-8{fill
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 2c 31 2d 32 2e 37 33 2d 2e 31 38 63 2d 36 2e 31 38 2d 2e 38 33 2d 31 31 2e 38 34 2d 34 2e 34 39 2d 31 36 2e 33 36 2d 31 30 2e 35 39 61 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 34 2d 33 63 33 2e 37 35 2c 35 2e 30 36 2c 38 2e 31 32 2c 38 2c 31 33 2c 38 2e 36 31 41 31 39 2e 30 39 2c 31 39 2e 30 39 2c 30 2c 30 2c 30 2c 31 32 34 2c 39 38 2e 36 22 2f 3e 3c 6c 69 6e 65 20 69 64 3d 22 73 6c 65 65 76 65 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 78 31 3d 22 39 37 2e 32 37 22 20 79 31 3d 22 31 30 31 2e 34 22 20 78 32 3d 22 39 39 2e 39 38 22 20 79 32 3d 22 39 38 2e 37 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 31 30 37 2c 34 33 41 32 35 2c 32 35 2c 30 2c 30 2c 31 2c 39 33 2e 38 35 2c 36 35 4c 39 30 2c 37 34 6c 2d 37 2e Data Ascii: ,1-2.73-.18c-6.18-.83-11.84-4.49-16.36-10.59a2.5,2.5,0,0,1,4-3c3.75,5.06,8.12,8,13,8.61A19.09,19.09,0,0,0,124,98.6"/><line id="sleeve" class="cls-1" x1="97.27" y1="101.4" x2="99.98" y2="98.77"/><path class="cls-5" d="M107,43A25,25,0,0,1,93.85,65L90,74l-7.
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 2c 31 2d 38 33 2e 37 37 2d 35 34 2c 31 36 2c 31 36 2c 30 2c 30 2c 31 2c 37 2c 31 2e 38 37 2c 31 38 2c 31 38 2c 30 2c 30 2c 30 2c 38 2e 38 38 2c 32 2e 31 41 31 38 2c 31 38 2c 30 2c 30 2c 30 2c 33 36 2c 31 33 34 2e 39 61 31 36 2e 31 32 2c 31 36 2e 31 32 2c 30 2c 30 2c 31 2c 38 2d 31 2e 39 2c 31 36 2e 31 32 2c 31 36 2e 31 32 2c 30 2c 30 2c 31 2c 38 2c 31 2e 39 2c 31 38 2c 31 38 2c 30 2c 30 2c 30 2c 38 2e 38 38 2c 32 2e 31 2c 31 38 2c 31 38 2c 30 2c 30 2c 30 2c 38 2e 38 38 2d 32 2e 31 2c 32 30 2e 34 2c 32 30 2e 34 2c 30 2c 30 2c 31 2c 33 2e 32 38 2d 31 2e 33 32 68 30 63 2e 32 37 2d 2e 30 38 2e 35 37 2d 2e 31 35 2e 38 37 2d 2e 32 31 6c 2e 32 2c 30 2c 2e 38 34 2d 2e 31 34 2e 32 32 2c 30 61 32 30 2e 33 39 2c 32 30 2e 33 39 2c 30 2c 30 2c 31 2c 32 2e 35 39 2d 2e Data Ascii: ,1-83.77-54,16,16,0,0,1,7,1.87,18,18,0,0,0,8.88,2.1A18,18,0,0,0,36,134.9a16.12,16.12,0,0,1,8-1.9,16.12,16.12,0,0,1,8,1.9,18,18,0,0,0,8.88,2.1,18,18,0,0,0,8.88-2.1,20.4,20.4,0,0,1,3.28-1.32h0c.27-.08.57-.15.87-.21l.2,0,.84-.14.22,0a20.39,20.39,0,0,1,2.59-.
2023-12-28 16:22:28 UTC	1369	IN	Data Raw: 2c 33 2c 38 2c 38 2c 30 2c 30 2c 31 2d 31 32 2c 2e 30 37 63 2e 32 2c 30 2c 2e 34 2c 30 2c 2e 36 2c 30 61 37 2e 37 39 2c 37 2e 37 39 2c 30 2c 30 2c 30 2c 33 2e 37 32 2d 31 41 31 2c 31 2c 30 2c 30 2c 30 2c 31 31 37 2e 34 2c 38 38 2e 39 32 5a 4d 31 30 39 2c 38 33 2e 32 34 63 2d 2e 35 2c 30 2d 31 2c 2e 30 36 2d 31 2e 35 31 2e 30 38 6c 2d 31 2e 38 39 2e 30 37 4c 31 30 39 2c 37 39 2e 32 34 61 31 2e 31 2c 31 2e 31 2c 30 2c 30 2c 30 2c 2e 32 32 2d 2e 35 32 6c 2e 34 36 2d 33 2e 37 61 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 31 2e 38 34 2d 32 2e 32 4c 31 31 37 2c 37 31 2e 31 34 61 33 2e 33 33 2c 33 2e 33 33 2c 30 2c 30 2c 31 2c 2e 39 33 2d 2e 31 34 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2c 32 2e 34 32 2c 31 2e 31 33 6c 32 2e 38 34 2c 33 2e 34 32 61 Data Ascii: ,3,8,8,0,0,1-12,.07c.2,0,.4,0,.6,0a7.79,7.79,0,0,0,3.72-1A1,1,0,0,0,117.4,88.92ZM109,83.24c-.5,0-1,.06-1.51.08l-1.89.07L109,79.24a1.1,1.1,0,0,0,.22-.52l.46-3.7a2.62,2.62,0,0,1,1.84-2.2L117,71.14a3.33,3.33,0,0,1,.93-.14,3.15,3.15,0,0,1,2.42,1.13l2.84,3.42a
2023-12-28 16:22:28 UTC	797	IN	Data Raw: 2c 33 2e 34 36 2c 30 2c 30 2c 30 2d 2e 39 35 2e 35 2c 33 2e 35 2c 33 2e 35 2c 30 2c 30 2c 30 2d 2e 37 32 2c 34 2e 38 39 63 34 2e 36 38 2c 36 2e 33 32 2c 31 30 2e 35 36 2c 31 30 2e 31 32 2c 31 37 2c 31 31 41 32 32 2e 36 33 2c 32 32 2e 36 33 2c 30 2c 30 2c 30 2c 31 31 32 2c 31 30 39 61 32 34 2e 38 34 2c 32 34 2e 38 34 2c 30 2c 30 2c 30 2c 31 32 2e 31 34 2d 33 2e 33 2c 31 34 2e 35 34 2c 31 34 2e 35 34 2c 30 2c 30 2c 31 2c 2e 32 2c 36 2e 32 38 48 39 32 63 2d 32 2e 32 34 2c 30 2d 35 2e 35 34 2d 2e 31 33 2d 39 2e 31 2d 2e 34 61 31 2c 31 2c 30 2c 30 2c 30 2d 2e 31 33 2d 2e 32 34 4c 37 38 2c 31 30 35 2e 36 37 61 37 32 2e 37 37 2c 37 32 2e 37 37 2c 30 2c 30 2c 30 2d 33 39 2d 32 34 2e 31 4c 32 38 2e 32 33 2c 37 39 61 31 2c 31 2c 30 2c 30 2c 30 2d 31 2e 32 2e 37 34 Data Ascii: ,3.46,0,0,0-.95.5,3.5,3.5,0,0,0-.72,4.89c4.68,6.32,10.56,10.12,17,11A22.63,22.63,0,0,0,112,109a24.84,24.84,0,0,0,12.14-3.3,14.54,14.54,0,0,1,.2,6.28H92c-2.24,0-5.54-.13-9.1-.4a1,1,0,0,0-.13-.24L78,105.67a72.77,72.77,0,0,0-39-24.1L28.23,79a1,1,0,0,0-1.2.74

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50168	142.250.115.147	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:28 UTC	991	OUT	POST /pagead/landing?gcd=11l1l1l1l1&dma=0&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&gtm=45be3bt0v9103256652&auid=1615816129.1703780548 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pcapp.store X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:29 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:22:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50173	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2357	OUT	GET /images/backgrounds/home_unicorn/heart.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 713 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-2c9" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 10209 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247109dd6bcb-DFW
2023-12-28 16:22:29 UTC	713	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 35 2e 32 32 22 20 68 65 69 67 68 74 3d 22 33 38 2e 37 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 35 2e 32 32 20 33 38 2e 37 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 65 32 33 62 32 61 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 65 61 72 74 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 34 2e 31 31 2c 34 31 2e 39 33 2c 33 39 2e 38 33 2c 32 36 2e 37 39 51 34 35 2e 36 31 2c 32 31 2c 34 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="45.22" height="38.76" viewBox="0 0 45.22 38.76"><defs><style>.cls-1{fill:#e23b2a;}</style></defs><title>heart</title><path class="cls-1" d="M24.11,41.93,39.83,26.79Q45.61,21,4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50171	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2374	OUT	GET /images/backgrounds/home_unicorn/mf_logo_flame_reversed.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 926 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-39e" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1206 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24710d8c2cc1-DFW
2023-12-28 16:22:29 UTC	926	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 37 36 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 36 20 34 32 22 3e 3c 74 69 74 6c 65 3e 6d 66 5f 6c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 66 6c 61 6d 65 5f 6d 6f 6e 6f 22 3e 3c 70 61 74 68 20 69 64 3d 22 66 6c 61 6d 65 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 20 64 3d 22 4d 36 38 2c 36 2e 37 32 43 36 33 2e 36 36 2c 33 2c 35 37 2e 38 31 2c 31 2e 32 36 2c 35 32 2e 31 39 2c 31 61 32 36 2e 31 34 2c 32 36 2e 31 34 2c 30 2c 30 2c 30 2d 31 35 2c 33 2e 36 33 63 2d 2e 33 34 2e 32 32 2d 2e 36 38 2e 34 35 2d 31 2c 2e 36 39 41 31 33 2e 33 36 2c 31 33 2e 33 36 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="76" height="42" viewBox="0 0 76 42"><title>mf_logo</title><g id="flame_mono"><path id="flame" fill="#ffffff" d="M68,6.72C63.66,3,57.81,1.26,52.19,1a26.14,26.14,0,0,0-15,3.63c-.34.22-.68.45-1,.69A13.36,13.36,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50178	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2081	OUT	GET /images/backgrounds/home_unicorn/share_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 5751 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1677" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 5406 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24715878e7a6-DFW
2023-12-28 16:22:29 UTC	1037	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 61 62 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 39 39 63 66 66 66 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 63 63 65 37 66 66 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 66 66 64 61 63 37 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 62 32 62 37 63 34 3b 7d 2e 63 6c 73 2d 36 7b 66 69 6c 6c 3a 23 65 32 61 36 38 38 3b 7d 2e 63 6c 73 2d 37 7b 66 69 6c 6c 3a 23 66 66 64 62 38 30 3b 7d 2e 63 Data Ascii: <svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#99cfff;}.cls-3{fill:#cce7ff;}.cls-4{fill:#ffdac7;}.cls-5{fill:#b2b7c4;}.cls-6{fill:#e2a688;}.cls-7{fill:#ffdb80;}.c
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 2e 30 39 56 38 32 2e 33 5a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 68 61 6e 64 5f 73 68 61 72 65 72 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 68 61 6e 64 20 73 68 61 72 65 72 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 34 22 20 64 3d 22 4d 34 32 2c 36 39 2e 35 36 6c 2d 37 2e 36 36 2c 32 2e 32 33 61 36 2e 35 36 2c 36 2e 35 36 2c 30 2c 30 2c 30 2d 32 2c 2e 37 37 4c 32 31 2e 36 37 2c 37 39 63 2d 31 2e 30 39 2e 36 34 2d 34 2e 34 2c 33 2d 35 2e 36 37 2c 33 76 32 38 63 32 2e 36 35 2c 30 2c 31 33 2e 35 2c 35 2e 38 2c 33 30 2e 38 34 2c 35 2e 31 32 2c 37 2e 32 34 2d 2e 32 38 2c 31 32 2e 35 36 2d 2e 39 33 2c 31 32 2e 35 36 2d 2e 39 33 61 32 2e 38 2c 32 2e 38 2c 30 2c 30 2c 30 2c 32 2e 36 2d 32 2e 38 56 31 31 30 61 33 2c 33 2c 30 2c 30 2c 30 2d 33 2d 33 68 35 2e 31 31 41 32 Data Ascii: .09V82.3Z"/><path id="hand_sharer" data-name="hand sharer" class="cls-4" d="M42,69.56l-7.66,2.23a6.56,6.56,0,0,0-2,.77L21.67,79c-1.09.64-4.4,3-5.67,3v28c2.65,0,13.5,5.8,30.84,5.12,7.24-.28,12.56-.93,12.56-.93a2.8,2.8,0,0,0,2.6-2.8V110a3,3,0,0,0-3-3h5.11A2
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 31 34 2d 2e 37 39 2e 32 2d 31 2e 31 39 41 39 34 2e 30 37 2c 39 34 2e 30 37 2c 30 2c 30 2c 30 2c 39 35 2c 31 5a 4d 33 2c 39 35 41 39 32 2e 34 33 2c 39 32 2e 34 33 2c 30 2c 30 2c 31 2c 34 2e 35 38 2c 37 38 48 31 35 76 33 39 48 35 2e 36 37 41 39 31 2e 37 32 2c 39 31 2e 37 32 2c 30 2c 30 2c 31 2c 33 2c 39 35 5a 6d 39 32 2c 39 32 41 39 32 2e 31 36 2c 39 32 2e 31 36 2c 30 2c 30 2c 31 2c 36 2e 31 38 2c 31 31 39 48 31 37 76 2d 37 2e 38 32 63 2e 36 39 2e 31 38 2c 31 2e 35 39 2e 34 38 2c 32 2e 35 39 2e 38 41 37 36 2e 36 37 2c 37 36 2e 36 37 2c 30 2c 30 2c 30 2c 34 32 2c 31 31 36 2e 31 35 56 31 33 33 61 31 2c 31 2c 30 2c 30 2c 30 2c 31 2c 31 68 36 31 61 31 2c 31 2c 30 2c 30 2c 30 2c 31 2d 31 56 38 32 2e 33 38 61 31 31 2e 35 31 2c 31 31 2e 35 31 2c 30 2c 30 2c 30 2d Data Ascii: 14-.79.2-1.19A94.07,94.07,0,0,0,95,1ZM3,95A92.43,92.43,0,0,1,4.58,78H15v39H5.67A91.72,91.72,0,0,1,3,95Zm92,92A92.16,92.16,0,0,1,6.18,119H17v-7.82c.69.18,1.59.48,2.59.8A76.67,76.67,0,0,0,42,116.15V133a1,1,0,0,0,1,1h61a1,1,0,0,0,1-1V82.38a11.51,11.51,0,0,0-
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 48 34 38 61 31 2c 31 2c 30 2c 30 2c 30 2c 30 2c 32 48 36 34 2e 31 61 31 2e 39 2c 31 2e 39 2c 30 2c 30 2c 31 2c 31 2e 39 2c 31 2e 39 76 33 2e 31 39 41 31 2e 39 2c 31 2e 39 2c 30 2c 30 2c 31 2c 36 34 2e 31 2c 31 30 36 48 34 37 61 31 2c 31 2c 30 2c 30 2c 30 2c 30 2c 32 48 35 39 61 32 2c 32 2c 30 2c 30 2c 31 2c 32 2c 32 76 31 2e 33 39 61 31 2e 38 32 2c 31 2e 38 32 2c 30 2c 30 2c 31 2d 31 2e 37 32 2c 31 2e 38 63 2d 2e 30 35 2c 30 2d 35 2e 33 36 2e 36 35 2d 31 32 2e 34 37 2e 39 32 2d 31 2c 30 2d 31 2e 38 39 2c 30 2d 32 2e 38 31 2c 30 2d 2e 36 38 2c 30 2d 31 2e 33 34 2c 30 2d 32 2c 30 61 37 34 2e 36 37 2c 37 34 2e 36 37 2c 30 2c 30 2c 31 2d 32 31 2e 38 2d 34 2e 30 37 63 2d 31 2e 33 35 2d 2e 34 33 2d 32 2e 34 2d 2e 37 37 2d 33 2e 32 2d 2e 39 34 56 38 32 2e 38 31 Data Ascii: H48a1,1,0,0,0,0,2H64.1a1.9,1.9,0,0,1,1.9,1.9v3.19A1.9,1.9,0,0,1,64.1,106H47a1,1,0,0,0,0,2H59a2,2,0,0,1,2,2v1.39a1.82,1.82,0,0,1-1.72,1.8c-.05,0-5.36.65-12.47.92-1,0-1.89,0-2.81,0-.68,0-1.34,0-2,0a74.67,74.67,0,0,1-21.8-4.07c-1.35-.43-2.4-.77-3.2-.94V82.81
2023-12-28 16:22:29 UTC	607	IN	Data Raw: 2d 31 2e 39 32 68 31 30 2e 37 36 61 38 32 2e 31 36 2c 38 32 2e 31 36 2c 30 2c 30 2c 30 2c 31 30 2e 36 37 2d 2e 37 39 68 2e 31 36 6c 2e 38 34 2d 2e 31 33 2e 35 2d 2e 30 38 61 31 2c 31 2c 30 2c 30 2c 30 2d 2e 33 32 2d 32 6c 2d 2e 33 33 2e 30 35 2d 2e 35 39 2e 30 39 61 32 30 2e 31 31 2c 32 30 2e 31 31 2c 30 2c 30 2c 30 2d 35 2e 32 33 2d 32 2e 35 32 6c 2d 2e 37 36 2d 2e 32 38 63 2d 32 2e 31 33 2d 2e 38 2d 34 2e 36 38 2d 32 2d 35 2e 34 38 2d 34 2e 33 35 6c 2d 2e 30 36 2d 2e 32 36 2c 30 2d 2e 31 61 32 2e 35 32 2c 32 2e 35 32 2c 30 2c 30 2c 31 2c 2e 37 39 2d 32 2e 32 34 2c 31 2e 37 34 2c 31 2e 37 34 2c 30 2c 30 2c 31 2c 31 2e 35 31 2d 2e 36 37 6c 31 33 2e 35 32 2c 34 2e 34 31 2e 31 31 2c 30 61 31 38 2e 38 38 2c 31 38 2e 38 38 2c 30 2c 30 2c 31 2c 33 2e 31 39 2c Data Ascii: -1.92h10.76a82.16,82.16,0,0,0,10.67-.79h.16l.84-.13.5-.08a1,1,0,0,0-.32-2l-.33.05-.59.09a20.11,20.11,0,0,0-5.23-2.52l-.76-.28c-2.13-.8-4.68-2-5.48-4.35l-.06-.26,0-.1a2.52,2.52,0,0,1,.79-2.24,1.74,1.74,0,0,1,1.51-.67l13.52,4.41.11,0a18.88,18.88,0,0,1,3.19,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50172	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2087	OUT	GET /images/backgrounds/home_unicorn/collaborate_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 7191 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1c17" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11243 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247108db46d8-DFW
2023-12-28 16:22:29 UTC	1036	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 63 63 65 37 66 66 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 66 66 64 61 63 37 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 65 32 61 36 38 38 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 62 32 62 37 63 34 3b 7d 2e 63 6c 73 2d 36 7b 66 69 6c 6c 3a 23 38 30 63 33 66 66 3b 7d 2e 63 6c 73 2d 37 7b 66 69 6c 6c 3a 23 62 33 64 64 66 66 3b 7d 2e 63 6c 73 2d 38 7b 66 69 6c 6c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#cce7ff;}.cls-3{fill:#ffdac7;}.cls-4{fill:#e2a688;}.cls-5{fill:#b2b7c4;}.cls-6{fill:#80c3ff;}.cls-7{fill:#b3ddff;}.cls-8{fill
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 78 3d 22 31 35 34 22 20 79 3d 22 37 34 22 20 77 69 64 74 68 3d 22 31 31 22 20 68 65 69 67 68 74 3d 22 32 22 2f 3e 3c 72 65 63 74 20 69 64 3d 22 66 69 6c 65 2d 33 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 66 69 6c 65 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 78 3d 22 32 37 22 20 79 3d 22 35 35 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 33 30 22 2f 3e 3c 67 20 69 64 3d 22 70 69 63 2d 33 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 70 69 63 22 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 78 3d 22 34 32 22 20 79 3d 22 35 39 22 20 77 69 64 74 68 3d 22 35 22 20 68 65 69 67 68 74 3d 22 35 22 2f 3e 3c 2f 67 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 Data Ascii: ><rect class="cls-2" x="154" y="74" width="11" height="2"/><rect id="file-3" data-name="file" class="cls-1" x="27" y="55" width="24" height="30"/><g id="pic-3" data-name="pic"><rect class="cls-2" x="42" y="59" width="5" height="5"/></g><rect class="cls-2"
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 2e 35 37 2d 32 43 39 35 2e 38 31 2c 33 34 2e 38 31 2c 39 37 2e 38 38 2c 33 38 2c 39 37 2e 38 38 2c 34 32 2e 33 34 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 36 22 20 64 3d 22 4d 39 32 2c 31 30 33 2e 38 33 56 31 30 36 48 36 39 76 2d 32 2e 31 37 41 34 2e 38 33 2c 34 2e 38 33 2c 30 2c 30 2c 31 2c 37 33 2e 38 33 2c 39 39 48 38 37 2e 31 37 41 34 2e 38 33 2c 34 2e 38 33 2c 30 2c 30 2c 31 2c 39 32 2c 31 30 33 2e 38 33 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 36 22 20 64 3d 22 4d 31 34 30 2c 31 31 33 2e 39 31 56 31 35 33 63 30 2c 35 2e 39 32 2d 35 2c 39 2d 35 2c 39 68 2d 33 73 2d 35 2d 33 2e 30 38 2d 35 2d 39 56 31 31 34 61 38 2c 38 2c 30 2c 30 2c 30 2d 38 2d 38 68 31 33 2e 31 31 41 37 2e 39 31 2c 37 2e 39 31 2c 30 2c 30 Data Ascii: .57-2C95.81,34.81,97.88,38,97.88,42.34Z"/><path class="cls-6" d="M92,103.83V106H69v-2.17A4.83,4.83,0,0,1,73.83,99H87.17A4.83,4.83,0,0,1,92,103.83Z"/><path class="cls-6" d="M140,113.91V153c0,5.92-5,9-5,9h-3s-5-3.08-5-9V114a8,8,0,0,0-8-8h13.11A7.91,7.91,0,0
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 31 34 2c 31 34 2c 30 2c 30 2c 30 2c 36 35 2c 36 38 48 35 38 76 32 68 37 41 31 32 2c 31 32 2c 30 2c 30 2c 31 2c 37 37 2c 38 32 76 34 48 37 31 2e 39 4c 37 38 2c 39 30 2e 37 39 2c 38 34 2c 38 36 48 37 39 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 31 30 37 2c 38 32 76 34 68 2d 35 2e 31 4c 31 30 38 2c 39 30 2e 37 39 2c 31 31 34 2c 38 36 68 2d 35 56 38 32 61 31 32 2c 31 32 2c 30 2c 30 2c 31 2c 31 32 2d 31 32 68 37 56 36 38 68 2d 37 41 31 34 2c 31 34 2c 30 2c 30 2c 30 2c 31 30 37 2c 38 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 37 30 2c 35 35 68 37 2e 34 33 61 31 2c 31 2c 30 2c 30 2c 30 2c 31 2d 31 56 35 30 2e 32 35 61 31 33 2c 31 33 2c 30 2c 30 2c 30 2c 31 38 2e 34 35 2c 30 56 Data Ascii: 14,14,0,0,0,65,68H58v2h7A12,12,0,0,1,77,82v4H71.9L78,90.79,84,86H79Z"/><path class="cls-9" d="M107,82v4h-5.1L108,90.79,114,86h-5V82a12,12,0,0,1,12-12h7V68h-7A14,14,0,0,0,107,82Z"/><path class="cls-9" d="M70,55h7.43a1,1,0,0,0,1-1V50.25a13,13,0,0,0,18.45,0V
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 35 34 2d 32 2e 32 34 2c 32 2e 36 35 2d 35 2e 36 31 2c 32 2e 36 35 2d 33 2e 32 31 2c 30 2d 37 2e 34 34 2c 30 2d 39 2e 31 34 2c 34 2e 36 38 2d 2e 37 35 2d 33 2e 30 37 2d 2e 37 33 2d 36 2e 36 32 2e 38 35 2d 39 2e 32 38 2c 31 2e 38 36 2d 33 2e 31 34 2c 35 2e 36 2d 34 2e 38 34 2c 31 31 2e 31 33 2d 35 2e 30 38 68 2e 31 36 61 34 2c 34 2c 30 2c 30 2c 31 2c 33 2e 30 37 2c 31 2e 35 35 6c 2e 34 33 2e 36 32 2e 37 31 2d 2e 32 35 61 35 2e 38 2c 35 2e 38 2c 30 2c 30 2c 31 2c 33 2e 34 2d 2e 31 31 2c 35 2e 38 36 2c 35 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 33 33 2c 33 2e 35 39 2c 31 35 2e 30 35 2c 31 35 2e 30 35 2c 30 2c 30 2c 31 2c 2e 30 36 2c 38 41 36 2e 34 31 2c 36 2e 34 31 2c 30 2c 30 2c 30 2c 33 37 2e 36 38 2c 37 34 2e 39 35 5a 4d 32 38 2c 35 36 48 35 30 56 38 34 48 34 Data Ascii: 54-2.24,2.65-5.61,2.65-3.21,0-7.44,0-9.14,4.68-.75-3.07-.73-6.62.85-9.28,1.86-3.14,5.6-4.84,11.13-5.08h.16a4,4,0,0,1,3.07,1.55l.43.62.71-.25a5.8,5.8,0,0,1,3.4-.11,5.86,5.86,0,0,1,3.33,3.59,15.05,15.05,0,0,1,.06,8A6.41,6.41,0,0,0,37.68,74.95ZM28,56H50V84H4
2023-12-28 16:22:29 UTC	679	IN	Data Raw: 2c 30 2c 30 2c 31 35 38 2e 31 2c 36 36 63 2d 32 2e 33 34 2d 33 2e 31 39 2d 35 2e 39 34 2d 34 2e 38 31 2d 31 30 2e 37 2d 34 2e 38 31 2d 2e 34 38 2c 30 2d 2e 39 34 2c 30 2d 31 2e 34 2e 30 37 56 35 36 68 32 32 5a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 66 6f 6c 64 65 72 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 39 22 20 64 3d 22 4d 31 33 32 2e 30 39 2c 31 30 35 48 39 33 76 2d 31 2e 31 37 41 35 2e 38 33 2c 35 2e 38 33 2c 30 2c 30 2c 30 2c 38 37 2e 31 37 2c 39 38 48 37 33 2e 38 33 41 35 2e 38 33 2c 35 2e 38 33 2c 30 2c 30 2c 30 2c 36 38 2c 31 30 33 2e 38 33 56 31 30 35 48 35 37 2e 39 31 41 38 2e 39 32 2c 38 2e 39 32 2c 30 2c 30 2c 30 2c 34 39 2c 31 31 33 2e 39 31 56 31 35 33 63 30 2c 36 2e 34 2c 35 2e 32 35 2c 39 2e 37 31 2c 35 2e 34 38 2c 39 2e 38 35 41 31 2c 31 Data Ascii: ,0,0,158.1,66c-2.34-3.19-5.94-4.81-10.7-4.81-.48,0-.94,0-1.4.07V56h22Z"/><path id="folder" class="cls-9" d="M132.09,105H93v-1.17A5.83,5.83,0,0,0,87.17,98H73.83A5.83,5.83,0,0,0,68,103.83V105H57.91A8.92,8.92,0,0,0,49,113.91V153c0,6.4,5.25,9.71,5.48,9.85A1,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50176	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2359	OUT	GET /images/backgrounds/home_unicorn/tf_10gb.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 1833 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-729" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 8448 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24713a78463c-DFW
2023-12-28 16:22:29 UTC	1038	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 61 62 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 35 32 2e 39 32 2c 36 34 2e 33 39 61 31 2e 34 32 2c 31 2e 34 32 2c 30 2c 30 2c 30 2d 31 2e 33 37 2c 31 2c 31 30 2c 31 30 2c 30 2c 30 2c 30 2d 2e 34 31 2c 33 2e 34 2c 31 30 2c 31 30 2c 30 Data Ascii: <svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><path class="cls-1" d="M52.92,64.39a1.42,1.42,0,0,0-1.37,1,10,10,0,0,0-.41,3.4,10,10,0
2023-12-28 16:22:29 UTC	795	IN	Data Raw: 30 2c 31 2c 36 2e 37 35 2e 30 37 2c 38 2e 38 35 2c 38 2e 38 35 2c 30 2c 30 2c 31 2c 31 2e 31 34 2c 34 2e 39 34 41 39 2c 39 2c 30 2c 30 2c 31 2c 35 36 2e 33 32 2c 37 33 2e 38 31 5a 6d 31 33 2e 33 34 2e 38 39 61 31 34 2e 33 36 2c 31 34 2e 33 36 2c 30 2c 30 2c 31 2d 32 2e 33 33 2e 35 37 2c 31 35 2e 32 2c 31 35 2e 32 2c 30 2c 30 2c 31 2d 32 2e 32 34 2e 31 36 2c 35 2e 36 36 2c 35 2e 36 36 2c 30 2c 30 2c 31 2d 34 2e 34 34 2d 31 2e 37 31 2c 37 2e 31 31 2c 37 2e 31 31 2c 30 2c 30 2c 31 2d 31 2e 35 33 2d 34 2e 39 31 41 36 2e 34 37 2c 36 2e 34 37 2c 30 2c 30 2c 31 2c 36 30 2e 38 39 2c 36 34 61 36 2e 37 36 2c 36 2e 37 36 2c 30 2c 30 2c 31 2c 34 2e 39 33 2d 31 2e 37 34 2c 39 2e 35 35 2c 39 2e 35 35 2c 30 2c 30 2c 31 2c 33 2e 38 31 2e 37 39 6c 2d 2e 39 31 2c 32 2e 31 Data Ascii: 0,1,6.75.07,8.85,8.85,0,0,1,1.14,4.94A9,9,0,0,1,56.32,73.81Zm13.34.89a14.36,14.36,0,0,1-2.33.57,15.2,15.2,0,0,1-2.24.16,5.66,5.66,0,0,1-4.44-1.71,7.11,7.11,0,0,1-1.53-4.91A6.47,6.47,0,0,1,60.89,64a6.76,6.76,0,0,1,4.93-1.74,9.55,9.55,0,0,1,3.81.79l-.91,2.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50180	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2081	OUT	GET /images/backgrounds/home_unicorn/collaborate.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 4336 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-10f0" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2247 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2471992d2e27-DFW
2023-12-28 16:22:29 UTC	1037	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 6f 6d 65 70 61 67 65 20 2d 20 66 65 61 74 75 72 65 73 20 62 75 6c 6c 65 74 73 20 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 32 22 3e 3c 67 20 69 64 3d 22 6f 75 74 6c 69 6e 65 73 22 3e 3c 63 69 72 63 6c 65 20 69 64 3d 22 62 67 22 20 63 6c 61 73 73 3d 22 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab2"><g id="outlines"><circle id="bg" class="
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 30 2e 37 39 2c 31 31 34 2c 38 36 68 2d 35 56 38 32 61 31 32 2c 31 32 2c 30 2c 30 2c 31 2c 31 32 2d 31 32 68 37 56 36 38 68 2d 37 41 31 34 2c 31 34 2c 30 2c 30 2c 30 2c 31 30 37 2c 38 32 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 37 30 2c 35 35 68 37 2e 34 33 61 31 2c 31 2c 30 2c 30 2c 30 2c 31 2d 31 56 35 30 2e 32 35 61 31 33 2c 31 33 2c 30 2c 30 2c 30 2c 31 38 2e 34 35 2c 30 56 35 34 61 31 2c 31 2c 30 2c 30 2c 30 2c 31 2c 31 68 37 2e 34 33 61 31 2c 31 2c 30 2c 30 2c 30 2c 2e 35 36 2d 31 2e 38 33 63 2d 2e 30 39 2d 2e 31 31 2d 2e 37 37 2d 31 2d 31 2e 31 35 2d 34 2e 31 37 48 31 31 34 56 31 37 48 38 38 76 36 2e 32 39 63 2d 31 30 2e 38 38 2e 33 2d 31 37 2e 31 34 2c 34 2e 30 38 2d 31 37 2e 31 34 2c 32 30 2e 34 39 2c 30 Data Ascii: 0.79,114,86h-5V82a12,12,0,0,1,12-12h7V68h-7A14,14,0,0,0,107,82Z"/><path class="cls-2" d="M70,55h7.43a1,1,0,0,0,1-1V50.25a13,13,0,0,0,18.45,0V54a1,1,0,0,0,1,1h7.43a1,1,0,0,0,.56-1.83c-.09-.11-.77-1-1.15-4.17H114V17H88v6.29c-10.88.3-17.14,4.08-17.14,20.49,0
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 2c 31 2c 33 2e 30 37 2c 31 2e 35 35 6c 2e 34 33 2e 36 32 2e 37 31 2d 2e 32 35 61 35 2e 38 2c 35 2e 38 2c 30 2c 30 2c 31 2c 33 2e 34 2d 2e 31 31 2c 35 2e 38 36 2c 35 2e 38 36 2c 30 2c 30 2c 31 2c 33 2e 33 33 2c 33 2e 35 39 2c 31 35 2e 30 35 2c 31 35 2e 30 35 2c 30 2c 30 2c 31 2c 2e 30 36 2c 38 41 36 2e 34 31 2c 36 2e 34 31 2c 30 2c 30 2c 30 2c 33 37 2e 36 38 2c 37 34 2e 39 35 5a 4d 32 38 2c 35 36 48 35 30 56 38 34 48 34 30 2e 33 35 61 31 33 2c 31 33 2c 30 2c 30 2c 30 2c 31 2e 32 32 2d 33 2e 33 36 63 31 2d 32 2e 33 34 2c 32 2e 33 2d 37 2e 36 39 2e 37 37 2d 31 32 61 37 2e 37 39 2c 37 2e 37 39 2c 30 2c 30 2c 30 2d 34 2e 34 33 2d 34 2e 37 36 2c 37 2c 37 2c 30 2c 30 2c 30 2d 34 2e 31 36 2d 2e 31 32 41 36 2c 36 2c 30 2c 30 2c 30 2c 32 39 2e 32 38 2c 36 32 63 2d Data Ascii: ,1,3.07,1.55l.43.62.71-.25a5.8,5.8,0,0,1,3.4-.11,5.86,5.86,0,0,1,3.33,3.59,15.05,15.05,0,0,1,.06,8A6.41,6.41,0,0,0,37.68,74.95ZM28,56H50V84H40.35a13,13,0,0,0,1.22-3.36c1-2.34,2.3-7.69.77-12a7.79,7.79,0,0,0-4.43-4.76,7,7,0,0,0-4.16-.12A6,6,0,0,0,29.28,62c-
2023-12-28 16:22:29 UTC	561	IN	Data Raw: 39 2c 31 30 35 48 39 33 76 2d 31 2e 31 37 41 35 2e 38 33 2c 35 2e 38 33 2c 30 2c 30 2c 30 2c 38 37 2e 31 37 2c 39 38 48 37 33 2e 38 33 41 35 2e 38 33 2c 35 2e 38 33 2c 30 2c 30 2c 30 2c 36 38 2c 31 30 33 2e 38 33 56 31 30 35 48 35 37 2e 39 31 41 38 2e 39 32 2c 38 2e 39 32 2c 30 2c 30 2c 30 2c 34 39 2c 31 31 33 2e 39 31 56 31 35 33 63 30 2c 36 2e 34 2c 35 2e 32 35 2c 39 2e 37 31 2c 35 2e 34 38 2c 39 2e 38 35 41 31 2c 31 2c 30 2c 30 2c 30 2c 35 35 2c 31 36 33 68 38 30 61 2e 39 33 2e 39 33 2c 30 2c 30 2c 30 2c 2e 35 32 2d 2e 31 35 41 31 32 2e 31 37 2c 31 32 2e 31 37 2c 30 2c 30 2c 30 2c 31 34 31 2c 31 35 33 56 31 31 33 2e 39 31 41 38 2e 39 32 2c 38 2e 39 32 2c 30 2c 30 2c 30 2c 31 33 32 2e 30 39 2c 31 30 35 5a 4d 37 30 2c 31 30 33 2e 38 33 41 33 2e 38 34 2c Data Ascii: 9,105H93v-1.17A5.83,5.83,0,0,0,87.17,98H73.83A5.83,5.83,0,0,0,68,103.83V105H57.91A8.92,8.92,0,0,0,49,113.91V153c0,6.4,5.25,9.71,5.48,9.85A1,1,0,0,0,55,163h80a.93.93,0,0,0,.52-.15A12.17,12.17,0,0,0,141,153V113.91A8.92,8.92,0,0,0,132.09,105ZM70,103.83A3.84,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50182	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2075	OUT	GET /images/backgrounds/home_unicorn/store.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 2795 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-aeb" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 5406 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2471cd412c8a-DFW
2023-12-28 16:22:29 UTC	1038	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 6f 6d 65 70 61 67 65 20 2d 20 66 65 61 74 75 72 65 73 20 62 75 6c 6c 65 74 73 20 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 33 22 3e 3c 67 20 69 64 3d 22 6f 75 74 6c 69 6e 65 73 22 3e 3c 70 61 74 68 20 69 64 3d 22 62 67 22 20 63 6c 61 73 73 3d 22 63 6c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab3"><g id="outlines"><path id="bg" class="cl
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 34 32 2c 30 2c 30 2c 30 2d 33 2d 37 2e 33 32 2c 31 2e 35 2c 31 2e 35 2c 30 2c 30 2c 30 2c 30 2d 2e 33 37 2c 32 2c 32 2c 30 2c 31 2c 30 2d 32 2c 32 2c 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 30 2c 2e 36 34 2d 2e 31 32 41 38 2e 34 33 2c 38 2e 34 33 2c 30 2c 30 2c 31 2c 32 30 2c 31 30 37 2e 36 39 56 31 32 33 48 31 38 61 31 2c 31 2c 30 2c 30 2c 30 2c 30 2c 32 68 39 76 31 61 34 2e 30 38 2c 34 2e 30 38 2c 30 2c 30 2c 30 2d 2e 35 2c 30 2c 34 2e 35 2c 34 2e 35 2c 30 2c 30 2c 30 2d 33 2e 37 34 2c 37 48 31 31 2e 32 51 39 2e 39 32 2c 31 33 30 2e 32 2c 38 2e 38 33 2c 31 32 37 2e 33 5a 4d 35 39 2e 37 36 2c 31 33 33 48 33 30 2e 32 34 41 34 2e 35 2c 34 2e 35 2c 30 2c 30 2c 30 2c 32 39 2c 31 32 36 2e 37 36 56 31 32 35 48 36 34 76 31 61 34 2e 30 38 2c 34 2e 30 38 2c 30 Data Ascii: 42,0,0,0-3-7.32,1.5,1.5,0,0,0,0-.37,2,2,0,1,0-2,2,1.91,1.91,0,0,0,.64-.12A8.43,8.43,0,0,1,20,107.69V123H18a1,1,0,0,0,0,2h9v1a4.08,4.08,0,0,0-.5,0,4.5,4.5,0,0,0-3.74,7H11.2Q9.92,130.2,8.83,127.3ZM59.76,133H30.24A4.5,4.5,0,0,0,29,126.76V125H64v1a4.08,4.08,0
2023-12-28 16:22:29 UTC	388	IN	Data Raw: 30 2c 30 2c 30 2d 31 2e 31 39 2d 35 48 31 38 34 2e 38 43 31 38 34 2e 36 31 2c 31 31 35 2e 39 2c 31 38 34 2e 33 39 2c 31 31 36 2e 38 31 2c 31 38 34 2e 31 35 2c 31 31 37 2e 37 34 5a 6d 31 2e 35 31 2d 37 2e 32 36 63 2d 2e 31 32 2e 37 33 2d 2e 32 33 2c 31 2e 34 35 2d 2e 33 37 2c 32 2e 31 37 61 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 63 30 2c 2e 31 31 2c 30 2c 2e 32 31 2d 2e 30 36 2e 33 32 48 31 37 30 2e 37 39 61 31 37 2e 34 39 2c 31 37 2e 34 39 2c 30 2c 30 2c 30 2d 33 30 2e 35 38 2c 30 48 31 31 34 2e 35 39 61 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2d 31 2e 35 39 2d 31 2e 35 39 56 34 39 2e 35 39 41 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2c 31 31 34 2e 35 39 2c 34 38 48 31 37 34 2e 31 6c 2e 32 2e 33 34 63 2e 36 34 2c 31 2e 30 39 2c 31 2e 32 37 2c 32 Data Ascii: 0,0,0-1.19-5H184.8C184.61,115.9,184.39,116.81,184.15,117.74Zm1.51-7.26c-.12.73-.23,1.45-.37,2.17a0,0,0,0,1,0,0c0,.11,0,.21-.06.32H170.79a17.49,17.49,0,0,0-30.58,0H114.59a1.59,1.59,0,0,1-1.59-1.59V49.59A1.59,1.59,0,0,1,114.59,48H174.1l.2.34c.64,1.09,1.27,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50175	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2364	OUT	GET /images/backgrounds/home_unicorn/tf_downloads.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	329	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 962 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3c2" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 642 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24710fd7aa7b-DFW
2023-12-28 16:22:29 UTC	962	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 32 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 39 32 2e 35 35 2c 36 37 61 33 32 2e 31 2c 33 32 2e 31 2c 30 2c 30 2c 31 2d 35 2e 31 32 2c 31 37 2e 35 35 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2c 31 2e 30 35 48 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab2"><path class="cls-1" d="M92.55,67a32.1,32.1,0,0,1-5.12,17.55,2.21,2.21,0,0,1-2,1.05H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50177	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2360	OUT	GET /images/backgrounds/home_unicorn/tf_share.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 992 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3e0" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13416 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24715a2345e3-DFW
2023-12-28 16:22:29 UTC	992	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 33 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 31 2e 31 39 2c 37 30 2e 36 33 63 2d 31 31 2e 34 31 2c 38 2e 36 2d 32 38 2e 32 39 2c 31 35 2d 34 33 2e 34 31 2c 31 33 2e 32 36 2c 32 2e 38 36 2d 34 2e 31 31 2c 34 2e 30 37 2d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab3"><path class="cls-1" d="M71.19,70.63c-11.41,8.6-28.29,15-43.41,13.26,2.86-4.11,4.07-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50179	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2081	OUT	GET /images/backgrounds/home_unicorn/store_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 6086 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-17c6" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6469 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247158473ace-DFW
2023-12-28 16:22:29 UTC	1037	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 62 32 62 37 63 34 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 66 66 64 62 38 30 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 62 33 64 64 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 6f 6d 65 70 61 67 65 20 2d 20 66 65 61 74 75 72 65 73 20 62 75 6c 6c 65 74 73 20 73 76 67 20 72 65 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#07f;}.cls-2{fill:#fff;}.cls-3{fill:#b2b7c4;}.cls-4{fill:#ffdb80;}.cls-5{fill:#b3ddff;}</style></defs><title>homepage - features bullets svg re
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 32 68 39 76 31 61 34 2e 30 38 2c 34 2e 30 38 2c 30 2c 30 2c 30 2d 2e 35 2c 30 2c 34 2e 35 2c 34 2e 35 2c 30 2c 30 2c 30 2d 33 2e 37 34 2c 37 48 31 31 2e 32 43 31 30 2e 33 35 2c 31 33 31 2e 31 33 2c 39 2e 35 36 2c 31 32 39 2e 32 33 2c 38 2e 38 33 2c 31 32 37 2e 33 5a 4d 35 39 2e 37 36 2c 31 33 33 48 33 30 2e 32 34 41 34 2e 34 39 2c 34 2e 34 39 2c 30 2c 30 2c 30 2c 32 39 2c 31 32 36 2e 37 36 56 31 32 35 48 36 34 76 31 61 34 2e 30 38 2c 34 2e 30 38 2c 30 2c 30 2c 30 2d 2e 35 2c 30 2c 34 2e 35 2c 34 2e 35 2c 30 2c 30 2c 30 2d 33 2e 37 34 2c 37 5a 6d 33 2e 37 34 2d 35 61 32 2e 37 33 2c 32 2e 37 33 2c 30 2c 30 2c 31 2c 2e 35 2c 30 68 30 61 32 2e 35 34 2c 32 2e 35 34 2c 30 2c 30 2c 31 2c 31 2e 34 31 2e 38 35 2c 32 2e 35 2c 32 2e 35 2c 30 2c 31 2c 31 2d 31 2e 39 Data Ascii: 2h9v1a4.08,4.08,0,0,0-.5,0,4.5,4.5,0,0,0-3.74,7H11.2C10.35,131.13,9.56,129.23,8.83,127.3ZM59.76,133H30.24A4.49,4.49,0,0,0,29,126.76V125H64v1a4.08,4.08,0,0,0-.5,0,4.5,4.5,0,0,0-3.74,7Zm3.74-5a2.73,2.73,0,0,1,.5,0h0a2.54,2.54,0,0,1,1.41.85,2.5,2.5,0,1,1-1.9
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 2e 33 32 48 31 37 30 2e 37 39 61 31 37 2e 34 39 2c 31 37 2e 34 39 2c 30 2c 30 2c 30 2d 33 30 2e 35 38 2c 30 48 31 31 34 2e 35 39 61 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2d 31 2e 35 39 2d 31 2e 35 39 56 34 39 2e 35 39 41 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 31 2c 31 31 34 2e 35 39 2c 34 38 48 31 37 34 2e 31 6c 2e 32 2e 33 34 71 31 2c 31 2e 36 33 2c 31 2e 38 36 2c 33 2e 33 6c 2e 33 37 2e 37 63 2e 36 2c 31 2e 31 35 2c 31 2e 31 39 2c 32 2e 33 31 2c 31 2e 37 34 2c 33 2e 34 37 6c 30 2c 30 61 39 31 2e 36 36 2c 39 31 2e 36 36 2c 30 2c 30 2c 31 2c 37 2e 33 38 2c 35 34 2e 36 33 5a 22 2f 3e 3c 2f 67 3e 3c 70 61 74 68 20 69 64 3d 22 62 67 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 38 39 2c 39 35 61 39 33 2e 36 36 2c 39 33 2e 36 36 2c Data Ascii: .32H170.79a17.49,17.49,0,0,0-30.58,0H114.59a1.59,1.59,0,0,1-1.59-1.59V49.59A1.59,1.59,0,0,1,114.59,48H174.1l.2.34q1,1.63,1.86,3.3l.37.7c.6,1.15,1.19,2.31,1.74,3.47l0,0a91.66,91.66,0,0,1,7.38,54.63Z"/></g><path id="bg" class="cls-2" d="M189,95a93.66,93.66,
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 37 5a 6d 30 2c 37 61 32 2e 35 2c 32 2e 35 2c 30 2c 31 2c 31 2c 32 2e 35 2d 32 2e 35 41 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 31 35 35 2e 35 2c 31 32 34 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 38 30 2e 30 39 2c 35 35 41 39 34 2c 39 34 2c 30 2c 30 2c 30 2c 31 2c 39 35 61 39 34 2e 37 31 2c 39 34 2e 37 31 2c 30 2c 30 2c 30 2c 36 2c 33 33 41 39 34 2c 39 34 2c 30 2c 30 2c 30 2c 31 38 35 2c 31 32 32 63 2e 36 39 2d 32 2e 33 2c 31 2e 33 2d 34 2e 36 33 2c 31 2e 38 31 2d 37 2c 2e 31 34 2d 2e 36 36 2e 32 38 2d 31 2e 33 33 2e 34 2d 32 61 39 34 2e 31 36 2c 39 34 2e 31 36 2c 30 2c 30 2c 30 2d 37 2e 31 37 2d 35 38 5a 4d 38 2e 38 33 2c 31 32 37 2e 33 41 39 33 2e 31 2c 39 33 2e 31 2c 30 2c 30 2c 31 2c 33 2c 39 35 2c 39 32 Data Ascii: 7Zm0,7a2.5,2.5,0,1,1,2.5-2.5A2.5,2.5,0,0,1,155.5,124Z"/><path class="cls-1" d="M180.09,55A94,94,0,0,0,1,95a94.71,94.71,0,0,0,6,33A94,94,0,0,0,185,122c.69-2.3,1.3-4.63,1.81-7,.14-.66.28-1.33.4-2a94.16,94.16,0,0,0-7.17-58ZM8.83,127.3A93.1,93.1,0,0,1,3,95,92
2023-12-28 16:22:29 UTC	942	IN	Data Raw: 32 2c 39 32 2c 30 2c 30 2c 31 2c 31 32 2e 31 34 2c 31 33 35 68 31 36 35 2e 37 43 31 37 37 2e 35 37 2c 31 33 35 2e 35 36 2c 31 37 37 2e 32 39 2c 31 33 36 2e 31 31 2c 31 37 37 2c 31 33 36 2e 36 36 5a 6d 31 2e 37 36 2d 33 2e 36 36 48 31 36 30 2e 33 39 61 31 32 2e 35 2c 31 32 2e 35 2c 30 2c 31 2c 30 2d 39 2e 37 38 2c 30 48 37 39 2e 34 32 6c 33 31 2e 38 32 2d 32 30 2e 33 33 61 33 2e 35 39 2c 33 2e 35 39 2c 30 2c 30 2c 30 2c 33 2e 33 35 2c 32 2e 33 33 48 31 32 35 76 37 68 31 34 2e 38 36 61 31 2e 37 35 2c 31 2e 37 35 2c 30 2c 30 2c 30 2c 2e 31 34 2d 2e 35 2c 31 34 2e 37 38 2c 31 34 2e 37 38 2c 30 2c 30 2c 31 2c 2e 30 37 2d 31 2e 35 2c 31 35 2e 32 35 2c 31 35 2e 32 35 2c 30 2c 30 2c 31 2c 31 2e 33 36 2d 35 2c 31 34 2c 31 34 2c 30 2c 30 2c 31 2c 31 2e 31 32 2d 32 Data Ascii: 2,92,0,0,1,12.14,135h165.7C177.57,135.56,177.29,136.11,177,136.66Zm1.76-3.66H160.39a12.5,12.5,0,1,0-9.78,0H79.42l31.82-20.33a3.59,3.59,0,0,0,3.35,2.33H125v7h14.86a1.75,1.75,0,0,0,.14-.5,14.78,14.78,0,0,1,.07-1.5,15.25,15.25,0,0,1,1.36-5,14,14,0,0,1,1.12-2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50181	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2076	OUT	GET /images/backgrounds/home_unicorn/access.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 4230 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1086" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11045 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24719a9e0b8a-DFW
2023-12-28 16:22:29 UTC	1036	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 63 63 65 37 66 66 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 6f 6d 65 70 61 67 65 20 2d 20 66 65 61 74 75 72 65 73 20 62 75 6c 6c 65 74 73 20 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 34 22 3e 3c 67 20 69 64 3d 22 6f 75 74 6c 69 6e 65 73 22 3e 3c 63 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#cce7ff;}.cls-3{fill:#07f;}</style></defs><title>homepage - features bullets svg ready</title><g id="ab4"><g id="outlines"><c
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 38 38 2c 31 39 2e 38 38 2c 30 2c 30 2c 30 2c 31 37 2e 37 37 2c 30 2c 31 37 2e 38 38 2c 31 37 2e 38 38 2c 30 2c 30 2c 31 2c 31 36 2e 30 36 2c 30 2c 31 39 2e 38 38 2c 31 39 2e 38 38 2c 30 2c 30 2c 30 2c 31 37 2e 37 37 2c 30 2c 31 36 2e 31 31 2c 31 36 2e 31 31 2c 30 2c 30 2c 31 2c 37 2e 34 37 2d 31 2e 38 39 41 39 32 2e 31 33 2c 39 32 2e 31 33 2c 30 2c 30 2c 31 2c 39 35 2c 31 38 37 5a 6d 35 2e 35 36 2d 38 37 2e 33 39 61 31 38 2c 31 38 2c 30 2c 30 2c 30 2c 39 2e 32 34 2c 34 2e 32 36 2c 31 39 2e 32 38 2c 31 39 2e 32 38 2c 30 2c 30 2c 30 2c 31 32 2e 32 37 2d 32 2e 37 33 71 2e 38 36 2d 2e 35 2c 31 2e 36 38 2d 31 2e 30 38 63 2e 33 2d 2e 32 31 2e 36 2d 2e 34 34 2e 39 2d 2e 36 37 61 31 2c 31 2c 30 2c 30 2c 30 2c 2e 31 36 2d 31 2e 34 31 2c 31 2c 31 2c 30 2c 30 2c 30 Data Ascii: 88,19.88,0,0,0,17.77,0,17.88,17.88,0,0,1,16.06,0,19.88,19.88,0,0,0,17.77,0,16.11,16.11,0,0,1,7.47-1.89A92.13,92.13,0,0,1,95,187Zm5.56-87.39a18,18,0,0,0,9.24,4.26,19.28,19.28,0,0,0,12.27-2.73q.86-.5,1.68-1.08c.3-.21.6-.44.9-.67a1,1,0,0,0,.16-1.41,1,1,0,0,0
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 34 38 2e 36 34 2c 30 2c 30 2c 31 2c 31 31 31 2e 31 33 2c 38 33 43 31 31 30 2e 34 31 2c 38 33 2e 31 34 2c 31 30 39 2e 36 39 2c 38 33 2e 32 2c 31 30 39 2c 38 33 2e 32 34 5a 4d 31 36 34 2c 31 31 34 76 35 48 39 31 63 2d 36 2e 34 37 2c 30 2d 31 38 2e 39 33 2d 31 2d 32 34 2e 35 33 2d 32 2e 39 4c 35 33 2e 38 39 2c 31 31 32 76 2d 34 2e 39 6c 31 32 2c 33 2e 38 35 63 36 2c 32 2c 32 30 2c 33 2c 32 36 2e 31 35 2c 33 5a 6d 2d 39 38 2e 31 35 2c 34 63 35 2e 37 39 2c 31 2e 39 33 2c 31 38 2e 35 35 2c 33 2c 32 35 2e 31 35 2c 33 68 37 30 2e 33 6c 2d 31 2e 32 31 2c 31 33 2e 38 37 61 31 36 2e 33 32 2c 31 36 2e 33 32 2c 30 2c 30 2c 31 2d 35 2e 37 2d 31 2e 37 38 2c 31 39 2e 38 38 2c 31 39 2e 38 38 2c 30 2c 30 2c 30 2d 31 37 2e 37 37 2c 30 2c 31 37 2e 38 38 2c 31 37 2e 38 38 2c Data Ascii: 48.64,0,0,1,111.13,83C110.41,83.14,109.69,83.2,109,83.24ZM164,114v5H91c-6.47,0-18.93-1-24.53-2.9L53.89,112v-4.9l12,3.85c6,2,20,3,26.15,3Zm-98.15,4c5.79,1.93,18.55,3,25.15,3h70.3l-1.21,13.87a16.32,16.32,0,0,1-5.7-1.78,19.88,19.88,0,0,0-17.77,0,17.88,17.88,
2023-12-28 16:22:29 UTC	456	IN	Data Raw: 2c 30 2c 31 2c 30 2c 35 33 2c 38 38 2e 36 35 61 37 31 2c 37 31 2c 30 2c 30 2c 31 2c 31 36 2e 39 35 2c 31 31 2e 34 36 2c 31 2e 35 2c 31 2e 35 2c 30 2c 31 2c 30 2c 32 2c 31 2e 38 38 63 31 2e 36 2c 31 2e 35 38 2c 33 2e 31 34 2c 33 2e 32 33 2c 34 2e 35 38 2c 35 6c 33 2e 36 38 2c 34 2e 34 32 63 2d 35 2e 32 34 2d 2e 34 38 2d 31 30 2e 36 2d 31 2e 32 34 2d 31 33 2e 37 2d 32 2e 32 37 4c 35 33 2e 32 2c 31 30 34 2e 38 33 61 31 2c 31 2c 30 2c 30 2c 30 2d 31 2e 33 31 2c 31 76 37 61 31 2c 31 2c 30 2c 30 2c 30 2c 2e 36 39 2c 31 6c 33 2e 34 31 2c 31 2e 31 41 33 35 2c 33 35 2c 30 2c 30 2c 30 2c 37 30 2c 31 33 32 2e 36 6c 2d 31 2e 30 37 2e 35 61 31 36 2e 31 32 2c 31 36 2e 31 32 2c 30 2c 30 2c 31 2d 38 2c 31 2e 39 2c 31 36 2e 31 32 2c 31 36 2e 31 32 2c 30 2c 30 2c 31 2d 38 Data Ascii: ,0,1,0,53,88.65a71,71,0,0,1,16.95,11.46,1.5,1.5,0,1,0,2,1.88c1.6,1.58,3.14,3.23,4.58,5l3.68,4.42c-5.24-.48-10.6-1.24-13.7-2.27L53.2,104.83a1,1,0,0,0-1.31,1v7a1,1,0,0,0,.69,1l3.41,1.1A35,35,0,0,0,70,132.6l-1.07.5a16.12,16.12,0,0,1-8,1.9,16.12,16.12,0,0,1-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50187	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2367	OUT	GET /images/backgrounds/home_unicorn/tf_multi_upload.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523
2023-12-28 16:22:29 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 986 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3da" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6479 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2473eb58eb0a-DFW
2023-12-28 16:22:29 UTC	986	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 34 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 35 2e 30 37 2c 38 30 2e 38 36 61 34 2e 37 2c 34 2e 37 2c 30 2c 31 2c 30 2d 33 2e 32 36 2d 31 2e 33 38 41 34 2e 34 35 2c 34 2e 34 35 2c 30 2c 30 2c 30 2c 37 35 2e 30 37 2c 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab4"><path class="cls-1" d="M75.07,80.86a4.7,4.7,0,1,0-3.26-1.38A4.45,4.45,0,0,0,75.07,8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50188	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2723	OUT	GET /images/backgrounds/home_unicorn/tf_organize.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:29 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 419 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1a3" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11243 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24746ec1479f-DFW
2023-12-28 16:22:29 UTC	419	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 66 65 61 74 75 72 65 73 2d 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 31 35 22 3e 3c 70 61 74 68 20 69 64 3d 22 66 6f 6c 64 65 72 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 38 30 2c 38 34 48 33 35 61 36 2c 36 2c 30 2c 30 2c 31 2d 36 2d 36 56 34 32 61 36 2c 36 2c 30 2c 30 2c 31 2c 36 2d 36 48 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>features-svg ready</title><g id="ab15"><path id="folder" class="cls-1" d="M80,84H35a6,6,0,0,1-6-6V42a6,6,0,0,1,6-6H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50190	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2727	OUT	GET /images/backgrounds/home_unicorn/tf_1_time_links.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:29 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 1213 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-4bd" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 8448 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247468744653-DFW
2023-12-28 16:22:29 UTC	1038	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 36 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 38 31 2e 38 32 2c 33 36 2e 35 35 6c 31 2e 36 33 2c 31 2e 36 33 2d 38 2e 36 33 2c 38 2e 36 2c 32 2e 34 31 2c 32 2e 34 61 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 30 2c 33 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab6"><path class="cls-1" d="M81.82,36.55l1.63,1.63-8.63,8.6,2.41,2.4a2.26,2.26,0,0,1,0,3
2023-12-28 16:22:29 UTC	175	IN	Data Raw: 6c 2d 33 2e 31 38 2d 33 2e 32 32 41 31 2e 31 33 2c 31 2e 31 33 2c 30 2c 31 2c 31 2c 38 37 2c 33 37 2e 38 39 6c 33 2e 32 32 2c 33 2e 31 38 61 31 2e 32 2c 31 2e 32 2c 30 2c 30 2c 31 2c 30 2c 31 2e 36 33 5a 6d 31 2e 31 33 2d 37 2e 32 39 61 31 2e 31 33 2c 31 2e 31 33 2c 30 2c 30 2c 31 2d 2e 38 31 2c 31 2e 39 35 68 2d 33 2e 34 61 31 2e 31 33 2c 31 2e 31 33 2c 30 2c 31 2c 31 2c 30 2d 32 2e 32 36 68 33 2e 34 41 31 2e 31 2c 31 2e 31 2c 30 2c 30 2c 31 2c 39 31 2e 33 37 2c 33 35 2e 34 32 5a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: l-3.18-3.22A1.13,1.13,0,1,1,87,37.89l3.22,3.18a1.2,1.2,0,0,1,0,1.63Zm1.13-7.29a1.13,1.13,0,0,1-.81,1.95h-3.4a1.13,1.13,0,1,1,0-2.26h3.4A1.1,1.1,0,0,1,91.37,35.42Z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50191	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2719	OUT	GET /images/backgrounds/home_unicorn/tf_apps.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:29 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 2328 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-918" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6900 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247479fd6c49-DFW
2023-12-28 16:22:29 UTC	1038	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 37 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 34 2e 34 31 2c 33 37 2e 32 39 56 38 32 2e 37 31 61 35 2e 37 36 2c 35 2e 37 36 2c 30 2c 30 2c 31 2d 35 2e 36 38 2c 35 2e 36 38 48 33 36 61 35 2e 37 36 2c 35 2e 37 36 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab7"><path class="cls-1" d="M64.41,37.29V82.71a5.76,5.76,0,0,1-5.68,5.68H36a5.76,5.76,0,
2023-12-28 16:22:29 UTC	1290	IN	Data Raw: 31 2c 32 2e 39 2c 35 2e 33 33 2c 35 2e 33 33 2c 30 2c 30 2c 30 2c 31 2c 33 2e 31 32 41 34 2e 32 36 2c 34 2e 32 36 2c 30 2c 30 2c 30 2c 38 39 2e 34 35 2c 37 38 2e 36 38 5a 4d 38 34 2e 31 39 2c 36 32 2e 32 36 61 35 2e 33 34 2c 35 2e 33 34 2c 30 2c 30 2c 31 2d 2e 34 31 2c 31 2e 39 2c 35 2e 37 35 2c 35 2e 37 35 2c 30 2c 30 2c 31 2d 31 2e 33 2c 31 2e 39 33 2c 34 2c 34 2c 30 2c 30 2c 31 2d 31 2e 35 31 2c 31 2c 37 2e 38 36 2c 37 2e 38 36 2c 30 2c 30 2c 31 2d 31 2e 34 36 2e 32 34 2c 36 2e 33 39 2c 36 2e 33 39 2c 30 2c 30 2c 31 2c 31 2e 30 39 2d 33 2e 36 2c 35 2e 35 38 2c 35 2e 35 38 2c 30 2c 30 2c 31 2c 33 2e 35 2d 32 2e 30 37 73 30 2c 2e 30 38 2c 30 2c 2e 31 35 61 31 2e 35 31 2c 31 2e 35 31 2c 30 2c 30 2c 30 2c 30 2c 2e 31 35 73 30 2c 2e 30 38 2c 30 2c 2e 31 34 Data Ascii: 1,2.9,5.33,5.33,0,0,0,1,3.12A4.26,4.26,0,0,0,89.45,78.68ZM84.19,62.26a5.34,5.34,0,0,1-.41,1.9,5.75,5.75,0,0,1-1.3,1.93,4,4,0,0,1-1.51,1,7.86,7.86,0,0,1-1.46.24,6.39,6.39,0,0,1,1.09-3.6,5.58,5.58,0,0,1,3.5-2.07s0,.08,0,.15a1.51,1.51,0,0,0,0,.15s0,.08,0,.14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50194	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	741	OUT	GET /lp/global/img/start_menu_w10_white_theme.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:30 UTC	358	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/png Content-Length: 83450 Connection: close Last-Modified: Mon, 08 May 2023 14:44:21 GMT ETag: "64590ac5-145fa" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:30 UTC	16026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 db 00 00 01 ca 08 03 00 00 00 e5 cc 77 39 00 00 03 00 50 4c 54 45 ec f5 f9 ee f6 fa ff ff ff fa fd fe a5 d1 e5 9c cc e1 9a c8 df a7 cb e1 87 c0 db 96 ca e0 a1 ca e1 94 c4 dd 8c c2 dc 9f cf e3 af d7 e8 ff 18 0e 4c 62 f9 aa d4 e7 7f bd d9 b2 d2 e5 fe f6 fb fb f4 f7 76 bb d6 eb f1 f6 f0 f7 fc ab ce e3 8f c6 df ff f7 f5 fd ef f7 f6 fc fe dc 29 1e ff ef fc f4 f5 f9 f6 f8 fc 20 2f 48 fe f4 ef f1 df e8 e8 dc df f0 e0 e2 fe e6 da ff ef ea f8 ed f2 00 ba fe f9 e8 e6 e6 ee f3 ce d0 d4 07 04 06 fe ec e2 01 7d f3 ff 81 ee fe 9a f9 e1 df e6 00 7c e0 02 c9 fe 01 ab fe 25 37 4c a2 c5 d9 ff a6 fc dc e0 ee e2 e9 ef 9c 29 73 00 83 fa aa 2f 80 fc 77 e3 fc e7 f7 02 9d ff f5 e1 ec ff b2 fc 8e 22 66 c3 38 97 b5 dd ec 00 Data Ascii: PNGIHDRw9PLTELbv) /H}\|%7L)s/w"f8
2023-12-28 16:22:30 UTC	16384	IN	Data Raw: 5a b7 17 57 44 fc c8 4c f8 9f 15 df 66 88 ef b2 07 fe 0c bf 33 d7 ad b7 26 d9 6c 93 d4 83 ed 07 48 bf ed f9 93 e6 55 a2 88 97 fe a5 dd fc 0c cd 96 6c 3d 71 d9 7e c4 ea 76 cf f6 5b 03 8f 97 c1 6d 1f e5 71 3a ee f9 13 54 30 0d de 58 91 0a b4 8b a9 4c ba b9 40 20 3e 1e fb ce 80 2b 41 3c 76 34 61 20 2d b7 f5 db 43 51 55 fc a2 24 37 9d f7 34 d8 6e 81 92 4d e8 c7 e3 25 17 e7 94 57 f2 8f ef de e8 e3 97 57 64 3e c5 47 59 9e 78 80 13 51 9a b0 bc 1b 3d 9f ea 2b 35 dd f1 4f fe 0b 23 26 2d e1 c4 fa 88 6d ea b6 80 6d 8b ea 45 68 0f 78 63 99 0f 8b b7 b5 27 9a 32 61 97 29 d6 27 a9 db 58 68 4b 46 ca 8d 83 1e 95 e8 a9 c1 ef 44 9c e1 36 4f 9e 55 ee 8b e6 0c 1c 27 ba 47 6d 37 e4 9b 0c ba 68 4a 7a f7 96 c6 2f af 7a 74 0f ec 98 3d cb 3b c3 99 8d 4f 0f b6 70 6a bc a4 ef ff 27 Data Ascii: ZWDLf3&lHUl=q~v[mq:T0XL@ >+A<v4a -CQU$74nM%WWd>GYxQ=+5O#&-mmEhxc'2a)'XhKFD6OU'Gm7hJz/zt=;Opj'
2023-12-28 16:22:30 UTC	16384	IN	Data Raw: dc 84 da 82 70 e7 b3 38 76 31 e4 b7 1d c8 1e 75 0d 10 c5 a3 3f a4 41 b4 12 50 71 6d 91 2f 7f 65 ab fc 88 1e f2 b1 a4 45 b2 fd 05 a5 1d 06 bd d1 88 3d 2b 5c 1e 85 c2 35 82 2d bc 6b a0 9f a5 b6 65 4e e4 b7 d9 61 7a c4 82 64 33 3d c2 f9 c8 ad c6 5a 6c 5b 78 f5 ce 41 77 b5 5d 12 6f d0 7d 7e 45 77 9e 40 a1 74 cb 97 fc 74 79 69 ba ef 92 72 df 59 a3 dc d9 70 d2 d8 be 1d 89 40 0a f7 23 26 dc 5a 58 f2 f1 9f 08 b7 37 23 75 a6 c4 2f e3 46 d1 25 b8 1d d9 a6 d9 5e b7 b3 18 91 7c 0b 6e bf a8 55 47 38 c8 87 a4 27 39 ed 44 b1 f7 dd fa 09 57 90 a4 20 f1 59 7e 5b 5b ca 0c ec 6a bd 76 d3 6d b3 61 e0 4f ec 34 0d d9 3c 22 c0 b1 89 c1 1e ed 76 04 bb e0 94 8d 05 c6 8f 76 33 37 f2 9f 28 77 a8 d8 36 b4 d7 e7 9b 58 a3 46 e5 ad c9 c4 cf b7 5c e4 e8 7e 5d e2 2d ba 29 dd bf ec f3 f2 Data Ascii: p8v1u?APqm/eE=+\5-keNazd3=Zl[xAw]o}~Ew@ttyirYp@#&ZX7#u/F%^\|nUG8'9DW Y~[[jvmaO4<"vv37(w6XF\~]-)
2023-12-28 16:22:30 UTC	16384	IN	Data Raw: dc 52 2d de d4 6d ee 95 02 98 a9 81 ee 8e 4c f7 48 25 6d 32 25 c8 2d 66 94 e3 23 54 6c 4a b7 56 66 02 95 71 c7 b6 bc 1e 00 9e 03 d9 ce 72 7a bc 98 e9 1f 80 8e a7 4d be 98 35 dd 32 ce 98 4c 61 64 6c 20 35 e2 a5 18 75 28 7c d3 6f 77 9b 85 03 c6 0c 60 55 df e4 4b 06 d2 3f 3e 96 22 db 6d 43 1d f7 95 62 b6 81 36 d9 46 c7 d9 24 c2 b2 7d 70 9d 0a b7 4f 37 64 7b be 2f db d4 6d b0 7d c3 4e c6 aa 19 5f b6 21 dc 64 7b f3 36 81 3b 02 19 09 6e 99 4a ee fe c3 f1 6d 78 45 b6 7d e1 e6 5c d2 f3 db a3 6b 5f 7d d5 55 9e 6e 5f 10 f9 ed 8f bc 09 6c 4b c4 9e e4 a9 60 5b 42 74 5b 45 5b ba 40 b8 99 fa 93 40 07 ae 5d c5 47 0a b7 63 9b 72 4b 7a 5b 09 37 24 3d e9 bd d2 74 9f ff 67 38 c2 79 2e c1 2e 49 2a de 59 5e 04 a8 41 ba 07 25 fa 95 6d ee 27 b1 ac 1a 54 49 40 6b 45 a3 d8 19 43 Data Ascii: R-mLH%m2%-f#TlJVfqrzM52Ladl 5u(\|ow`UK?>"mCb6F$}pO7d{/m}N_!d{6;nJmxE}\k_}Un_lK`[Bt[E[@@]GcrKz[7$=tg8y..I*Y^A%m'TI@kEC
2023-12-28 16:22:30 UTC	16384	IN	Data Raw: 36 55 9f ed b5 f5 d9 de bb 88 6e 3b 15 f5 3d 73 2d c8 c0 e1 2f cd 91 f1 3d f5 d8 56 b4 cd 03 6c 7f 02 10 7f ea fd 1a 24 fb 0d 9f b8 e6 a9 16 d9 81 5e 7f c1 9a 43 92 6f ab 5c 63 b1 fd 44 6e 47 08 55 7b d3 a6 3e 41 7b 41 4b 82 30 b2 fd cd c0 91 70 9f 24 aa ed 0b c9 36 42 64 db d1 ed 5f 6a 49 12 1d 65 9b ce 84 74 eb 8b ca 34 bd cd 5d 93 c4 d9 46 9b 4b 5e b9 64 4a 75 5b f0 6d 56 b2 41 b5 2a 72 50 94 04 e3 d2 a9 c5 90 24 8a fe 33 4a 6e b3 3c a2 16 bf 12 b5 31 15 3b ec c3 97 5c 63 a1 b6 88 36 88 5e a5 5e 1b da bd 4e 74 bb b6 37 01 6c 63 63 c2 33 07 db 7d 8d 4a 16 a0 14 ab d8 6c d0 0f c8 bb ba 22 29 50 db d9 d5 d5 e9 25 fd 54 a4 0b e1 e5 aa 58 30 95 2e 55 4b 55 ff f5 5b 4e cd f4 a1 2a 39 3e 46 bf 6d 73 7a 48 d9 8b 1d 3d 1a ab 8d 96 70 36 79 5e ba 4d bb dd 70 72 Data Ascii: 6Un;=s-/=Vl$^Co\cDnGU{>A{AK0p$6Bd_jIet4]FK^dJu[mVArP$3Jn<1;\c6^^Nt7lcc3}Jl")P%TX0.UKU[N9>FmszH=p6y^Mpr
2023-12-28 16:22:30 UTC	1888	IN	Data Raw: 0e 50 ed 15 dd d0 b2 3d 5b cd e1 d9 3a 4f d2 3c 07 28 f3 24 73 ff 5e 92 b3 f2 64 1b ff 06 1e ab 8a 64 b1 bf 34 aa a2 b2 56 1c f4 06 69 56 01 d7 83 1c 6c 57 41 6c df 3d 56 c4 f0 e3 04 c1 b7 05 7a d0 43 2c 52 a5 38 9b 83 ec 32 ef 61 a4 4a ac 61 97 45 fc b7 f6 ed 5d 6c d3 b5 59 71 9e db 17 e3 6d c5 16 5d 14 7a f5 69 bb c0 e6 63 24 ed 5c eb 9a e4 ee a7 48 b6 2d b5 ef f4 6d a5 5b c4 db 48 77 4d 52 b3 36 50 d8 18 39 8b bb 94 68 46 03 d3 41 74 3d ac 34 92 3e f2 f2 e7 5e 3f b1 87 30 7a de 8c 54 ab 61 1d 6f 0f 93 6a 86 31 a8 7b 41 7f 66 66 49 3a 5c 2e 07 33 93 8c c7 93 51 bf 1c 2f 93 7e 25 5f f6 31 ee 4f fb 8b b9 b5 ee 94 31 09 3e 26 be bd e2 fc 36 d9 16 71 ed 66 be 3f 94 85 cb 31 27 40 80 6b 56 c1 ab 01 31 ea 12 20 c7 a9 09 52 18 7a 99 03 eb 20 11 6a 83 b2 08 ca Data Ascii: P=[:O<($s^dd4ViVlWAl=VzC,R82aJaE]lYqm]zic$\H-m[HwMR6P9hFAt=4>^?0zTaoj1{AffI:\.3Q/~%_1O1>&6qf?1'@kV1 Rz j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50193	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2722	OUT	GET /images/backgrounds/home_unicorn/pro_driver.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:29 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 10481 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-28f1" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 12950 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2474c9b54636-DFW
2023-12-28 16:22:29 UTC	1035	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 34 36 22 20 68 65 69 67 68 74 3d 22 32 38 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 36 20 32 38 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 39 64 39 37 65 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 65 38 65 61 65 63 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 65 66 66 30 66 31 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 38 36 38 61 38 64 3b 7d 2e 63 6c 73 2d 36 7b 66 69 6c 6c 3a 23 65 33 65 34 65 35 3b 7d 2e 63 6c 73 2d 37 7b 66 69 6c 6c 3a 23 66 30 66 31 66 31 3b 7d 2e 63 6c 73 2d 38 7b 66 69 6c 6c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="446" height="283" viewBox="0 0 446 283"><defs><style>.cls-1{fill:#f9d97e;}.cls-2{fill:#e8eaec;}.cls-3{fill:#fff;}.cls-4{fill:#eff0f1;}.cls-5{fill:#868a8d;}.cls-6{fill:#e3e4e5;}.cls-7{fill:#f0f1f1;}.cls-8{fill
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 30 2c 30 2d 31 32 2e 34 2d 31 34 68 2d 32 37 61 31 32 2e 34 34 2c 31 32 2e 34 34 2c 30 2c 30 2c 30 2d 31 32 2e 34 2c 31 34 48 32 36 2e 35 61 31 32 2e 35 2c 31 32 2e 35 2c 30 2c 30 2c 30 2c 30 2c 32 35 68 36 31 61 31 32 2e 34 39 2c 31 32 2e 34 39 2c 30 2c 30 2c 30 2c 2e 34 2d 32 35 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 20 2d 31 30 37 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 32 37 39 2c 32 32 31 56 32 30 33 48 32 36 32 56 31 36 39 68 2d 32 76 33 34 48 32 34 33 76 31 38 48 32 32 35 76 34 38 2e 36 68 32 56 32 32 33 68 31 38 56 32 30 35 68 33 32 76 31 38 68 31 38 56 33 33 38 68 32 56 32 32 31 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 20 2d 31 Data Ascii: 0,0-12.4-14h-27a12.44,12.44,0,0,0-12.4,14H26.5a12.5,12.5,0,0,0,0,25h61a12.49,12.49,0,0,0,.4-25Z" transform="translate(-2 -107)"/><path class="cls-2" d="M279,221V203H262V169h-2v34H243v18H225v48.6h2V223h18V205h32v18h18V338h2V221Z" transform="translate(-2 -1
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 35 2e 35 35 2c 33 36 35 2e 36 35 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 20 2d 31 30 37 29 22 2f 3e 3c 2f 67 3e 3c 67 20 69 64 3d 22 77 68 65 65 6c 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 77 68 65 65 6c 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 36 22 20 63 78 3d 22 36 39 2e 37 33 22 20 63 79 3d 22 32 36 36 2e 35 39 22 20 72 3d 22 31 33 2e 34 31 22 2f 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 63 78 3d 22 36 39 2e 37 33 22 20 63 79 3d 22 32 36 36 2e 35 39 22 20 72 3d 22 38 2e 39 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 38 22 20 64 3d 22 4d 37 31 2e 37 33 2c 33 38 33 2e 35 33 61 39 2e 39 34 2c 39 2e 39 34 2c 30 2c 31 2c 31 2c 39 2e 39 34 2d 39 2e Data Ascii: 5.55,365.65Z" transform="translate(-2 -107)"/></g><g id="wheel-2" data-name="wheel"><circle class="cls-6" cx="69.73" cy="266.59" r="13.41"/><circle class="cls-7" cx="69.73" cy="266.59" r="8.94"/><path class="cls-8" d="M71.73,383.53a9.94,9.94,0,1,1,9.94-9.
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 34 2c 33 35 33 6c 2e 36 2c 30 41 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2c 34 38 2c 33 35 35 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 20 2d 31 30 37 29 22 2f 3e 3c 2f 67 3e 3c 70 61 74 68 20 69 64 3d 22 6f 75 74 6c 69 6e 65 73 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 38 22 20 64 3d 22 4d 31 38 39 2e 36 2c 33 37 39 2e 32 6c 2d 34 2e 36 2d 32 2e 37 37 56 33 36 36 61 31 33 2e 33 2c 31 33 2e 33 2c 30 2c 30 2c 30 2d 34 2e 32 34 2d 39 2e 36 37 2c 34 2e 33 32 2c 34 2e 33 32 2c 30 2c 30 2c 30 2d 32 2e 33 34 2d 38 2e 32 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 30 2d 2e 33 37 2d 2e 34 33 2c 32 2e 35 39 2c 32 2e 35 39 2c 30 2c 30 2c 30 2d 32 2d 2e 36 38 2c 31 35 2e 32 32 2c 31 35 2e 32 32 2c 30 2c 30 2c 30 2d 39 2e 34 Data Ascii: 4,353l.6,0A1.91,1.91,0,0,1,48,355Z" transform="translate(-2 -107)"/></g><path id="outlines" class="cls-8" d="M189.6,379.2l-4.6-2.77V366a13.3,13.3,0,0,0-4.24-9.67,4.32,4.32,0,0,0-2.34-8.27,2.63,2.63,0,0,0-.37-.43,2.59,2.59,0,0,0-2-.68,15.22,15.22,0,0,0-9.4
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 31 2e 36 32 4c 38 38 2c 33 34 30 2e 37 41 31 33 2e 39 34 2c 31 33 2e 39 34 2c 30 2c 30 2c 31 2c 39 33 2c 33 33 37 2e 31 31 5a 6d 2d 34 39 2e 33 38 2d 31 2e 35 61 31 2e 35 33 2c 31 2e 35 33 2c 30 2c 30 2c 31 2d 31 2e 31 34 2d 31 2e 38 33 6c 2e 31 32 2d 2e 35 33 61 31 2e 35 32 2c 31 2e 35 32 2c 30 2c 30 2c 31 2c 31 2e 38 33 2d 31 2e 31 34 6c 32 31 2e 35 31 2c 35 41 31 2e 35 33 2c 31 2e 35 33 2c 30 2c 30 2c 31 2c 36 37 2e 30 38 2c 33 33 39 6c 2d 2e 31 32 2e 35 33 61 31 2e 35 33 2c 31 2e 35 33 2c 30 2c 30 2c 31 2d 31 2e 38 33 2c 31 2e 31 34 5a 6d 2e 33 33 2c 32 31 2e 30 37 41 31 30 2e 38 38 2c 31 30 2e 38 38 2c 30 2c 30 2c 31 2c 34 35 2e 38 34 2c 33 35 34 48 34 36 61 2e 39 32 2e 39 32 2c 30 2c 30 2c 31 2c 31 2c 31 76 34 61 2e 39 32 2e 39 32 2c 30 2c 30 2c 31 Data Ascii: 1.62L88,340.7A13.94,13.94,0,0,1,93,337.11Zm-49.38-1.5a1.53,1.53,0,0,1-1.14-1.83l.12-.53a1.52,1.52,0,0,1,1.83-1.14l21.51,5A1.53,1.53,0,0,1,67.08,339l-.12.53a1.53,1.53,0,0,1-1.83,1.14Zm.33,21.07A10.88,10.88,0,0,1,45.84,354H46a.92.92,0,0,1,1,1v4a.92.92,0,0,1
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 33 31 37 2e 33 34 2c 33 34 36 2e 34 37 61 35 2e 34 36 2c 35 2e 34 36 2c 30 2c 30 2c 30 2d 2e 33 39 2d 31 2e 31 33 2c 31 30 2e 38 31 2c 31 30 2e 38 31 2c 30 2c 30 2c 30 2d 32 30 2e 38 31 2c 34 2e 30 39 2c 31 30 2e 36 39 2c 31 30 2e 36 39 2c 30 2c 30 2c 30 2c 32 2e 32 35 2c 36 2e 35 37 68 32 2e 37 33 61 38 2e 37 31 2c 38 2e 37 31 2c 30 2c 30 2c 31 2d 33 2d 36 2e 35 37 41 38 2e 38 31 2c 38 2e 38 31 2c 30 2c 30 2c 31 2c 33 31 35 2e 30 38 2c 33 34 36 48 33 31 31 61 36 2e 31 38 2c 36 2e 31 38 2c 30 2c 30 2c 30 2d 36 2e 31 37 2c 36 2e 31 37 56 33 35 36 68 32 76 2d 33 2e 37 38 41 34 2e 31 37 2c 34 2e 31 37 2c 30 2c 30 2c 31 2c 33 31 31 2c 33 34 38 68 34 2e 36 33 61 39 2c 39 2c 30 2c 30 2c 31 2c 2e 31 32 2c 31 2e 33 38 2c 38 2e 37 36 2c 38 2e 37 36 2c 30 2c 30 2c Data Ascii: 317.34,346.47a5.46,5.46,0,0,0-.39-1.13,10.81,10.81,0,0,0-20.81,4.09,10.69,10.69,0,0,0,2.25,6.57h2.73a8.71,8.71,0,0,1-3-6.57A8.81,8.81,0,0,1,315.08,346H311a6.18,6.18,0,0,0-6.17,6.17V356h2v-3.78A4.17,4.17,0,0,1,311,348h4.63a9,9,0,0,1,.12,1.38,8.76,8.76,0,0,
2023-12-28 16:22:29 UTC	1369	IN	Data Raw: 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 32 22 20 64 3d 22 4d 32 34 33 2e 30 39 2c 33 37 37 61 38 2c 38 2c 30 2c 31 2c 31 2c 38 2d 38 41 38 2c 38 2c 30 2c 30 2c 31 2c 32 34 33 2e 30 39 2c 33 37 37 5a 6d 30 2d 31 34 61 36 2c 36 2c 30 2c 31 2c 30 2c 36 2c 36 41 36 2c 36 2c 30 2c 30 2c 30 2c 32 34 33 2e 30 39 2c 33 36 33 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 20 2d 31 30 37 29 22 2f 3e 3c 2f 67 3e 3c 67 20 69 64 3d 22 77 68 65 65 6c 2d 34 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 77 68 65 65 6c 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 34 22 20 63 78 3d 22 33 36 39 2e 30 39 22 20 63 79 3d 22 32 36 32 22 20 72 3d 22 31 38 22 2f 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 Data Ascii: 7"/><path class="cls-12" d="M243.09,377a8,8,0,1,1,8-8A8,8,0,0,1,243.09,377Zm0-14a6,6,0,1,0,6,6A6,6,0,0,0,243.09,363Z" transform="translate(-2 -107)"/></g><g id="wheel-4" data-name="wheel"><circle class="cls-14" cx="369.09" cy="262" r="18"/><circle class="
2023-12-28 16:22:29 UTC	1232	IN	Data Raw: 33 39 2c 32 2e 34 33 63 32 2e 33 36 2e 34 33 2c 34 2e 36 39 2e 38 36 2c 36 2e 38 37 2c 31 2e 33 31 2c 30 2c 30 2c 32 32 2c 30 2c 32 32 2c 30 61 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 30 2c 32 2e 34 37 2d 31 2e 31 39 41 34 2e 34 2c 34 2e 34 2c 30 2c 30 2c 30 2c 34 31 35 2e 38 39 2c 33 37 38 2e 38 39 5a 4d 32 36 33 2e 30 38 2c 33 34 38 2e 31 34 63 32 2e 38 33 2d 33 2e 32 39 2c 35 2e 32 37 2d 36 2e 31 34 2c 31 32 2d 36 2e 31 34 68 31 32 61 34 2e 31 2c 34 2e 31 2c 30 2c 30 2c 31 2c 33 2e 36 2c 33 2e 31 33 6c 31 2e 36 34 2c 39 2e 38 37 48 32 35 35 2e 38 39 6c 2d 2e 34 34 2d 2e 34 41 32 33 2c 32 33 2c 30 2c 30 2c 30 2c 32 36 33 2e 30 38 2c 33 34 38 2e 31 34 5a 6d 2d 33 36 2c 33 33 2e 38 36 41 31 36 2c 31 36 2c 30 2c 30 2c 31 2c 32 31 31 2c 33 36 36 76 2d 39 Data Ascii: 39,2.43c2.36.43,4.69.86,6.87,1.31,0,0,22,0,22,0a2.93,2.93,0,0,0,2.47-1.19A4.4,4.4,0,0,0,415.89,378.89ZM263.08,348.14c2.83-3.29,5.27-6.14,12-6.14h12a4.1,4.1,0,0,1,3.6,3.13l1.64,9.87H255.89l-.44-.4A23,23,0,0,0,263.08,348.14Zm-36,33.86A16,16,0,0,1,211,366v-9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50200	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	1081	OUT	GET /lp/global/img/row_partners_logo_gray.png HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:30 UTC	358	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/png Content-Length: 77777 Connection: close Last-Modified: Mon, 08 May 2023 14:44:21 GMT ETag: "64590ac5-12fd1" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:30 UTC	16026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 0a 00 00 00 2c 08 06 00 00 00 cf 3f dd 50 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 01 2f 83 49 44 41 54 78 9c ec 9d 79 7c 14 e5 fd c7 3f df 99 bd b3 9b 84 2b 80 a0 a0 a8 f5 be 8f 7a 51 6f 6b 2b 4a bd b5 5e 78 e1 01 54 58 26 02 3f 92 48 b0 01 f7 c9 82 62 22 22 2a 1e f5 28 b5 0a 62 b5 ad 5a ac f5 a8 56 eb d1 7a 54 44 51 91 23 e1 c8 b1 d9 dd ec ee 3c df df 1f 33 13 26 9b cd c5 91 80 ce fb f5 e2 c5 ee cc 33 b3 cf 6e 76 67 9e e7 fb 7c 3f 9f 2f 31 33 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 76 2d 94 de ee 80 83 83 83 83 83 83 83 83 83 83 83 83 83 Data Ascii: PNGIHDR,?PpHYs/IDATxy\|?+zQok+J^xTX&?Hb""*(bZVzTDQ#<3&3nvg\|?/13v-
2023-12-28 16:22:30 UTC	16384	IN	Data Raw: 3c f2 c8 78 fb df 0b b6 6a b5 76 cc 45 81 25 00 16 d4 d4 d4 bc 63 ab 22 d6 e3 74 f6 59 6b 9a e6 4a 24 12 11 74 bf ba 5d 3f 00 8f 0b 21 4e cf 95 ac 69 0a b4 ec 6e 9a 48 a7 d3 75 6e b7 3b 08 db fd 9a 88 ce 9c 30 61 c2 3e f3 e6 cd 6b b3 d8 11 8b c5 44 30 18 3c 39 18 cc 19 27 9f 65 3d 78 eb ad b7 0e 03 b0 51 d3 34 97 e9 00 de 46 24 6c 7e 0e 29 18 83 9c ec f1 c2 de 00 ee 29 29 29 39 cb 9e d4 a8 69 9a cb e5 72 2d 66 e6 5c 22 61 eb 3e ec 41 db a4 a8 73 75 5d 9f 06 60 a7 0a 14 e5 e7 e7 b7 49 04 18 3f 7e fc e9 c9 64 f2 d4 4d 9b 36 1d 8f ac c4 f5 50 28 b4 b0 a1 a1 a1 57 84 c2 cf 2f 5d da 5f 61 be 21 7b 7b 7d 53 d3 b4 71 e3 c6 6d 36 17 f9 f7 8b c5 62 9f b6 77 5f 34 17 aa a3 b0 89 84 01 70 41 41 c1 b4 60 20 50 0c db 3d c5 ed f5 5e f3 fc d2 a5 15 f6 ca 08 a6 d0 ca fa Data Ascii: <xjvE%c"tYkJ$t]?!NinHun;0a>kD0<9'e=xQ4F$l~))))9ir-f\"a>Asu]`I?~dM6P(W/]_a!{{}Sqm6bw_4pAA` P=^
2023-12-28 16:22:30 UTC	16384	IN	Data Raw: c6 16 95 95 95 03 b2 04 37 9b 73 25 da 98 a6 6d d6 df 5b 6f 6a 6a 7a 3e cb 94 ea 0c 18 82 6e 8b bf 5b 73 01 b3 c2 b3 65 0e b6 49 51 94 bf 35 34 34 a8 c1 60 f0 22 18 a6 1f 79 00 3e 55 14 65 41 38 1c ee 70 4e 63 1a 0c 9c 60 8e af e3 00 fe 91 4e a7 ff d8 de bd cc 14 67 9e 0d e0 67 44 34 90 99 9b 01 7c 01 e0 85 5c 46 2d 3b 0a f3 77 68 3d b6 de e3 47 b6 26 83 61 1a d7 da b0 56 48 33 b0 7d b6 52 ca f9 30 e6 c7 6c 5f 13 b0 a0 2d 15 86 9b 00 08 29 e5 30 6c 89 13 0e 8c 46 a3 03 60 c4 10 54 33 b1 ee 27 44 f4 ae d5 27 33 de f3 3e 8c 58 fa 90 aa aa aa 3e f1 78 3c d7 bc ee 00 18 63 ee b9 1d bf fb ed 4a 9e 99 50 db 95 09 f3 aa 44 22 31 45 d3 b4 18 00 28 8a f2 b8 94 72 a9 10 62 0d 0c 73 50 1f 8c 0a ee 7f ad a9 a9 f9 dc 8c 99 14 da 8e f7 a1 9d 2a c4 00 90 c9 64 d6 ba dd Data Ascii: 7s%m[ojjz>n[seIQ544`"y>UeA8pNc`NggD4\|\F-;wh=G&aVH3}R0l_-)0lF`T3'D'3>X>x<cJPD"1E(rbsP*d
2023-12-28 16:22:30 UTC	16384	IN	Data Raw: f2 1c 74 76 aa 09 03 d8 1c 8f c7 bf 70 bb dd 25 f6 c5 51 22 4d 31 ce 0e 80 e5 2e f6 aa bd 78 46 11 77 72 be 9f a9 44 c0 1d 3e 8f a7 cc 3a 9e 99 ff 82 ce 4a 91 0c e0 83 6c 7d 65 2b 06 cc e0 c8 93 f6 18 15 e8 ea 72 0e a5 e6 f5 9d 12 94 e9 ce a5 e6 0b d9 82 84 0d 91 48 24 3f 3f 3f ff 2c 98 6a be bd 4e 14 9e 31 63 46 78 d2 a4 49 33 bc 5e ef c9 00 f6 60 e6 12 22 ba 7d fa f4 e9 ef a5 3e 57 94 9b b0 a5 d2 09 22 5a 94 ef f1 5c 0c e0 6c 6b db c8 fd f7 3f 77 dd ba 75 5f 33 f3 de aa af df 21 8d 98 05 33 bf 8e 76 57 9b 03 b2 09 47 4c 98 30 61 cb bc da da d3 c3 ad ad b1 ad 79 56 74 a7 50 21 2f 2f ef b6 d6 d6 d6 e3 98 f9 67 30 9d 7f 6b 2a 2a 2a de cf 54 a8 c4 cc af 42 a9 b7 32 f3 4f 9c 4e 67 1f 64 48 9e cd 98 31 23 3c 75 ea d4 3f 39 9d ce 5f 2a 42 51 3e 80 39 53 a7 4e Data Ascii: tvp%Q"M1.xFwrD>:Jl}e+rH$???,jN1cFxI3^`"}>W"Z\lk?wu_3!3vWGL0ayVtP!//g0k**TB2ONgdH1#<u?9_BQ>9SN
2023-12-28 16:22:30 UTC	12599	IN	Data Raw: 4b b7 dd 8e d9 b3 67 7f 5b 5e 5e 3e 2a 14 0a 95 92 cd 8d 17 48 4e 80 5e 77 3a 9d 5f a9 d7 0d 50 ca 9b 64 ba 57 74 c2 ac 59 b3 d6 59 fd c1 54 d3 fb 49 6a 7f 79 79 79 7f 48 e3 10 f6 38 33 8f 4e 69 df 08 e0 0e 9f cf 17 b0 df 7c 82 c1 60 9d df ef 3f 9c 99 6f 03 70 12 99 84 e4 0e c7 ac 5d bb f6 0e 95 34 b0 63 0b 33 5b ca a1 9d 88 44 0e 87 23 98 48 24 76 27 a2 ab 6d 7d 76 59 0c d9 43 f8 10 e9 15 f2 7e f4 50 01 8c 55 30 83 f5 7f 0b 85 42 8f fd c0 9d 83 21 a5 7c 17 40 09 b2 93 36 f6 21 a2 87 a5 94 eb 03 81 c0 7c 22 72 4a 29 af 21 a2 5c 5c 6c a3 2e 97 eb b3 e1 c3 87 77 99 2c 3c f8 e0 83 b7 38 1c 8e 37 99 39 b9 82 26 a2 b8 db ed ce 55 7e fb 9d d4 82 0e 55 18 db 09 86 61 3c a1 26 0d 47 33 f3 89 30 8b 3d 3c ea 98 ef 60 92 d8 fe 69 57 01 9d 36 6d da 51 cc bc 0e 29 bf Data Ascii: Kg[^^>*HN^w:_PdWtYYTIjyyyH83Ni\|`?op]4c3[D#H$v'm}vYC~PU0B!\|@6!\|"rJ)!\\l.w,<879&U~Ua<&G30=<`iW6mQ)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50202	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	1084	OUT	GET /lp/global/img/icon_download_cloud_white.svg HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:30 UTC	404	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 592 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 13 Apr 2023 13:25:27 GMT Vary: Accept-Encoding ETag: "643802c7-250" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:30 UTC	592	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 34 22 20 68 65 69 67 68 74 3d 22 33 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 20 33 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 32 20 39 2e 32 38 35 36 32 56 32 30 2e 37 31 34 31 4d 32 32 20 32 30 2e 37 31 34 31 4c 32 37 2e 34 35 34 35 20 31 36 2e 39 30 34 36 4d 32 32 20 32 30 2e 37 31 34 31 4c 31 36 2e 35 34 35 35 20 31 36 2e 39 30 34 36 4d 34 32 20 32 30 2e 37 31 34 31 43 34 32 20 31 36 2e 35 30 36 33 20 33 38 2e 37 34 33 38 20 31 33 2e 30 39 35 31 20 33 34 2e 37 32 37 33 20 31 33 2e 30 39 35 31 43 33 34 2e 36 38 34 34 20 31 33 2e 30 39 35 31 20 33 34 2e 36 34 32 Data Ascii: <svg width="44" height="30" viewBox="0 0 44 30" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M22 9.28562V20.7141M22 20.7141L27.4545 16.9046M22 20.7141L16.5455 16.9046M42 20.7141C42 16.5063 38.7438 13.0951 34.7273 13.0951C34.6844 13.0951 34.642

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50195	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2442	OUT	GET /images/backgrounds/home_unicorn/access_color.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 5940 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1734" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6468 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24751feb345b-DFW
2023-12-28 16:22:30 UTC	1037	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 31 39 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 64 62 38 30 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 66 66 64 61 63 37 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 65 32 61 36 38 38 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 62 33 64 64 66 66 3b 7d 2e 63 6c 73 2d 36 7b 66 69 6c 6c 3a 23 63 63 65 37 66 66 3b 7d 2e 63 6c 73 2d 37 7b 66 69 6c 6c 3a 23 62 32 62 37 63 34 3b 7d 2e 63 6c 73 2d 38 7b 66 69 6c 6c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="190" height="190" viewBox="0 0 190 190"><defs><style>.cls-1{fill:#fff;}.cls-2{fill:#ffdb80;}.cls-3{fill:#ffdac7;}.cls-4{fill:#e2a688;}.cls-5{fill:#b3ddff;}.cls-6{fill:#cce7ff;}.cls-7{fill:#b2b7c4;}.cls-8{fill
2023-12-28 16:22:30 UTC	1369	IN	Data Raw: 31 2d 32 2e 37 33 2d 2e 31 38 63 2d 36 2e 31 38 2d 2e 38 33 2d 31 31 2e 38 34 2d 34 2e 34 39 2d 31 36 2e 33 36 2d 31 30 2e 35 39 61 32 2e 35 2c 32 2e 35 2c 30 2c 30 2c 31 2c 34 2d 33 63 33 2e 37 35 2c 35 2e 30 36 2c 38 2e 31 32 2c 38 2c 31 33 2c 38 2e 36 31 41 31 39 2e 30 39 2c 31 39 2e 30 39 2c 30 2c 30 2c 30 2c 31 32 34 2c 39 38 2e 36 22 2f 3e 3c 6c 69 6e 65 20 69 64 3d 22 73 6c 65 65 76 65 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 78 31 3d 22 39 37 2e 32 37 22 20 79 31 3d 22 31 30 31 2e 34 22 20 78 32 3d 22 39 39 2e 39 38 22 20 79 32 3d 22 39 38 2e 37 37 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 31 30 37 2c 34 33 41 32 35 2c 32 35 2c 30 2c 30 2c 31 2c 39 33 2e 38 35 2c 36 35 4c 39 30 2c 37 34 6c 2d 37 2e 38 Data Ascii: 1-2.73-.18c-6.18-.83-11.84-4.49-16.36-10.59a2.5,2.5,0,0,1,4-3c3.75,5.06,8.12,8,13,8.61A19.09,19.09,0,0,0,124,98.6"/><line id="sleeve" class="cls-1" x1="97.27" y1="101.4" x2="99.98" y2="98.77"/><path class="cls-5" d="M107,43A25,25,0,0,1,93.85,65L90,74l-7.8
2023-12-28 16:22:30 UTC	1369	IN	Data Raw: 31 2d 38 33 2e 37 37 2d 35 34 2c 31 36 2c 31 36 2c 30 2c 30 2c 31 2c 37 2c 31 2e 38 37 2c 31 38 2c 31 38 2c 30 2c 30 2c 30 2c 38 2e 38 38 2c 32 2e 31 41 31 38 2c 31 38 2c 30 2c 30 2c 30 2c 33 36 2c 31 33 34 2e 39 61 31 36 2e 31 32 2c 31 36 2e 31 32 2c 30 2c 30 2c 31 2c 38 2d 31 2e 39 2c 31 36 2e 31 32 2c 31 36 2e 31 32 2c 30 2c 30 2c 31 2c 38 2c 31 2e 39 2c 31 38 2c 31 38 2c 30 2c 30 2c 30 2c 38 2e 38 38 2c 32 2e 31 2c 31 38 2c 31 38 2c 30 2c 30 2c 30 2c 38 2e 38 38 2d 32 2e 31 2c 32 30 2e 34 2c 32 30 2e 34 2c 30 2c 30 2c 31 2c 33 2e 32 38 2d 31 2e 33 32 68 30 63 2e 32 37 2d 2e 30 38 2e 35 37 2d 2e 31 35 2e 38 37 2d 2e 32 31 6c 2e 32 2c 30 2c 2e 38 34 2d 2e 31 34 2e 32 32 2c 30 61 32 30 2e 33 39 2c 32 30 2e 33 39 2c 30 2c 30 2c 31 2c 32 2e 35 39 2d 2e 31 Data Ascii: 1-83.77-54,16,16,0,0,1,7,1.87,18,18,0,0,0,8.88,2.1A18,18,0,0,0,36,134.9a16.12,16.12,0,0,1,8-1.9,16.12,16.12,0,0,1,8,1.9,18,18,0,0,0,8.88,2.1,18,18,0,0,0,8.88-2.1,20.4,20.4,0,0,1,3.28-1.32h0c.27-.08.57-.15.87-.21l.2,0,.84-.14.22,0a20.39,20.39,0,0,1,2.59-.1
2023-12-28 16:22:30 UTC	1369	IN	Data Raw: 33 2c 38 2c 38 2c 30 2c 30 2c 31 2d 31 32 2c 2e 30 37 63 2e 32 2c 30 2c 2e 34 2c 30 2c 2e 36 2c 30 61 37 2e 37 39 2c 37 2e 37 39 2c 30 2c 30 2c 30 2c 33 2e 37 32 2d 31 41 31 2c 31 2c 30 2c 30 2c 30 2c 31 31 37 2e 34 2c 38 38 2e 39 32 5a 4d 31 30 39 2c 38 33 2e 32 34 63 2d 2e 35 2c 30 2d 31 2c 2e 30 36 2d 31 2e 35 31 2e 30 38 6c 2d 31 2e 38 39 2e 30 37 4c 31 30 39 2c 37 39 2e 32 34 61 31 2e 31 2c 31 2e 31 2c 30 2c 30 2c 30 2c 2e 32 32 2d 2e 35 32 6c 2e 34 36 2d 33 2e 37 61 32 2e 36 32 2c 32 2e 36 32 2c 30 2c 30 2c 31 2c 31 2e 38 34 2d 32 2e 32 4c 31 31 37 2c 37 31 2e 31 34 61 33 2e 33 33 2c 33 2e 33 33 2c 30 2c 30 2c 31 2c 2e 39 33 2d 2e 31 34 2c 33 2e 31 35 2c 33 2e 31 35 2c 30 2c 30 2c 31 2c 32 2e 34 32 2c 31 2e 31 33 6c 32 2e 38 34 2c 33 2e 34 32 61 31 Data Ascii: 3,8,8,0,0,1-12,.07c.2,0,.4,0,.6,0a7.79,7.79,0,0,0,3.72-1A1,1,0,0,0,117.4,88.92ZM109,83.24c-.5,0-1,.06-1.51.08l-1.89.07L109,79.24a1.1,1.1,0,0,0,.22-.52l.46-3.7a2.62,2.62,0,0,1,1.84-2.2L117,71.14a3.33,3.33,0,0,1,.93-.14,3.15,3.15,0,0,1,2.42,1.13l2.84,3.42a1
2023-12-28 16:22:30 UTC	796	IN	Data Raw: 33 2e 34 36 2c 30 2c 30 2c 30 2d 2e 39 35 2e 35 2c 33 2e 35 2c 33 2e 35 2c 30 2c 30 2c 30 2d 2e 37 32 2c 34 2e 38 39 63 34 2e 36 38 2c 36 2e 33 32 2c 31 30 2e 35 36 2c 31 30 2e 31 32 2c 31 37 2c 31 31 41 32 32 2e 36 33 2c 32 32 2e 36 33 2c 30 2c 30 2c 30 2c 31 31 32 2c 31 30 39 61 32 34 2e 38 34 2c 32 34 2e 38 34 2c 30 2c 30 2c 30 2c 31 32 2e 31 34 2d 33 2e 33 2c 31 34 2e 35 34 2c 31 34 2e 35 34 2c 30 2c 30 2c 31 2c 2e 32 2c 36 2e 32 38 48 39 32 63 2d 32 2e 32 34 2c 30 2d 35 2e 35 34 2d 2e 31 33 2d 39 2e 31 2d 2e 34 61 31 2c 31 2c 30 2c 30 2c 30 2d 2e 31 33 2d 2e 32 34 4c 37 38 2c 31 30 35 2e 36 37 61 37 32 2e 37 37 2c 37 32 2e 37 37 2c 30 2c 30 2c 30 2d 33 39 2d 32 34 2e 31 4c 32 38 2e 32 33 2c 37 39 61 31 2c 31 2c 30 2c 30 2c 30 2d 31 2e 32 2e 37 34 2c Data Ascii: 3.46,0,0,0-.95.5,3.5,3.5,0,0,0-.72,4.89c4.68,6.32,10.56,10.12,17,11A22.63,22.63,0,0,0,112,109a24.84,24.84,0,0,0,12.14-3.3,14.54,14.54,0,0,1,.2,6.28H92c-2.24,0-5.54-.13-9.1-.4a1,1,0,0,0-.13-.24L78,105.67a72.77,72.77,0,0,0-39-24.1L28.23,79a1,1,0,0,0-1.2.74,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50196	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2435	OUT	GET /images/backgrounds/home_unicorn/heart.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	329	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 713 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-2c9" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 593 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24752e292cd7-DFW
2023-12-28 16:22:30 UTC	713	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 35 2e 32 32 22 20 68 65 69 67 68 74 3d 22 33 38 2e 37 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 35 2e 32 32 20 33 38 2e 37 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 65 32 33 62 32 61 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 68 65 61 72 74 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 34 2e 31 31 2c 34 31 2e 39 33 2c 33 39 2e 38 33 2c 32 36 2e 37 39 51 34 35 2e 36 31 2c 32 31 2c 34 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="45.22" height="38.76" viewBox="0 0 45.22 38.76"><defs><style>.cls-1{fill:#e23b2a;}</style></defs><title>heart</title><path class="cls-1" d="M24.11,41.93,39.83,26.79Q45.61,21,4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50197	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2442	OUT	GET /images/backgrounds/home_unicorn/tf_downloads.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 962 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3c2" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11243 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24752cdf477e-DFW
2023-12-28 16:22:30 UTC	962	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 32 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 39 32 2e 35 35 2c 36 37 61 33 32 2e 31 2c 33 32 2e 31 2c 30 2c 30 2c 31 2d 35 2e 31 32 2c 31 37 2e 35 35 2c 32 2e 32 31 2c 32 2e 32 31 2c 30 2c 30 2c 31 2d 32 2c 31 2e 30 35 48 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab2"><path class="cls-1" d="M92.55,67a32.1,32.1,0,0,1-5.12,17.55,2.21,2.21,0,0,1-2,1.05H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50199	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2452	OUT	GET /images/backgrounds/home_unicorn/mf_logo_flame_reversed.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 926 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-39e" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6479 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24752affea90-DFW
2023-12-28 16:22:30 UTC	926	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 37 36 22 20 68 65 69 67 68 74 3d 22 34 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 36 20 34 32 22 3e 3c 74 69 74 6c 65 3e 6d 66 5f 6c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 66 6c 61 6d 65 5f 6d 6f 6e 6f 22 3e 3c 70 61 74 68 20 69 64 3d 22 66 6c 61 6d 65 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 20 64 3d 22 4d 36 38 2c 36 2e 37 32 43 36 33 2e 36 36 2c 33 2c 35 37 2e 38 31 2c 31 2e 32 36 2c 35 32 2e 31 39 2c 31 61 32 36 2e 31 34 2c 32 36 2e 31 34 2c 30 2c 30 2c 30 2d 31 35 2c 33 2e 36 33 63 2d 2e 33 34 2e 32 32 2d 2e 36 38 2e 34 35 2d 31 2c 2e 36 39 41 31 33 2e 33 36 2c 31 33 2e 33 36 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="76" height="42" viewBox="0 0 76 42"><title>mf_logo</title><g id="flame_mono"><path id="flame" fill="#ffffff" d="M68,6.72C63.66,3,57.81,1.26,52.19,1a26.14,26.14,0,0,0-15,3.63c-.34.22-.68.45-1,.69A13.36,13.36,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50198	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2437	OUT	GET /images/backgrounds/home_unicorn/tf_10gb.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 1833 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-729" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 9772 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24753a2de779-DFW
2023-12-28 16:22:30 UTC	1038	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 61 62 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 35 32 2e 39 32 2c 36 34 2e 33 39 61 31 2e 34 32 2c 31 2e 34 32 2c 30 2c 30 2c 30 2d 31 2e 33 37 2c 31 2c 31 30 2c 31 30 2c 30 2c 30 2c 30 2d 2e 34 31 2c 33 2e 34 2c 31 30 2c 31 30 2c 30 Data Ascii: <svg id="ab1" xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><path class="cls-1" d="M52.92,64.39a1.42,1.42,0,0,0-1.37,1,10,10,0,0,0-.41,3.4,10,10,0
2023-12-28 16:22:30 UTC	795	IN	Data Raw: 30 2c 31 2c 36 2e 37 35 2e 30 37 2c 38 2e 38 35 2c 38 2e 38 35 2c 30 2c 30 2c 31 2c 31 2e 31 34 2c 34 2e 39 34 41 39 2c 39 2c 30 2c 30 2c 31 2c 35 36 2e 33 32 2c 37 33 2e 38 31 5a 6d 31 33 2e 33 34 2e 38 39 61 31 34 2e 33 36 2c 31 34 2e 33 36 2c 30 2c 30 2c 31 2d 32 2e 33 33 2e 35 37 2c 31 35 2e 32 2c 31 35 2e 32 2c 30 2c 30 2c 31 2d 32 2e 32 34 2e 31 36 2c 35 2e 36 36 2c 35 2e 36 36 2c 30 2c 30 2c 31 2d 34 2e 34 34 2d 31 2e 37 31 2c 37 2e 31 31 2c 37 2e 31 31 2c 30 2c 30 2c 31 2d 31 2e 35 33 2d 34 2e 39 31 41 36 2e 34 37 2c 36 2e 34 37 2c 30 2c 30 2c 31 2c 36 30 2e 38 39 2c 36 34 61 36 2e 37 36 2c 36 2e 37 36 2c 30 2c 30 2c 31 2c 34 2e 39 33 2d 31 2e 37 34 2c 39 2e 35 35 2c 39 2e 35 35 2c 30 2c 30 2c 31 2c 33 2e 38 31 2e 37 39 6c 2d 2e 39 31 2c 32 2e 31 Data Ascii: 0,1,6.75.07,8.85,8.85,0,0,1,1.14,4.94A9,9,0,0,1,56.32,73.81Zm13.34.89a14.36,14.36,0,0,1-2.33.57,15.2,15.2,0,0,1-2.24.16,5.66,5.66,0,0,1-4.44-1.71,7.11,7.11,0,0,1-1.53-4.91A6.47,6.47,0,0,1,60.89,64a6.76,6.76,0,0,1,4.93-1.74,9.55,9.55,0,0,1,3.81.79l-.91,2.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50201	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	2438	OUT	GET /images/backgrounds/home_unicorn/tf_share.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:29 GMT Content-Type: image/svg+xml Content-Length: 992 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3e0" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 4041 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24754fdbe9bd-DFW
2023-12-28 16:22:30 UTC	992	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 33 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 31 2e 31 39 2c 37 30 2e 36 33 63 2d 31 31 2e 34 31 2c 38 2e 36 2d 32 38 2e 32 39 2c 31 35 2d 34 33 2e 34 31 2c 31 33 2e 32 36 2c 32 2e 38 36 2d 34 2e 31 31 2c 34 2e 30 37 2d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab3"><path class="cls-1" d="M71.19,70.63c-11.41,8.6-28.29,15-43.41,13.26,2.86-4.11,4.07-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50203	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:29 UTC	740	OUT	GET /lp/global/img/start_menu_w11_dark_theme.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:30 UTC	358	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/png Content-Length: 69974 Connection: close Last-Modified: Mon, 08 May 2023 14:44:21 GMT ETag: "64590ac5-11156" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:30 UTC	16026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 db 00 00 01 ca 08 03 00 00 00 e5 cc 77 39 00 00 03 00 50 4c 54 45 0b 0b 0b 12 12 12 21 21 21 18 18 18 27 27 27 2c 2c 2b 02 02 02 31 31 31 36 36 36 0f 26 43 f7 1c 13 c3 df e2 5e af cb 77 b0 c9 da ef fa 4a b0 cd 6d ab c3 65 b0 cb 6f c1 dc 68 ac c5 78 c7 e0 74 c4 dd 70 b2 cc 47 ae cb 15 29 46 41 aa c8 7c bd d7 6b af c9 5a aa c5 78 b9 d2 2d a5 c5 62 b4 d0 7c b3 cc 4f b1 cf 61 ac c7 52 b4 d2 06 09 14 52 ad ca 72 af c7 7c c9 e1 59 b2 cf 74 b6 cf da df e3 4e aa c7 6d b7 d2 6a b3 ce c9 dc f3 df e2 e6 48 ab c8 56 b0 cc 72 bb d6 fe ff ff d9 db df 00 19 7f 64 bf d9 1e a5 c5 04 1f 35 80 c0 d9 c1 d6 ed c3 d8 e2 30 a9 c9 cc de f5 5c b6 d2 ff 29 01 3c a6 c5 00 34 b5 cb e2 ed c8 db e6 c5 d1 e2 47 a8 c5 00 06 52 d2 Data Ascii: PNGIHDRw9PLTE!!!''',,+111666&C^wJmeohxtpG)FA\|kZx-b\|OaRRr\|YtNmjHVrd50\)<4GR
2023-12-28 16:22:30 UTC	16384	IN	Data Raw: 71 b8 92 35 5e db d5 ed f5 80 eb e3 ea e5 23 10 a1 19 96 3f 68 a0 27 8f e5 c3 e4 b7 57 fd f6 19 87 6e 9d 2d 79 f0 61 99 d7 d6 aa 0d a6 8f c4 36 02 9a 5d c8 36 74 1b 1e 1a 86 9a 93 7f 8d 76 bb c1 03 43 bc 69 0d e7 eb d8 e6 ca c5 d1 6d 68 b6 1e 81 6e b0 ad cc b6 3c 59 66 f6 95 e8 b3 65 2a 57 02 b7 0d bc 91 32 b1 d8 26 a2 25 da a6 a1 78 c1 71 75 db 3e 37 56 5a b7 01 73 39 dd c6 3b af b3 cb 6a 34 02 f6 db c5 51 de 6f e7 e7 00 6d dd 0e a3 d0 f1 db 8a 63 f5 bc 92 5f f1 6e 57 79 4f 36 aa 16 b3 4d ed 91 03 f9 6d e4 49 28 80 b7 35 be cc 61 6e 40 b7 71 47 2b d0 3a dd 66 5b 72 2e fb 5c f0 39 98 ec b3 d6 64 d2 3e 13 bc f2 ba 77 e5 4c 78 dd a6 38 4f 42 24 b3 21 e1 4b 21 6e 84 fb 18 6c 43 ac 31 00 da 25 bd 36 a0 5e 4b 37 f0 2d 05 6c b5 ca 6c 57 4a 04 d8 95 6b ee 85 ea Data Ascii: q5^#?h'Wn-ya6]6tvCimhn<Yfe*W2&%xqu>7VZs9;j4Qomc_nWyO6MmI(5an@qG+:f[r.\9d>wLx8OB$!K!nlC1%6^K7-llWJk
2023-12-28 16:22:30 UTC	16384	IN	Data Raw: 1c b2 e9 40 9d 44 11 0e b4 6d df d6 b1 c4 f2 6d c4 92 3b 1c df 76 04 b6 43 c7 b8 81 b8 2f 34 fd 6e 19 c4 0c ae 6f db 45 6e 68 c5 be ed 65 c6 b2 f9 52 bd 98 2f d3 3a f0 4a b1 5e aa 0f 54 6b 85 6a a1 5a f4 83 7a 31 43 8b 69 eb f9 5c be b1 a3 19 0d 0d db 5b a6 e6 67 e7 ab 07 5a 2f 9e 3c b2 7b e6 18 6d 79 9f 1f e7 d5 da 8d d9 c9 5c 65 f6 d8 f8 91 e2 d5 ab bb 77 5f 65 b1 6f 6f 65 df 0e d3 f5 7c 25 53 da 48 8b 19 73 b5 f1 52 10 00 e6 4e be ed b9 99 04 38 77 a2 7b d5 bf a7 8c 7c 1b 81 04 74 83 6f 24 6e de a4 80 50 a2 c8 a6 ae 85 27 ba d2 61 f6 26 60 1d 20 66 27 8d 14 d5 dc a5 34 de 2a 8c 3c 8c 06 10 ee d4 49 50 f9 58 80 b8 08 ea 03 3e e8 75 1a d8 05 d8 8b 2e 1c 09 56 34 e7 ee 15 f3 eb 1b f5 5c b5 14 0e d0 0a f1 64 25 5b 6c e6 a3 c5 5c aa 50 f6 e3 41 be 99 29 e4 Data Ascii: @Dmm;vC/4noEnheR/:J^TkjZz1Ci\[gZ/<{my\ew_eooe\|%SHsRN8w{\|to$nP'a&` f'4*<IPX>u.V4\d%[l\PA)
2023-12-28 16:22:30 UTC	16384	IN	Data Raw: eb 59 92 41 55 24 4b b8 67 22 13 03 07 0f 6e db 26 71 3f 78 70 60 06 ae 0d 47 67 b6 19 c6 24 b6 a1 15 97 57 bc fb 28 97 48 c6 be 3e a6 c5 84 6f 19 3b a7 5d 1b 32 e7 dc 43 29 d9 7e ea db df fe f6 d5 6f ff e2 0f a5 7f ee e5 8d 64 e7 8d bf bf 5f 0c d4 8c 4c e2 80 6d cb b9 51 0a d4 d2 70 1b a9 04 3f b6 2a c1 c6 22 6e a1 52 da 19 3c bc 8e 2c 9b f3 36 7b b7 94 9c 76 47 28 81 80 74 8a d9 c9 c5 69 7d 9b 45 79 e4 3d ef d9 7a 00 53 ee b6 60 d9 5a 99 ed 39 77 df 66 6d 25 b6 77 d4 9f 5a 35 c4 6c 3f 21 d8 de ba d3 f4 ed 0c 9b 0e 7c 64 17 45 90 3d d0 fc 24 f8 61 b6 09 61 6a 24 1a a4 4d f3 32 a9 eb 03 4c 35 13 3e 70 9d 2b 82 74 a1 be 41 e2 93 f2 ed 94 99 04 f3 ee dd 97 bb bb bb cf 8d 6d b9 8b 45 5c d3 23 e5 96 de 2b f6 d4 cd 7d 29 e7 dc 4d 72 7f fb 6d d2 2f 7e f1 d4 a6 Data Ascii: YAU$Kg"n&q?xp`Gg$W(H>o;]2C)~od_LmQp?*"nR<,6{vG(ti}Ey=zS`Z9wfm%wZ5l?!\|dE=$aaj$M2L5>p+tAmE\#+})Mrm/~
2023-12-28 16:22:30 UTC	4796	IN	Data Raw: ed a4 44 5b a6 6d b4 d9 66 b4 0f a9 3d 66 a0 d9 90 0d 6d 1f 39 33 3f 49 56 7a 63 33 97 44 c3 bd d3 df 6e 0f b3 dd 5e 41 9c c4 50 e6 be df 35 2e 7f 7d 70 e1 ea e5 41 15 03 14 22 5f 8f d4 77 e7 0a b7 eb 99 72 be 98 af 67 e2 37 72 b5 42 2a 9f 4b 89 ea 74 31 57 4b a5 ab 85 7a 25 da 16 dc 01 3f 9f a3 e7 9c eb ae db ed 9e 50 52 be 2b 9a f8 9f f6 48 d8 d9 a6 ea 6c f3 99 62 0a 01 26 c4 cb 85 ef e0 d7 15 67 6e 4c 3d 20 20 b6 cb 49 6c c3 2d cf 2b b0 db 0c 1c c4 60 36 1a 83 3f ce 82 6b 95 96 94 fb 6e f6 a4 b3 d3 19 04 a3 ca d3 a5 70 be 96 df 55 0f 88 db 39 01 bb 1d ca d5 b2 c5 72 21 92 4b 0b 26 d6 17 6d 9c ec 87 58 f6 ba 7f a9 54 d7 69 ef 4f bb 7d c4 f6 48 98 6d a0 3d 0e b2 13 d2 68 53 23 a3 9d 1c e6 7c 8d eb 8e 30 db 66 c2 fb ca 58 5b 9d 52 12 74 3b 85 43 dd cf df Data Ascii: D[mf=fm93?IVzc3Dn^AP5.}pA"_wrg7rB*Kt1WKz%?PR+Hlb&gnL= Il-+`6?knpU9r!K&mXTiO}Hm=hS#\|0fX[Rt;C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50189	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2718	OUT	GET /images/backgrounds/home_unicorn/pf_1tb.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 1502 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-5de" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2812 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24764a834784-DFW
2023-12-28 16:22:30 UTC	1038	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 76 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 38 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 34 32 2e 39 32 2c 36 38 2e 36 36 76 2d 31 31 48 33 38 2e 36 35 76 2d 32 2e 36 61 38 2e 31 34 2c 38 2e 31 34 2c 30 2c 30 2c 30 2c 31 2e 37 33 2d 2e 31 33 2c 34 2e 35 32 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab8"><path class="cls-1" d="M42.92,68.66v-11H38.65v-2.6a8.14,8.14,0,0,0,1.73-.13,4.52,
2023-12-28 16:22:30 UTC	464	IN	Data Raw: 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 30 2c 32 39 61 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 31 2e 32 2e 33 32 4c 38 36 2c 34 33 2e 36 31 61 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 31 2e 32 2c 32 2e 30 38 56 37 34 2e 33 31 41 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 38 36 2c 37 36 2e 33 39 4c 36 31 2e 32 2c 39 30 2e 37 61 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2d 32 2e 34 2c 30 4c 33 34 2c 37 36 2e 33 39 61 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2d 31 2e 32 2d 32 2e 30 38 56 34 35 2e 36 39 41 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 33 34 2c 34 33 2e 36 31 4c 35 38 2e 38 2c 32 39 2e 33 41 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 36 30 2c 32 39 6d 30 2d 35 61 37 2e 34 2c 37 2e 34 2c Data Ascii: /><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,2.08V74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,2.4,0,0,1-2.4,0L34,76.39a2.41,2.41,0,0,1-1.2-2.08V45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3A2.4,2.4,0,0,1,60,29m0-5a7.4,7.4,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50204	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2721	OUT	GET /images/backgrounds/home_unicorn/pf_no_ads.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 1249 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-4e1" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 9363 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24775ee04674-DFW
2023-12-28 16:22:30 UTC	1038	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 76 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 39 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 38 38 2e 34 39 2c 33 39 2e 32 38 2c 36 33 2e 37 2c 32 35 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2d 37 2e 34 2c 30 4c 33 31 2e 35 31 2c 33 39 2e 32 38 61 37 2e 34 2c 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab9"><path class="cls-1" d="M88.49,39.28,63.7,25a7.4,7.4,0,0,0-7.4,0L31.51,39.28a7.4,7
2023-12-28 16:22:30 UTC	211	IN	Data Raw: 36 2e 34 33 2d 2e 37 38 73 2d 32 2e 37 37 2d 33 2e 37 34 2d 32 2e 37 37 2d 37 2e 37 37 76 2d 2e 31 38 6c 35 2e 36 36 2d 33 2e 32 34 63 31 2e 32 31 2e 35 39 2c 32 2e 36 34 2c 31 2e 33 33 2c 34 2e 31 31 2c 32 2e 31 39 2c 32 2e 35 33 2c 31 2e 34 38 2c 36 2e 36 31 2c 33 2e 33 33 2c 37 2e 39 32 2c 34 2e 32 37 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 30 2c 31 2e 37 39 2e 31 34 6c 2e 33 31 2d 2e 31 36 41 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 30 2c 37 36 2c 36 37 56 35 39 2e 37 31 61 33 2e 30 35 2c 33 2e 30 35 2c 30 2c 30 2c 30 2c 30 2d 36 76 2d 2e 31 31 6c 31 31 2e 31 39 2d 36 2e 34 5a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: 6.43-.78s-2.77-3.74-2.77-7.77v-.18l5.66-3.24c1.21.59,2.64,1.33,4.11,2.19,2.53,1.48,6.61,3.33,7.92,4.27a1.73,1.73,0,0,0,1.79.14l.31-.16A1.72,1.72,0,0,0,76,67V59.71a3.05,3.05,0,0,0,0-6v-.11l11.19-6.4Z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50205	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2726	OUT	GET /images/backgrounds/home_unicorn/pf_web_uploads.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 1561 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-619" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 9363 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2477bbcf4744-DFW
2023-12-28 16:22:30 UTC	1038	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 66 65 61 74 75 72 65 73 2d 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 31 34 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 30 2c 32 39 61 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 31 2e 32 2e 33 32 4c 38 36 2c 34 33 2e 36 31 61 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>features-svg ready</title><g id="ab14"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,
2023-12-28 16:22:30 UTC	523	IN	Data Raw: 6d 2d 31 2d 32 2e 34 39 61 39 2e 37 34 2c 39 2e 37 34 2c 30 2c 30 2c 31 2c 30 2d 35 68 34 2e 32 31 61 31 37 2e 38 38 2c 31 37 2e 38 38 2c 30 2c 30 2c 30 2c 30 2c 35 4d 36 30 2c 36 30 2e 35 37 61 31 37 2c 31 37 2c 30 2c 30 2c 31 2c 32 2e 33 38 2c 34 2e 39 35 48 35 37 2e 36 32 41 31 37 2c 31 37 2c 30 2c 30 2c 31 2c 36 30 2c 36 30 2e 35 37 6d 38 2e 36 32 2c 34 2e 39 35 48 36 34 2e 39 35 61 31 39 2e 34 39 2c 31 39 2e 34 39 2c 30 2c 30 2c 30 2d 31 2e 37 32 2d 34 2e 34 33 2c 31 30 2c 31 30 2c 30 2c 30 2c 31 2c 35 2e 33 39 2c 34 2e 34 33 4d 36 30 2c 35 38 41 31 32 2e 34 36 2c 31 32 2e 34 36 2c 30 2c 31 2c 30 2c 37 32 2e 34 36 2c 37 30 2e 35 2c 31 32 2e 34 37 2c 31 32 2e 34 37 2c 30 2c 30 2c 30 2c 36 30 2c 35 38 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 Data Ascii: m-1-2.49a9.74,9.74,0,0,1,0-5h4.21a17.88,17.88,0,0,0,0,5M60,60.57a17,17,0,0,1,2.38,4.95H57.62A17,17,0,0,1,60,60.57m8.62,4.95H64.95a19.49,19.49,0,0,0-1.72-4.43,10,10,0,0,1,5.39,4.43M60,58A12.46,12.46,0,1,0,72.46,70.5,12.47,12.47,0,0,0,60,58Z"/><path class="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50206	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2730	OUT	GET /images/backgrounds/home_unicorn/pf_direct_download.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 953 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3b9" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2133 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2477da746b52-DFW
2023-12-28 16:22:30 UTC	953	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 76 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 31 32 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 30 2c 32 39 61 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 31 2e 32 2e 33 32 4c 38 36 2c 34 33 2e 36 31 61 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 31 2e 32 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab12"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50207	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2728	OUT	GET /images/backgrounds/home_unicorn/pf_bulk_download.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 911 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-38f" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13528 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2477e8112e51-DFW
2023-12-28 16:22:30 UTC	911	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 66 65 61 74 75 72 65 73 2d 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 31 33 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 30 2c 32 39 61 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 31 2e 32 2e 33 32 4c 38 36 2c 34 33 2e 36 31 61 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>features-svg ready</title><g id="ab13"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50208	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2721	OUT	GET /images/backgrounds/home_unicorn/pf_1_time.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 1332 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-534" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 12948 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2478191e1445-DFW
2023-12-28 16:22:30 UTC	1037	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 76 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 31 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 34 2e 32 32 2c 36 33 2e 32 39 6c 2d 33 2d 33 61 36 2e 38 33 2c 36 2e 38 33 2c 30 2c 30 2c 30 2d 39 2d 2e 35 35 6c 2d 32 2d 32 61 36 2e 38 33 2c 36 2e 38 33 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab11"><path class="cls-1" d="M74.22,63.29l-3-3a6.83,6.83,0,0,0-9-.55l-2-2a6.83,6.83,0,
2023-12-28 16:22:30 UTC	295	IN	Data Raw: 30 2c 31 2d 31 2e 32 2d 32 2e 30 38 56 34 35 2e 36 39 41 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 33 34 2c 34 33 2e 36 31 4c 35 38 2e 38 2c 32 39 2e 33 41 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 36 30 2c 32 39 6d 30 2d 35 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2d 33 2e 37 2c 31 4c 33 31 2e 35 31 2c 33 39 2e 32 38 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2d 33 2e 37 2c 36 2e 34 31 56 37 34 2e 33 31 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2c 33 2e 37 2c 36 2e 34 31 4c 35 36 2e 33 2c 39 35 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2c 37 2e 34 2c 30 4c 38 38 2e 34 39 2c 38 30 2e 37 32 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2c 33 2e 37 2d 36 2e 34 31 56 34 35 2e 36 39 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2d 33 2e 37 2d 36 2e 34 31 4c 36 Data Ascii: 0,1-1.2-2.08V45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3A2.4,2.4,0,0,1,60,29m0-5a7.4,7.4,0,0,0-3.7,1L31.51,39.28a7.4,7.4,0,0,0-3.7,6.41V74.31a7.4,7.4,0,0,0,3.7,6.41L56.3,95a7.4,7.4,0,0,0,7.4,0L88.49,80.72a7.4,7.4,0,0,0,3.7-6.41V45.69a7.4,7.4,0,0,0-3.7-6.41L6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50213	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2445	OUT	GET /images/backgrounds/home_unicorn/tf_multi_upload.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 986 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3da" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 8449 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24794a0b45e8-DFW
2023-12-28 16:22:30 UTC	986	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 34 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 35 2e 30 37 2c 38 30 2e 38 36 61 34 2e 37 2c 34 2e 37 2c 30 2c 31 2c 30 2d 33 2e 32 36 2d 31 2e 33 38 41 34 2e 34 35 2c 34 2e 34 35 2c 30 2c 30 2c 30 2c 37 35 2e 30 37 2c 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab4"><path class="cls-1" d="M75.07,80.86a4.7,4.7,0,1,0-3.26-1.38A4.45,4.45,0,0,0,75.07,8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50209	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	1066	OUT	GET /fa/img/gear-list-item.png HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:30 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/png Content-Length: 267 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-10b" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:30 UTC	267	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 11 08 03 00 00 00 08 46 67 f5 00 00 00 33 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a3 05 46 c9 00 00 00 10 74 52 4e 53 00 5f 7f df bf 4f cf af 9f 20 ef 3f 1f 10 8f 30 74 d0 a2 69 00 00 00 77 49 44 41 54 18 d3 6d 8f 5b 12 80 20 08 45 79 aa 69 96 fb 5f 6d 03 e1 64 4d f7 43 f1 00 17 01 53 27 3e 00 a0 24 84 a9 8d c7 18 5c aa 9d 7b 30 1c 8f 8e 60 e7 c2 f0 a7 8e c0 d5 d8 1e 42 d9 ae aa 36 a0 46 cf ac e7 0e ea 41 f6 0e 89 34 2e 36 f4 62 e2 2c 7b ac d0 e5 e3 97 76 5f c3 1d c9 93 dc c0 a5 3f 7f 6e 0b d3 60 f4 dd 63 1a 0a 95 18 10 c2 54 ac 9e ef aa 0b 27 0f 0a a1 f0 37 e5 46 Data Ascii: PNGIHDRFg3PLTEFtRNS_O ?0tiwIDATm[ Eyi_mdMCS'>$\{0`B6FA4.6b,{v_?n`cT'7F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50212	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2441	OUT	GET /images/backgrounds/home_unicorn/tf_organize.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 419 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1a3" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11029 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24793f3faa70-DFW
2023-12-28 16:22:30 UTC	419	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 66 65 61 74 75 72 65 73 2d 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 31 35 22 3e 3c 70 61 74 68 20 69 64 3d 22 66 6f 6c 64 65 72 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 38 30 2c 38 34 48 33 35 61 36 2c 36 2c 30 2c 30 2c 31 2d 36 2d 36 56 34 32 61 36 2c 36 2c 30 2c 30 2c 31 2c 36 2d 36 48 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>features-svg ready</title><g id="ab15"><path id="folder" class="cls-1" d="M80,84H35a6,6,0,0,1-6-6V42a6,6,0,0,1,6-6H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50210	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2445	OUT	GET /images/backgrounds/home_unicorn/tf_1_time_links.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 1213 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-4bd" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 5051 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24794eb3e9b5-DFW
2023-12-28 16:22:30 UTC	1038	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 36 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 38 31 2e 38 32 2c 33 36 2e 35 35 6c 31 2e 36 33 2c 31 2e 36 33 2d 38 2e 36 33 2c 38 2e 36 2c 32 2e 34 31 2c 32 2e 34 61 32 2e 32 36 2c 32 2e 32 36 2c 30 2c 30 2c 31 2c 30 2c 33 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab6"><path class="cls-1" d="M81.82,36.55l1.63,1.63-8.63,8.6,2.41,2.4a2.26,2.26,0,0,1,0,3
2023-12-28 16:22:30 UTC	175	IN	Data Raw: 6c 2d 33 2e 31 38 2d 33 2e 32 32 41 31 2e 31 33 2c 31 2e 31 33 2c 30 2c 31 2c 31 2c 38 37 2c 33 37 2e 38 39 6c 33 2e 32 32 2c 33 2e 31 38 61 31 2e 32 2c 31 2e 32 2c 30 2c 30 2c 31 2c 30 2c 31 2e 36 33 5a 6d 31 2e 31 33 2d 37 2e 32 39 61 31 2e 31 33 2c 31 2e 31 33 2c 30 2c 30 2c 31 2d 2e 38 31 2c 31 2e 39 35 68 2d 33 2e 34 61 31 2e 31 33 2c 31 2e 31 33 2c 30 2c 31 2c 31 2c 30 2d 32 2e 32 36 68 33 2e 34 41 31 2e 31 2c 31 2e 31 2c 30 2c 30 2c 31 2c 39 31 2e 33 37 2c 33 35 2e 34 32 5a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: l-3.18-3.22A1.13,1.13,0,1,1,87,37.89l3.22,3.18a1.2,1.2,0,0,1,0,1.63Zm1.13-7.29a1.13,1.13,0,0,1-.81,1.95h-3.4a1.13,1.13,0,1,1,0-2.26h3.4A1.1,1.1,0,0,1,91.37,35.42Z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50211	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2437	OUT	GET /images/backgrounds/home_unicorn/tf_apps.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 2328 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-918" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6469 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24794e953ac1-DFW
2023-12-28 16:22:30 UTC	1038	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 37 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 37 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 34 2e 34 31 2c 33 37 2e 32 39 56 38 32 2e 37 31 61 35 2e 37 36 2c 35 2e 37 36 2c 30 2c 30 2c 31 2d 35 2e 36 38 2c 35 2e 36 38 48 33 36 61 35 2e 37 36 2c 35 2e 37 36 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#07f;}</style></defs><title>top_features</title><g id="ab7"><path class="cls-1" d="M64.41,37.29V82.71a5.76,5.76,0,0,1-5.68,5.68H36a5.76,5.76,0,
2023-12-28 16:22:30 UTC	1290	IN	Data Raw: 31 2c 32 2e 39 2c 35 2e 33 33 2c 35 2e 33 33 2c 30 2c 30 2c 30 2c 31 2c 33 2e 31 32 41 34 2e 32 36 2c 34 2e 32 36 2c 30 2c 30 2c 30 2c 38 39 2e 34 35 2c 37 38 2e 36 38 5a 4d 38 34 2e 31 39 2c 36 32 2e 32 36 61 35 2e 33 34 2c 35 2e 33 34 2c 30 2c 30 2c 31 2d 2e 34 31 2c 31 2e 39 2c 35 2e 37 35 2c 35 2e 37 35 2c 30 2c 30 2c 31 2d 31 2e 33 2c 31 2e 39 33 2c 34 2c 34 2c 30 2c 30 2c 31 2d 31 2e 35 31 2c 31 2c 37 2e 38 36 2c 37 2e 38 36 2c 30 2c 30 2c 31 2d 31 2e 34 36 2e 32 34 2c 36 2e 33 39 2c 36 2e 33 39 2c 30 2c 30 2c 31 2c 31 2e 30 39 2d 33 2e 36 2c 35 2e 35 38 2c 35 2e 35 38 2c 30 2c 30 2c 31 2c 33 2e 35 2d 32 2e 30 37 73 30 2c 2e 30 38 2c 30 2c 2e 31 35 61 31 2e 35 31 2c 31 2e 35 31 2c 30 2c 30 2c 30 2c 30 2c 2e 31 35 73 30 2c 2e 30 38 2c 30 2c 2e 31 34 Data Ascii: 1,2.9,5.33,5.33,0,0,0,1,3.12A4.26,4.26,0,0,0,89.45,78.68ZM84.19,62.26a5.34,5.34,0,0,1-.41,1.9,5.75,5.75,0,0,1-1.3,1.93,4,4,0,0,1-1.51,1,7.86,7.86,0,0,1-1.46.24,6.39,6.39,0,0,1,1.09-3.6,5.58,5.58,0,0,1,3.5-2.07s0,.08,0,.15a1.51,1.51,0,0,0,0,.15s0,.08,0,.14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50214	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2440	OUT	GET /images/backgrounds/home_unicorn/pro_driver.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 10481 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-28f1" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 3732 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247959f1e7c7-DFW
2023-12-28 16:22:30 UTC	1036	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 34 36 22 20 68 65 69 67 68 74 3d 22 32 38 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 36 20 32 38 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 39 64 39 37 65 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 65 38 65 61 65 63 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 65 66 66 30 66 31 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 38 36 38 61 38 64 3b 7d 2e 63 6c 73 2d 36 7b 66 69 6c 6c 3a 23 65 33 65 34 65 35 3b 7d 2e 63 6c 73 2d 37 7b 66 69 6c 6c 3a 23 66 30 66 31 66 31 3b 7d 2e 63 6c 73 2d 38 7b 66 69 6c 6c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="446" height="283" viewBox="0 0 446 283"><defs><style>.cls-1{fill:#f9d97e;}.cls-2{fill:#e8eaec;}.cls-3{fill:#fff;}.cls-4{fill:#eff0f1;}.cls-5{fill:#868a8d;}.cls-6{fill:#e3e4e5;}.cls-7{fill:#f0f1f1;}.cls-8{fill
2023-12-28 16:22:30 UTC	1369	IN	Data Raw: 2c 30 2d 31 32 2e 34 2d 31 34 68 2d 32 37 61 31 32 2e 34 34 2c 31 32 2e 34 34 2c 30 2c 30 2c 30 2d 31 32 2e 34 2c 31 34 48 32 36 2e 35 61 31 32 2e 35 2c 31 32 2e 35 2c 30 2c 30 2c 30 2c 30 2c 32 35 68 36 31 61 31 32 2e 34 39 2c 31 32 2e 34 39 2c 30 2c 30 2c 30 2c 2e 34 2d 32 35 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 20 2d 31 30 37 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 32 37 39 2c 32 32 31 56 32 30 33 48 32 36 32 56 31 36 39 68 2d 32 76 33 34 48 32 34 33 76 31 38 48 32 32 35 76 34 38 2e 36 68 32 56 32 32 33 68 31 38 56 32 30 35 68 33 32 76 31 38 68 31 38 56 33 33 38 68 32 56 32 32 31 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 20 2d 31 30 Data Ascii: ,0-12.4-14h-27a12.44,12.44,0,0,0-12.4,14H26.5a12.5,12.5,0,0,0,0,25h61a12.49,12.49,0,0,0,.4-25Z" transform="translate(-2 -107)"/><path class="cls-2" d="M279,221V203H262V169h-2v34H243v18H225v48.6h2V223h18V205h32v18h18V338h2V221Z" transform="translate(-2 -10
2023-12-28 16:22:30 UTC	1369	IN	Data Raw: 2e 35 35 2c 33 36 35 2e 36 35 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 20 2d 31 30 37 29 22 2f 3e 3c 2f 67 3e 3c 67 20 69 64 3d 22 77 68 65 65 6c 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 77 68 65 65 6c 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 36 22 20 63 78 3d 22 36 39 2e 37 33 22 20 63 79 3d 22 32 36 36 2e 35 39 22 20 72 3d 22 31 33 2e 34 31 22 2f 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 37 22 20 63 78 3d 22 36 39 2e 37 33 22 20 63 79 3d 22 32 36 36 2e 35 39 22 20 72 3d 22 38 2e 39 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 38 22 20 64 3d 22 4d 37 31 2e 37 33 2c 33 38 33 2e 35 33 61 39 2e 39 34 2c 39 2e 39 34 2c 30 2c 31 2c 31 2c 39 2e 39 34 2d 39 2e 39 Data Ascii: .55,365.65Z" transform="translate(-2 -107)"/></g><g id="wheel-2" data-name="wheel"><circle class="cls-6" cx="69.73" cy="266.59" r="13.41"/><circle class="cls-7" cx="69.73" cy="266.59" r="8.94"/><path class="cls-8" d="M71.73,383.53a9.94,9.94,0,1,1,9.94-9.9
2023-12-28 16:22:30 UTC	1369	IN	Data Raw: 2c 33 35 33 6c 2e 36 2c 30 41 31 2e 39 31 2c 31 2e 39 31 2c 30 2c 30 2c 31 2c 34 38 2c 33 35 35 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 20 2d 31 30 37 29 22 2f 3e 3c 2f 67 3e 3c 70 61 74 68 20 69 64 3d 22 6f 75 74 6c 69 6e 65 73 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 38 22 20 64 3d 22 4d 31 38 39 2e 36 2c 33 37 39 2e 32 6c 2d 34 2e 36 2d 32 2e 37 37 56 33 36 36 61 31 33 2e 33 2c 31 33 2e 33 2c 30 2c 30 2c 30 2d 34 2e 32 34 2d 39 2e 36 37 2c 34 2e 33 32 2c 34 2e 33 32 2c 30 2c 30 2c 30 2d 32 2e 33 34 2d 38 2e 32 37 2c 32 2e 36 33 2c 32 2e 36 33 2c 30 2c 30 2c 30 2d 2e 33 37 2d 2e 34 33 2c 32 2e 35 39 2c 32 2e 35 39 2c 30 2c 30 2c 30 2d 32 2d 2e 36 38 2c 31 35 2e 32 32 2c 31 35 2e 32 32 2c 30 2c 30 2c 30 2d 39 2e 34 34 Data Ascii: ,353l.6,0A1.91,1.91,0,0,1,48,355Z" transform="translate(-2 -107)"/></g><path id="outlines" class="cls-8" d="M189.6,379.2l-4.6-2.77V366a13.3,13.3,0,0,0-4.24-9.67,4.32,4.32,0,0,0-2.34-8.27,2.63,2.63,0,0,0-.37-.43,2.59,2.59,0,0,0-2-.68,15.22,15.22,0,0,0-9.44
2023-12-28 16:22:30 UTC	1369	IN	Data Raw: 2e 36 32 4c 38 38 2c 33 34 30 2e 37 41 31 33 2e 39 34 2c 31 33 2e 39 34 2c 30 2c 30 2c 31 2c 39 33 2c 33 33 37 2e 31 31 5a 6d 2d 34 39 2e 33 38 2d 31 2e 35 61 31 2e 35 33 2c 31 2e 35 33 2c 30 2c 30 2c 31 2d 31 2e 31 34 2d 31 2e 38 33 6c 2e 31 32 2d 2e 35 33 61 31 2e 35 32 2c 31 2e 35 32 2c 30 2c 30 2c 31 2c 31 2e 38 33 2d 31 2e 31 34 6c 32 31 2e 35 31 2c 35 41 31 2e 35 33 2c 31 2e 35 33 2c 30 2c 30 2c 31 2c 36 37 2e 30 38 2c 33 33 39 6c 2d 2e 31 32 2e 35 33 61 31 2e 35 33 2c 31 2e 35 33 2c 30 2c 30 2c 31 2d 31 2e 38 33 2c 31 2e 31 34 5a 6d 2e 33 33 2c 32 31 2e 30 37 41 31 30 2e 38 38 2c 31 30 2e 38 38 2c 30 2c 30 2c 31 2c 34 35 2e 38 34 2c 33 35 34 48 34 36 61 2e 39 32 2e 39 32 2c 30 2c 30 2c 31 2c 31 2c 31 76 34 61 2e 39 32 2e 39 32 2c 30 2c 30 2c 31 2d Data Ascii: .62L88,340.7A13.94,13.94,0,0,1,93,337.11Zm-49.38-1.5a1.53,1.53,0,0,1-1.14-1.83l.12-.53a1.52,1.52,0,0,1,1.83-1.14l21.51,5A1.53,1.53,0,0,1,67.08,339l-.12.53a1.53,1.53,0,0,1-1.83,1.14Zm.33,21.07A10.88,10.88,0,0,1,45.84,354H46a.92.92,0,0,1,1,1v4a.92.92,0,0,1-
2023-12-28 16:22:30 UTC	1369	IN	Data Raw: 31 37 2e 33 34 2c 33 34 36 2e 34 37 61 35 2e 34 36 2c 35 2e 34 36 2c 30 2c 30 2c 30 2d 2e 33 39 2d 31 2e 31 33 2c 31 30 2e 38 31 2c 31 30 2e 38 31 2c 30 2c 30 2c 30 2d 32 30 2e 38 31 2c 34 2e 30 39 2c 31 30 2e 36 39 2c 31 30 2e 36 39 2c 30 2c 30 2c 30 2c 32 2e 32 35 2c 36 2e 35 37 68 32 2e 37 33 61 38 2e 37 31 2c 38 2e 37 31 2c 30 2c 30 2c 31 2d 33 2d 36 2e 35 37 41 38 2e 38 31 2c 38 2e 38 31 2c 30 2c 30 2c 31 2c 33 31 35 2e 30 38 2c 33 34 36 48 33 31 31 61 36 2e 31 38 2c 36 2e 31 38 2c 30 2c 30 2c 30 2d 36 2e 31 37 2c 36 2e 31 37 56 33 35 36 68 32 76 2d 33 2e 37 38 41 34 2e 31 37 2c 34 2e 31 37 2c 30 2c 30 2c 31 2c 33 31 31 2c 33 34 38 68 34 2e 36 33 61 39 2c 39 2c 30 2c 30 2c 31 2c 2e 31 32 2c 31 2e 33 38 2c 38 2e 37 36 2c 38 2e 37 36 2c 30 2c 30 2c 31 Data Ascii: 17.34,346.47a5.46,5.46,0,0,0-.39-1.13,10.81,10.81,0,0,0-20.81,4.09,10.69,10.69,0,0,0,2.25,6.57h2.73a8.71,8.71,0,0,1-3-6.57A8.81,8.81,0,0,1,315.08,346H311a6.18,6.18,0,0,0-6.17,6.17V356h2v-3.78A4.17,4.17,0,0,1,311,348h4.63a9,9,0,0,1,.12,1.38,8.76,8.76,0,0,1
2023-12-28 16:22:30 UTC	1369	IN	Data Raw: 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 32 22 20 64 3d 22 4d 32 34 33 2e 30 39 2c 33 37 37 61 38 2c 38 2c 30 2c 31 2c 31 2c 38 2d 38 41 38 2c 38 2c 30 2c 30 2c 31 2c 32 34 33 2e 30 39 2c 33 37 37 5a 6d 30 2d 31 34 61 36 2c 36 2c 30 2c 31 2c 30 2c 36 2c 36 41 36 2c 36 2c 30 2c 30 2c 30 2c 32 34 33 2e 30 39 2c 33 36 33 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 20 2d 31 30 37 29 22 2f 3e 3c 2f 67 3e 3c 67 20 69 64 3d 22 77 68 65 65 6c 2d 34 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 77 68 65 65 6c 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 34 22 20 63 78 3d 22 33 36 39 2e 30 39 22 20 63 79 3d 22 32 36 32 22 20 72 3d 22 31 38 22 2f 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 Data Ascii: "/><path class="cls-12" d="M243.09,377a8,8,0,1,1,8-8A8,8,0,0,1,243.09,377Zm0-14a6,6,0,1,0,6,6A6,6,0,0,0,243.09,363Z" transform="translate(-2 -107)"/></g><g id="wheel-4" data-name="wheel"><circle class="cls-14" cx="369.09" cy="262" r="18"/><circle class="c
2023-12-28 16:22:30 UTC	1231	IN	Data Raw: 39 2c 32 2e 34 33 63 32 2e 33 36 2e 34 33 2c 34 2e 36 39 2e 38 36 2c 36 2e 38 37 2c 31 2e 33 31 2c 30 2c 30 2c 32 32 2c 30 2c 32 32 2c 30 61 32 2e 39 33 2c 32 2e 39 33 2c 30 2c 30 2c 30 2c 32 2e 34 37 2d 31 2e 31 39 41 34 2e 34 2c 34 2e 34 2c 30 2c 30 2c 30 2c 34 31 35 2e 38 39 2c 33 37 38 2e 38 39 5a 4d 32 36 33 2e 30 38 2c 33 34 38 2e 31 34 63 32 2e 38 33 2d 33 2e 32 39 2c 35 2e 32 37 2d 36 2e 31 34 2c 31 32 2d 36 2e 31 34 68 31 32 61 34 2e 31 2c 34 2e 31 2c 30 2c 30 2c 31 2c 33 2e 36 2c 33 2e 31 33 6c 31 2e 36 34 2c 39 2e 38 37 48 32 35 35 2e 38 39 6c 2d 2e 34 34 2d 2e 34 41 32 33 2c 32 33 2c 30 2c 30 2c 30 2c 32 36 33 2e 30 38 2c 33 34 38 2e 31 34 5a 6d 2d 33 36 2c 33 33 2e 38 36 41 31 36 2c 31 36 2c 30 2c 30 2c 31 2c 32 31 31 2c 33 36 36 76 2d 39 68 Data Ascii: 9,2.43c2.36.43,4.69.86,6.87,1.31,0,0,22,0,22,0a2.93,2.93,0,0,0,2.47-1.19A4.4,4.4,0,0,0,415.89,378.89ZM263.08,348.14c2.83-3.29,5.27-6.14,12-6.14h12a4.1,4.1,0,0,1,3.6,3.13l1.64,9.87H255.89l-.44-.4A23,23,0,0,0,263.08,348.14Zm-36,33.86A16,16,0,0,1,211,366v-9h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50216	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	1068	OUT	GET /fa/img/gray_header_logo.png HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:30 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/png Content-Length: 325 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-145" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:30 UTC	325	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 03 00 00 00 f3 37 75 51 00 00 00 54 50 4c 54 45 c3 c3 c3 c7 c7 c7 00 00 00 c3 c3 c3 bf bf bf c3 c3 c3 c2 c2 c2 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c4 c4 c4 c2 c2 c2 c2 c2 c2 c3 c3 c3 ff ff ff f0 f0 f0 e5 e5 e5 cb cb cb f7 f7 f7 e1 e1 e1 fb fb fb eb eb eb d4 d4 d4 ce ce ce c7 c7 c7 d9 d9 d9 da da da 9e 8f 0a 89 00 00 00 0e 74 52 4e 53 bf 20 00 df 10 ef 9f 7f 5f cf af 9f 8f 3f aa 06 75 3d 00 00 00 92 49 44 41 54 28 cf d5 d2 49 12 c2 30 0c 44 51 21 32 31 75 cb 76 46 b8 ff 3d 31 71 95 93 32 e4 00 fc 95 ec 57 da 49 b4 6a cf 28 bb 74 aa 52 a5 ff b2 46 a5 c1 ef 1e f2 59 f1 36 22 e7 83 43 ec 2a 88 4d a4 cf f2 4a 0f 59 65 26 a7 2c 8e 44 16 0c b4 2c 81 b6 93 9e 7c 02 db b8 c9 12 c8 7e 1d 1c Data Ascii: PNGIHDR7uQTPLTEtRNS _?u=IDAT(I0DQ!21uvF=1q2WIj(tRFY6"C*MJYe&,D,\|~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50215	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2721	OUT	GET /images/backgrounds/newHome/sections/texas.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	398	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/png Content-Length: 1066 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-42a" Expires: Sat, 27 Jan 2024 14:16:19 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 787 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24799a243ac0-DFW
2023-12-28 16:22:30 UTC	971	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 a2 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa 83 8b f9 69 73 f9 69 73 f9 69 73 fe eb ec fa 85 8d fe de e0 fe e2 e4 f9 69 73 fa 88 90 f9 6b 75 fa 81 8a f9 69 73 f9 6b 75 ff f4 f5 f9 6f 78 f9 6f 78 fd c9 cc f9 71 7a f9 71 7b fd ce d1 fa 81 89 f9 69 73 f9 69 73 fa 80 89 fa 84 8c f9 68 72 fa ee 10 df 00 00 00 35 74 52 4e 53 00 1a 18 02 01 12 0f 0c 15 17 09 03 07 16 04 19 08 0a 05 0e 06 14 11 0b 0d 10 13 65 f7 f4 f1 1e 5d 20 1f f0 5a d9 65 f2 Data Ascii: PNGIHDRxxPLTEisisisiskuiskuoxoxqzq{isishr5tRNSe] Ze
2023-12-28 16:22:30 UTC	95	IN	Data Raw: b1 83 e1 a8 60 97 7a 7f d4 fa 97 0a 17 ec 62 d5 be b7 e9 7f e8 49 b1 8f dc f7 c6 87 7e 2b 38 e1 a0 e4 cc 61 27 a7 a3 de 32 5a c3 2b 8b c3 4e 8a 4d 68 b7 fa f2 4c 78 26 eb 6b d7 aa 11 36 11 7d b6 2f bb 24 59 7a fc 27 bc fa 0b a3 f7 34 fd 0d e4 de 1f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: `zbI~+8a'2Z+NMhLx&k6}/$Yz'4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50218	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	740	OUT	GET /lp/global/img/icon_download_cloud_white.svg HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:30 UTC	404	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 592 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 13 Apr 2023 13:25:27 GMT Vary: Accept-Encoding ETag: "643802c7-250" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:30 UTC	592	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 34 22 20 68 65 69 67 68 74 3d 22 33 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 20 33 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 32 20 39 2e 32 38 35 36 32 56 32 30 2e 37 31 34 31 4d 32 32 20 32 30 2e 37 31 34 31 4c 32 37 2e 34 35 34 35 20 31 36 2e 39 30 34 36 4d 32 32 20 32 30 2e 37 31 34 31 4c 31 36 2e 35 34 35 35 20 31 36 2e 39 30 34 36 4d 34 32 20 32 30 2e 37 31 34 31 43 34 32 20 31 36 2e 35 30 36 33 20 33 38 2e 37 34 33 38 20 31 33 2e 30 39 35 31 20 33 34 2e 37 32 37 33 20 31 33 2e 30 39 35 31 43 33 34 2e 36 38 34 34 20 31 33 2e 30 39 35 31 20 33 34 2e 36 34 32 Data Ascii: <svg width="44" height="30" viewBox="0 0 44 30" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M22 9.28562V20.7141M22 20.7141L27.4545 16.9046M22 20.7141L16.5455 16.9046M42 20.7141C42 16.5063 38.7438 13.0951 34.7273 13.0951C34.6844 13.0951 34.642

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50217	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2436	OUT	GET /images/backgrounds/home_unicorn/pf_1tb.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 1502 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-5de" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13721 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247a3ac46b3d-DFW
2023-12-28 16:22:30 UTC	1037	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 76 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 38 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 34 32 2e 39 32 2c 36 38 2e 36 36 76 2d 31 31 48 33 38 2e 36 35 76 2d 32 2e 36 61 38 2e 31 34 2c 38 2e 31 34 2c 30 2c 30 2c 30 2c 31 2e 37 33 2d 2e 31 33 2c 34 2e 35 32 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab8"><path class="cls-1" d="M42.92,68.66v-11H38.65v-2.6a8.14,8.14,0,0,0,1.73-.13,4.52,
2023-12-28 16:22:30 UTC	465	IN	Data Raw: 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 30 2c 32 39 61 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 31 2e 32 2e 33 32 4c 38 36 2c 34 33 2e 36 31 61 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 31 2e 32 2c 32 2e 30 38 56 37 34 2e 33 31 41 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 38 36 2c 37 36 2e 33 39 4c 36 31 2e 32 2c 39 30 2e 37 61 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2d 32 2e 34 2c 30 4c 33 34 2c 37 36 2e 33 39 61 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2d 31 2e 32 2d 32 2e 30 38 56 34 35 2e 36 39 41 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 33 34 2c 34 33 2e 36 31 4c 35 38 2e 38 2c 32 39 2e 33 41 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 36 30 2c 32 39 6d 30 2d 35 61 37 2e 34 2c 37 2e 34 Data Ascii: "/><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,2.08V74.31A2.41,2.41,0,0,1,86,76.39L61.2,90.7a2.4,2.4,0,0,1-2.4,0L34,76.39a2.41,2.41,0,0,1-1.2-2.08V45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3A2.4,2.4,0,0,1,60,29m0-5a7.4,7.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50219	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2722	OUT	GET /images/icons/svg_light/social_icons_sprite.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:30 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:30 GMT Content-Type: image/svg+xml Content-Length: 4864 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1300" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 14045 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247ada4ae91e-DFW
2023-12-28 16:22:30 UTC	1036	IN	Data Raw: 3c 73 76 67 0a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0a 77 69 64 74 68 3d 22 32 30 30 22 0a 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 44 65 66 69 6e 65 20 53 56 47 73 20 2d 2d 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 66 61 63 65 62 6f 6f 6b 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 Data Ascii: <svgxmlns="http://www.w3.org/2000/svg"xmlns:xlink="http://www.w3.org/1999/xlink"width="200"height="24"> ... Define SVGs --> <defs> ... facebook --> <symbol id="facebook" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet
2023-12-28 16:22:30 UTC	1369	IN	Data Raw: 2c 31 39 2e 31 31 20 31 2e 35 34 2c 31 39 2e 30 37 43 33 2e 34 34 2c 32 30 2e 32 39 20 35 2e 37 2c 32 31 20 38 2e 31 32 2c 32 31 43 31 36 2c 32 31 20 32 30 2e 33 33 2c 31 34 2e 34 36 20 32 30 2e 33 33 2c 38 2e 37 39 43 32 30 2e 33 33 2c 38 2e 36 20 32 30 2e 33 33 2c 38 2e 34 32 20 32 30 2e 33 32 2c 38 2e 32 33 43 32 31 2e 31 36 2c 37 2e 36 33 20 32 31 2e 38 38 2c 36 2e 38 37 20 32 32 2e 34 36 2c 36 5a 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 67 6f 6f 67 6c 65 20 70 6c 75 73 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 67 6f 6f 67 6c 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f Data Ascii: ,19.11 1.54,19.07C3.44,20.29 5.7,21 8.12,21C16,21 20.33,14.46 20.33,8.79C20.33,8.6 20.33,8.42 20.32,8.23C21.16,7.63 21.88,6.87 22.46,6Z" /> </symbol> ... google plus --> <symbol id="google" viewBox="0 0 24 24" preserveAspectRatio
2023-12-28 16:22:30 UTC	1369	IN	Data Raw: 33 33 20 31 39 2e 37 35 2c 31 30 2e 34 34 43 31 39 2e 37 35 2c 31 33 2e 37 32 20 31 37 2e 37 31 2c 31 37 2e 32 35 20 31 33 2e 32 35 2c 31 37 2e 32 35 5a 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 74 75 6d 62 6c 72 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 74 75 6d 62 6c 72 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 33 31 31 38 2c 31 39 2e 39 35 32 34 41 35 2e 31 32 36 31 2c 35 2e 31 32 36 31 2c 30 2c 30 2c 31 2c 31 34 2c 32 31 2e 30 37 34 35 68 2d 2e Data Ascii: 33 19.75,10.44C19.75,13.72 17.71,17.25 13.25,17.25Z" /> </symbol> ... tumblr --> <symbol id="tumblr" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M17.3118,19.9524A5.1261,5.1261,0,0,1,14,21.0745h-.
2023-12-28 16:22:30 UTC	1090	IN	Data Raw: 30 61 35 2e 31 33 31 39 2c 35 2e 31 33 31 39 2c 30 2c 30 2c 30 2c 33 2e 31 33 37 37 2d 31 2e 36 30 34 38 2c 35 2e 32 32 34 31 2c 35 2e 32 32 34 31 2c 30 2c 30 2c 30 2c 31 2e 33 34 38 32 2d 32 2e 33 38 31 37 2c 31 32 2e 30 33 37 33 2c 31 32 2e 30 33 37 33 2c 30 2c 30 2c 30 2c 2e 31 34 32 37 2d 32 2e 39 37 32 31 41 32 35 2e 36 38 36 32 2c 32 35 2e 36 38 36 32 2c 30 2c 30 2c 30 2c 32 30 2e 35 33 31 2c 31 30 2e 37 32 34 34 5a 4d 38 2e 31 38 39 34 2c 38 2e 32 38 35 63 2e 32 39 39 32 2d 2e 33 30 32 2e 33 38 31 39 2d 2e 33 31 33 35 2c 32 2e 32 35 34 35 2d 2e 33 31 33 35 2c 31 2e 36 38 31 2c 30 2c 31 2e 37 33 37 35 2e 30 30 33 37 2c 31 2e 39 38 34 35 2e 31 32 38 34 61 2e 38 34 33 31 2e 38 34 33 31 2c 30 2c 30 2c 31 2c 2e 35 31 31 39 2e 38 33 39 31 2e 39 30 33 32 Data Ascii: 0a5.1319,5.1319,0,0,0,3.1377-1.6048,5.2241,5.2241,0,0,0,1.3482-2.3817,12.0373,12.0373,0,0,0,.1427-2.9721A25.6862,25.6862,0,0,0,20.531,10.7244ZM8.1894,8.285c.2992-.302.3819-.3135,2.2545-.3135,1.681,0,1.7375.0037,1.9845.1284a.8431.8431,0,0,1,.5119.8391.9032

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50220	142.250.138.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	1040	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=invisible&cb=gmcztux0n3li Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:31 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Thu, 28 Dec 2023 16:22:30 GMT Date: Thu, 28 Dec 2023 16:22:30 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:31 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 75 2d 78 63 71 33 50 4f 43 57 46 6c 43 72 33 78 38 5f 49 50 78 67 50 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js');
2023-12-28 16:22:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50224	142.250.138.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	1028	OUT	GET /js/bg/SHUkEiphQuZqXyLzDNA1LcOjIY5P93oSbI0OKMKltYY.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=invisible&cb=gmcztux0n3li Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:31 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 17030 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 28 Dec 2023 04:44:43 GMT Expires: Fri, 27 Dec 2024 04:44:43 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 28 Nov 2023 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 41868 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:31 UTC	441	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 55 29 7b 72 65 74 75 72 6e 20 55 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 55 2c 79 29 7b 69 66 28 79 3d 28 55 3d 4d 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 21 55 7c 7c 21 55 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 79 3b 74 72 79 7b 79 3d 55 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var M=this\|\|self,C=function(U){return U},c=function(U,y){if(y=(U=M.trustedTypes,null),!U\|\|!U.createPolicy)return y;try{y=U.createPolicy("bg",{createHTML:
2023-12-28 16:22:31 UTC	1252	IN	Data Raw: 72 65 61 74 65 53 63 72 69 70 74 28 75 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 22 22 2b 75 7d 7d 28 4d 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 55 56 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 2c 4d 2c 43 29 7b 74 72 79 7b 43 3d 79 5b 28 28 55 7c 30 29 2b 32 29 25 33 5d 2c 79 5b 55 5d 3d 28 79 5b 55 5d 7c 30 29 2d 28 79 5b 28 28 55 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 43 7c 30 29 5e 28 31 3d 3d 55 3f 43 3c 3c 4d 3a 43 3e 3e 3e 4d 29 7d 63 61 74 63 68 28 42 29 7b 74 68 72 6f 77 20 42 3b 7d 7d 2c 75 62 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 2c 4d 2c 43 2c 42 2c 6b 29 7b 69 66 28 21 79 2e 43 29 7b 79 2e Data Ascii: reateScript(u)}:function(u){return""+u}}(M)(Array(7824*Math.random()\|0).join("\n")+'(function(){var UV=function(y,U,M,C){try{C=y[((U\|0)+2)%3],y[U]=(y[U]\|0)-(y[((U\|0)+1)%3]\|0)-(C\|0)^(1==U?C<<M:C>>>M)}catch(B){throw B;}},ub=function(y,U,M,C,B,k){if(!y.C){y.
2023-12-28 16:22:31 UTC	1252	IN	Data Raw: 28 75 2c 63 2c 4e 2c 78 29 7b 69 66 28 42 2e 55 48 21 3d 28 63 3d 42 2e 6c 65 6e 67 74 68 2c 78 3d 28 63 7c 30 29 2d 34 3e 3e 33 2c 78 29 29 7b 78 3d 28 78 3c 3c 28 4e 3d 5b 30 2c 30 2c 6b 5b 42 2e 55 48 3d 78 2c 31 5d 2c 6b 5b 32 5d 5d 2c 33 29 29 2d 34 3b 74 72 79 7b 42 2e 69 62 3d 63 66 28 4e 69 28 28 78 7c 30 29 2b 34 2c 42 29 2c 4e 69 28 78 2c 42 29 2c 4e 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 42 2e 70 75 73 68 28 42 2e 69 62 5b 63 26 37 5d 5e 75 29 7d 2c 6b 3d 54 28 31 36 39 2c 55 29 29 3a 4d 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 42 2e 70 75 73 68 28 75 29 7d 2c 43 26 26 4d 28 43 26 32 35 35 29 2c 55 3d 79 2e 6c 65 6e 67 74 68 2c 43 3d 30 3b 43 3c 55 3b 43 2b 2b 29 4d 28 79 5b 43 5d 29 7d 2c 24 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (u,c,N,x){if(B.UH!=(c=B.length,x=(c\|0)-4>>3,x)){x=(x<<(N=[0,0,k[B.UH=x,1],k[2]],3))-4;try{B.ib=cf(Ni((x\|0)+4,B),Ni(x,B),N)}catch(a){throw a;}}B.push(B.ib[c&7]^u)},k=T(169,U)):M=function(u){B.push(u)},C&&M(C&255),U=y.length,C=0;C<U;C++)M(y[C])},$e=function
2023-12-28 16:22:31 UTC	1252	IN	Data Raw: 54 29 2c 6b 5b 43 2e 67 5d 3d 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 63 3d 4e 2c 75 2b 3d 36 2b 37 2a 79 2c 75 26 3d 37 7d 2c 6b 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 72 65 74 75 72 6e 28 28 63 3d 28 4e 3d 28 4e 3d 33 31 30 38 2a 4d 2a 63 2b 75 2b 33 2a 28 4e 3d 4d 25 31 36 2b 31 2c 4d 29 2a 4d 2a 4e 2d 31 32 36 2a 4d 2a 4d 2a 63 2d 33 30 36 36 2a 63 2d 4e 2a 63 2b 28 42 28 29 7c 30 29 2a 4e 2b 34 32 2a 63 2a 63 2b 55 5b 75 2b 34 33 26 37 5d 2a 4d 2a 4e 2c 55 5b 4e 5d 29 2c 76 6f 69 64 20 30 29 2c 55 29 5b 28 75 2b 32 39 26 37 29 2b 28 79 26 32 29 5d 3d 4e 2c 55 29 5b 75 2b 28 79 26 32 29 5d 3d 2d 37 34 2c 4e 7d 2c 6b 7d 2c 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 29 7b 69 66 28 28 79 3d 28 55 3d 6e 75 6c 6c 2c 4a 29 2e 74 72 75 73 Data Ascii: T),k[C.g]=function(N){c=N,u+=6+7y,u&=7},k.concat=function(N){return((c=(N=(N=3108Mc+u+3(N=M%16+1,M)MN-126MMc-3066c-Nc+(B()\|0)N+42cc+U[u+43&7]MN,U[N]),void 0),U)[(u+29&7)+(y&2)]=N,U)[u+(y&2)]=-74,N},k},lb=function(y,U){if((y=(U=null,J).trus
2023-12-28 16:22:31 UTC	1252	IN	Data Raw: 67 28 74 72 75 65 2c 28 50 28 28 50 28 55 2c 28 55 2e 4a 74 3d 28 6e 28 28 56 28 28 6e 28 55 2c 33 32 2c 28 6e 28 55 2c 33 33 30 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 2c 4e 29 7b 6e 28 75 2c 28 4e 3d 28 4e 3d 28 63 3d 28 4e 3d 6c 28 75 29 2c 6c 29 28 75 29 2c 54 28 4e 2c 75 29 29 2c 49 51 28 4e 29 29 2c 63 29 2c 4e 29 7d 2c 28 56 28 28 6e 28 55 2c 28 56 28 28 6e 28 55 2c 34 31 39 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 2c 4e 2c 78 2c 61 29 7b 30 21 3d 3d 28 78 3d 28 4e 3d 28 63 3d 28 61 3d 6c 28 28 63 3d 28 4e 3d 6c 28 75 29 2c 6c 29 28 75 29 2c 75 29 29 2c 78 3d 6c 28 75 29 2c 61 3d 54 28 61 2c 75 29 2c 54 28 63 2c 75 29 29 2c 54 29 28 4e 2c 75 2e 49 29 2c 54 28 78 2c 75 29 29 2c 4e 29 26 26 28 78 3d 53 43 28 61 2c 75 2c 31 2c 78 2c 4e Data Ascii: g(true,(P((P(U,(U.Jt=(n((V((n(U,32,(n(U,330,(V(function(u,c,N){n(u,(N=(N=(c=(N=l(u),l)(u),T(N,u)),IQ(N)),c),N)},(V((n(U,(V((n(U,419,(V(function(u,c,N,x,a){0!==(x=(N=(c=(a=l((c=(N=l(u),l)(u),u)),x=l(u),a=T(a,u),T(c,u)),T)(N,u.I),T(x,u)),N)&&(x=SC(a,u,1,x,N
2023-12-28 16:22:31 UTC	1252	IN	Data Raw: 6f 6e 28 75 2c 63 2c 4e 2c 78 2c 61 29 7b 28 78 3d 6c 28 28 63 3d 6c 28 28 61 3d 6c 28 75 29 2c 75 29 29 2c 75 29 29 2c 75 2e 49 3d 3d 75 29 26 26 28 78 3d 54 28 78 2c 75 29 2c 4e 3d 54 28 61 2c 75 29 2c 63 3d 54 28 63 2c 75 29 2c 4e 5b 63 5d 3d 78 2c 31 35 30 3d 3d 61 26 26 28 75 2e 57 3d 76 6f 69 64 20 30 2c 32 3d 3d 63 26 26 28 75 2e 69 3d 70 28 33 32 2c 66 61 6c 73 65 2c 75 29 2c 75 2e 57 3d 76 6f 69 64 20 30 29 29 29 7d 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 2c 4e 29 7b 6e 28 75 2c 28 4e 3d 28 63 3d 6c 28 75 29 2c 6c 28 75 29 29 2c 4e 29 2c 22 22 2b 54 28 63 2c 75 29 29 7d 2c 55 2c 28 6e 28 55 2c 33 37 37 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 2c 4e 2c 78 29 7b 21 49 28 75 2c 66 61 6c 73 65 2c 74 72 75 65 2c 63 29 26 26 28 63 3d 24 Data Ascii: on(u,c,N,x,a){(x=l((c=l((a=l(u),u)),u)),u.I==u)&&(x=T(x,u),N=T(a,u),c=T(c,u),N[c]=x,150==a&&(u.W=void 0,2==c&&(u.i=p(32,false,u),u.W=void 0)))},(V(function(u,c,N){n(u,(N=(c=l(u),l(u)),N),""+T(c,u))},U,(n(U,377,(V(function(u,c,N,x){!I(u,false,true,c)&&(c=$
2023-12-28 16:22:31 UTC	1252	IN	Data Raw: 5d 2c 63 5b 33 5d 29 3a 32 28 29 2c 6e 28 75 2c 61 2c 63 29 29 7d 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 29 7b 75 3d 54 28 28 63 3d 6c 28 75 29 2c 63 29 2c 75 2e 49 29 2c 75 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 75 5b 31 5d 2c 75 5b 32 5d 2c 77 29 7d 2c 55 2c 28 6e 28 55 2c 39 33 2c 5b 31 36 30 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 2c 4e 2c 78 29 7b 6e 28 75 2c 28 4e 3d 54 28 28 78 3d 28 63 3d 28 78 3d 6c 28 75 29 2c 6c 29 28 75 29 2c 54 28 78 2c 75 29 29 2c 63 29 2c 75 29 2c 63 29 2c 4e 2b 78 29 7d 2c 55 2c 28 6e 28 55 2c 28 6e 28 55 2c 28 55 2e 4f 48 3d 28 55 2e 46 3d 31 2c 55 2e 4b 3d 30 2c 55 2e 44 4b 3d 43 2c 55 2e 6f 3d 76 6f 69 64 20 30 2c 55 2e 4a 3d 76 6f 69 64 20 30 2c 28 55 2e 56 3d 30 2c 55 Data Ascii: ],c[3]):2(),n(u,a,c))},(V(function(u,c){u=T((c=l(u),c),u.I),u[0].removeEventListener(u[1],u[2],w)},U,(n(U,93,[160,(V(function(u,c,N,x){n(u,(N=T((x=(c=(x=l(u),l)(u),T(x,u)),c),u),c),N+x)},U,(n(U,(n(U,(U.OH=(U.F=1,U.K=0,U.DK=C,U.o=void 0,U.J=void 0,(U.V=0,U
2023-12-28 16:22:31 UTC	1252	IN	Data Raw: 30 2c 30 5d 29 2c 30 29 2c 50 28 55 2c 5b 41 51 5d 29 2c 5b 72 57 2c 79 5d 29 29 2c 55 29 2c 5b 62 62 2c 4d 5d 29 2c 74 72 75 65 29 2c 55 29 7d 2c 64 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 2c 4d 29 7b 6e 28 55 2c 4d 2c 79 29 2c 79 5b 41 51 5d 3d 32 37 39 36 7d 2c 7a 32 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 2c 4d 2c 43 29 7b 66 6f 72 28 43 3d 28 4d 3d 6c 28 79 29 2c 30 29 3b 30 3c 55 3b 55 2d 2d 29 43 3d 43 3c 3c 38 7c 48 28 79 29 3b 6e 28 79 2c 4d 2c 43 29 7d 2c 4f 56 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 2c 4d 2c 43 29 7b 72 65 74 75 72 6e 20 54 28 35 35 2c 28 6e 28 79 2c 31 30 30 2c 28 75 62 28 79 2c 28 28 43 3d 54 28 31 30 30 2c 79 29 2c 79 2e 73 29 26 26 43 3c 79 2e 53 3f 28 6e 28 79 2c 31 30 30 2c 79 2e 53 29 2c 59 65 28 4d 2c 79 29 29 3a 6e Data Ascii: 0,0]),0),P(U,[AQ]),[rW,y])),U),[bb,M]),true),U)},d,V=function(y,U,M){n(U,M,y),y[AQ]=2796},z2=function(y,U,M,C){for(C=(M=l(y),0);0<U;U--)C=C<<8\|H(y);n(y,M,C)},OV=function(y,U,M,C){return T(55,(n(y,100,(ub(y,((C=T(100,y),y.s)&&C<y.S?(n(y,100,y.S),Ye(M,y)):n
2023-12-28 16:22:31 UTC	1252	IN	Data Raw: 2c 4d 2c 43 2c 42 29 7b 69 66 28 43 3d 79 5b 30 5d 2c 43 3d 3d 69 62 29 55 2e 4d 66 3d 32 35 2c 55 2e 42 28 79 29 3b 65 6c 73 65 20 69 66 28 43 3d 3d 68 29 7b 4d 3d 79 5b 31 5d 3b 74 72 79 7b 42 3d 55 2e 43 7c 7c 55 2e 42 28 79 29 7d 63 61 74 63 68 28 6b 29 7b 53 28 55 2c 6b 29 2c 42 3d 55 2e 43 7d 4d 28 42 29 7d 65 6c 73 65 20 69 66 28 43 3d 3d 66 65 29 55 2e 42 28 79 29 3b 65 6c 73 65 20 69 66 28 43 3d 3d 72 57 29 55 2e 42 28 79 29 3b 65 6c 73 65 20 69 66 28 43 3d 3d 62 62 29 7b 74 72 79 7b 66 6f 72 28 42 3d 30 3b 42 3c 55 2e 4c 2e 6c 65 6e 67 74 68 3b 42 2b 2b 29 74 72 79 7b 4d 3d 55 2e 4c 5b 42 5d 2c 4d 5b 30 5d 5b 4d 5b 31 5d 5d 28 4d 5b 32 5d 29 7d 63 61 74 63 68 28 6b 29 7b 7d 7d 63 61 74 63 68 28 6b 29 7b 7d 28 30 2c 79 5b 31 5d 29 28 66 75 6e 63 Data Ascii: ,M,C,B){if(C=y[0],C==ib)U.Mf=25,U.B(y);else if(C==h){M=y[1];try{B=U.C\|\|U.B(y)}catch(k){S(U,k),B=U.C}M(B)}else if(C==fe)U.B(y);else if(C==rW)U.B(y);else if(C==bb){try{for(B=0;B<U.L.length;B++)try{M=U.L[B],M[0][M[1]](M[2])}catch(k){}}catch(k){}(0,y[1])(func
2023-12-28 16:22:31 UTC	1252	IN	Data Raw: 79 5b 33 5d 29 2c 55 2e 70 75 73 68 28 79 5b 34 5d 3c 3c 32 34 7c 79 5b 35 5d 3c 3c 31 36 7c 79 5b 36 5d 3c 3c 38 7c 79 5b 37 5d 29 2c 55 29 2e 70 75 73 68 28 79 5b 38 5d 3c 3c 32 34 7c 79 5b 39 5d 3c 3c 31 36 7c 79 5b 31 30 5d 3c 3c 38 7c 79 5b 31 31 5d 29 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 2c 4d 2c 43 2c 42 2c 6b 2c 75 2c 63 2c 4e 2c 78 2c 61 2c 46 2c 45 2c 7a 29 7b 69 66 28 42 3d 54 28 31 30 30 2c 4d 29 2c 42 3e 3d 4d 2e 53 29 74 68 72 6f 77 5b 44 2c 33 31 5d 3b 66 6f 72 28 78 3d 28 45 3d 28 6b 3d 42 2c 43 3d 79 2c 30 29 2c 4d 29 2e 50 4f 2e 6c 65 6e 67 74 68 3b 30 3c 43 3b 29 4e 3d 6b 25 38 2c 61 3d 6b 3e 3e 33 2c 7a 3d 4d 2e 73 5b 61 5d 2c 75 3d 38 2d 28 4e 7c 30 29 2c 75 3d 75 3c 43 3f 75 3a 43 2c 55 26 26 28 63 3d 4d 2c 63 2e 57 21 3d Data Ascii: y[3]),U.push(y[4]<<24\|y[5]<<16\|y[6]<<8\|y[7]),U).push(y[8]<<24\|y[9]<<16\|y[10]<<8\|y[11])},p=function(y,U,M,C,B,k,u,c,N,x,a,F,E,z){if(B=T(100,M),B>=M.S)throw[D,31];for(x=(E=(k=B,C=y,0),M).PO.length;0<C;)N=k%8,a=k>>3,z=M.s[a],u=8-(N\|0),u=u<C?u:C,U&&(c=M,c.W!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50222	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	1023	OUT	GET /src/download_file.js?nocache=1680678097636 HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:31 UTC	415	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: application/javascript Content-Length: 6642 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 21 Aug 2023 07:04:21 GMT Vary: Accept-Encoding ETag: "64e30c75-19f2" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:31 UTC	6642	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 61 74 42 79 74 65 73 28 62 79 74 65 73 2c 20 64 65 63 69 6d 61 6c 73 29 20 7b 0a 20 20 69 66 20 28 62 79 74 65 73 20 3d 3d 3d 20 30 29 20 72 65 74 75 72 6e 20 22 30 20 42 79 74 65 73 22 3b 0a 20 20 76 61 72 20 6b 20 3d 20 31 30 32 34 2c 0a 20 20 20 20 64 6d 20 3d 20 64 65 63 69 6d 61 6c 73 20 7c 7c 20 32 2c 0a 20 20 20 20 73 69 7a 65 73 20 3d 20 5b 22 42 79 74 65 73 22 2c 20 22 4b 42 22 2c 20 22 4d 42 22 2c 20 22 47 42 22 2c 20 22 54 42 22 2c 20 22 50 42 22 2c 20 22 45 42 22 2c 20 22 5a 42 22 2c 20 22 59 42 22 5d 2c 0a 20 20 20 20 69 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 6c 6f 67 28 62 79 74 65 73 29 20 2f 20 4d 61 74 68 2e 6c 6f 67 28 6b 29 29 3b 0a 0a 20 20 72 65 74 75 72 6e 20 70 61 72 73 65 46 Data Ascii: function formatBytes(bytes, decimals) { if (bytes === 0) return "0 Bytes"; var k = 1024, dm = decimals \|\| 2, sizes = ["Bytes", "KB", "MB", "GB", "TB", "PB", "EB", "ZB", "YB"], i = Math.floor(Math.log(bytes) / Math.log(k)); return parseF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50223	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	737	OUT	GET /lp/global/img/row_partners_logo_gray.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:31 UTC	358	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/png Content-Length: 77777 Connection: close Last-Modified: Mon, 08 May 2023 14:44:21 GMT ETag: "64590ac5-12fd1" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:31 UTC	16026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 0a 00 00 00 2c 08 06 00 00 00 cf 3f dd 50 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 01 2f 83 49 44 41 54 78 9c ec 9d 79 7c 14 e5 fd c7 3f df 99 bd b3 9b 84 2b 80 a0 a0 a8 f5 be 8f 7a 51 6f 6b 2b 4a bd b5 5e 78 e1 01 54 58 26 02 3f 92 48 b0 01 f7 c9 82 62 22 22 2a 1e f5 28 b5 0a 62 b5 ad 5a ac f5 a8 56 eb d1 7a 54 44 51 91 23 e1 c8 b1 d9 dd ec ee 3c df df 1f 33 13 26 9b cd c5 91 80 ce fb f5 e2 c5 ee cc 33 b3 cf 6e 76 67 9e e7 fb 7c 3f 9f 2f 31 33 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 1c 76 2d 94 de ee 80 83 83 83 83 83 83 83 83 83 83 83 83 83 Data Ascii: PNGIHDR,?PpHYs/IDATxy\|?+zQok+J^xTX&?Hb""*(bZVzTDQ#<3&3nvg\|?/13v-
2023-12-28 16:22:31 UTC	16384	IN	Data Raw: 3c f2 c8 78 fb df 0b b6 6a b5 76 cc 45 81 25 00 16 d4 d4 d4 bc 63 ab 22 d6 e3 74 f6 59 6b 9a e6 4a 24 12 11 74 bf ba 5d 3f 00 8f 0b 21 4e cf 95 ac 69 0a b4 ec 6e 9a 48 a7 d3 75 6e b7 3b 08 db fd 9a 88 ce 9c 30 61 c2 3e f3 e6 cd 6b b3 d8 11 8b c5 44 30 18 3c 39 18 cc 19 27 9f 65 3d 78 eb ad b7 0e 03 b0 51 d3 34 97 e9 00 de 46 24 6c 7e 0e 29 18 83 9c ec f1 c2 de 00 ee 29 29 29 39 cb 9e d4 a8 69 9a cb e5 72 2d 66 e6 5c 22 61 eb 3e ec 41 db a4 a8 73 75 5d 9f 06 60 a7 0a 14 e5 e7 e7 b7 49 04 18 3f 7e fc e9 c9 64 f2 d4 4d 9b 36 1d 8f ac c4 f5 50 28 b4 b0 a1 a1 a1 57 84 c2 cf 2f 5d da 5f 61 be 21 7b 7b 7d 53 d3 b4 71 e3 c6 6d 36 17 f9 f7 8b c5 62 9f b6 77 5f 34 17 aa a3 b0 89 84 01 70 41 41 c1 b4 60 20 50 0c db 3d c5 ed f5 5e f3 fc d2 a5 15 f6 ca 08 a6 d0 ca fa Data Ascii: <xjvE%c"tYkJ$t]?!NinHun;0a>kD0<9'e=xQ4F$l~))))9ir-f\"a>Asu]`I?~dM6P(W/]_a!{{}Sqm6bw_4pAA` P=^
2023-12-28 16:22:31 UTC	16384	IN	Data Raw: c6 16 95 95 95 03 b2 04 37 9b 73 25 da 98 a6 6d d6 df 5b 6f 6a 6a 7a 3e cb 94 ea 0c 18 82 6e 8b bf 5b 73 01 b3 c2 b3 65 0e b6 49 51 94 bf 35 34 34 a8 c1 60 f0 22 18 a6 1f 79 00 3e 55 14 65 41 38 1c ee 70 4e 63 1a 0c 9c 60 8e af e3 00 fe 91 4e a7 ff d8 de bd cc 14 67 9e 0d e0 67 44 34 90 99 9b 01 7c 01 e0 85 5c 46 2d 3b 0a f3 77 68 3d b6 de e3 47 b6 26 83 61 1a d7 da b0 56 48 33 b0 7d b6 52 ca f9 30 e6 c7 6c 5f 13 b0 a0 2d 15 86 9b 00 08 29 e5 30 6c 89 13 0e 8c 46 a3 03 60 c4 10 54 33 b1 ee 27 44 f4 ae d5 27 33 de f3 3e 8c 58 fa 90 aa aa aa 3e f1 78 3c d7 bc ee 00 18 63 ee b9 1d bf fb ed 4a 9e 99 50 db 95 09 f3 aa 44 22 31 45 d3 b4 18 00 28 8a f2 b8 94 72 a9 10 62 0d 0c 73 50 1f 8c 0a ee 7f ad a9 a9 f9 dc 8c 99 14 da 8e f7 a1 9d 2a c4 00 90 c9 64 d6 ba dd Data Ascii: 7s%m[ojjz>n[seIQ544`"y>UeA8pNc`NggD4\|\F-;wh=G&aVH3}R0l_-)0lF`T3'D'3>X>x<cJPD"1E(rbsP*d
2023-12-28 16:22:31 UTC	16384	IN	Data Raw: f2 1c 74 76 aa 09 03 d8 1c 8f c7 bf 70 bb dd 25 f6 c5 51 22 4d 31 ce 0e 80 e5 2e f6 aa bd 78 46 11 77 72 be 9f a9 44 c0 1d 3e 8f a7 cc 3a 9e 99 ff 82 ce 4a 91 0c e0 83 6c 7d 65 2b 06 cc e0 c8 93 f6 18 15 e8 ea 72 0e a5 e6 f5 9d 12 94 e9 ce a5 e6 0b d9 82 84 0d 91 48 24 3f 3f 3f ff 2c 98 6a be bd 4e 14 9e 31 63 46 78 d2 a4 49 33 bc 5e ef c9 00 f6 60 e6 12 22 ba 7d fa f4 e9 ef a5 3e 57 94 9b b0 a5 d2 09 22 5a 94 ef f1 5c 0c e0 6c 6b db c8 fd f7 3f 77 dd ba 75 5f 33 f3 de aa af df 21 8d 98 05 33 bf 8e 76 57 9b 03 b2 09 47 4c 98 30 61 cb bc da da d3 c3 ad ad b1 ad 79 56 74 a7 50 21 2f 2f ef b6 d6 d6 d6 e3 98 f9 67 30 9d 7f 6b 2a 2a 2a de cf 54 a8 c4 cc af 42 a9 b7 32 f3 4f 9c 4e 67 1f 64 48 9e cd 98 31 23 3c 75 ea d4 3f 39 9d ce 5f 2a 42 51 3e 80 39 53 a7 4e Data Ascii: tvp%Q"M1.xFwrD>:Jl}e+rH$???,jN1cFxI3^`"}>W"Z\lk?wu_3!3vWGL0ayVtP!//g0k**TB2ONgdH1#<u?9_BQ>9SN
2023-12-28 16:22:31 UTC	12599	IN	Data Raw: 4b b7 dd 8e d9 b3 67 7f 5b 5e 5e 3e 2a 14 0a 95 92 cd 8d 17 48 4e 80 5e 77 3a 9d 5f a9 d7 0d 50 ca 9b 64 ba 57 74 c2 ac 59 b3 d6 59 fd c1 54 d3 fb 49 6a 7f 79 79 79 7f 48 e3 10 f6 38 33 8f 4e 69 df 08 e0 0e 9f cf 17 b0 df 7c 82 c1 60 9d df ef 3f 9c 99 6f 03 70 12 99 84 e4 0e c7 ac 5d bb f6 0e 95 34 b0 63 0b 33 5b ca a1 9d 88 44 0e 87 23 98 48 24 76 27 a2 ab 6d 7d 76 59 0c d9 43 f8 10 e9 15 f2 7e f4 50 01 8c 55 30 83 f5 7f 0b 85 42 8f fd c0 9d 83 21 a5 7c 17 40 09 b2 93 36 f6 21 a2 87 a5 94 eb 03 81 c0 7c 22 72 4a 29 af 21 a2 5c 5c 6c a3 2e 97 eb b3 e1 c3 87 77 99 2c 3c f8 e0 83 b7 38 1c 8e 37 99 39 b9 82 26 a2 b8 db ed ce 55 7e fb 9d d4 82 0e 55 18 db 09 86 61 3c a1 26 0d 47 33 f3 89 30 8b 3d 3c ea 98 ef 60 92 d8 fe 69 57 01 9d 36 6d da 51 cc bc 0e 29 bf Data Ascii: Kg[^^>*HN^w:_PdWtYYTIjyyyH83Ni\|`?op]4c3[D#H$v'm}vYC~PU0B!\|@6!\|"rJ)!\\l.w,<879&U~Ua<&G30=<`iW6mQ)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50226	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2439	OUT	GET /images/backgrounds/home_unicorn/pf_no_ads.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:31 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/svg+xml Content-Length: 1249 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-4e1" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13722 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247c8bd26c6c-DFW
2023-12-28 16:22:31 UTC	1037	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 76 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 39 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 38 38 2e 34 39 2c 33 39 2e 32 38 2c 36 33 2e 37 2c 32 35 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2d 37 2e 34 2c 30 4c 33 31 2e 35 31 2c 33 39 2e 32 38 61 37 2e 34 2c 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab9"><path class="cls-1" d="M88.49,39.28,63.7,25a7.4,7.4,0,0,0-7.4,0L31.51,39.28a7.4,7
2023-12-28 16:22:31 UTC	212	IN	Data Raw: 2c 36 2e 34 33 2d 2e 37 38 73 2d 32 2e 37 37 2d 33 2e 37 34 2d 32 2e 37 37 2d 37 2e 37 37 76 2d 2e 31 38 6c 35 2e 36 36 2d 33 2e 32 34 63 31 2e 32 31 2e 35 39 2c 32 2e 36 34 2c 31 2e 33 33 2c 34 2e 31 31 2c 32 2e 31 39 2c 32 2e 35 33 2c 31 2e 34 38 2c 36 2e 36 31 2c 33 2e 33 33 2c 37 2e 39 32 2c 34 2e 32 37 61 31 2e 37 33 2c 31 2e 37 33 2c 30 2c 30 2c 30 2c 31 2e 37 39 2e 31 34 6c 2e 33 31 2d 2e 31 36 41 31 2e 37 32 2c 31 2e 37 32 2c 30 2c 30 2c 30 2c 37 36 2c 36 37 56 35 39 2e 37 31 61 33 2e 30 35 2c 33 2e 30 35 2c 30 2c 30 2c 30 2c 30 2d 36 76 2d 2e 31 31 6c 31 31 2e 31 39 2d 36 2e 34 5a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: ,6.43-.78s-2.77-3.74-2.77-7.77v-.18l5.66-3.24c1.21.59,2.64,1.33,4.11,2.19,2.53,1.48,6.61,3.33,7.92,4.27a1.73,1.73,0,0,0,1.79.14l.31-.16A1.72,1.72,0,0,0,76,67V59.71a3.05,3.05,0,0,0,0-6v-.11l11.19-6.4Z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50228	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:30 UTC	2444	OUT	GET /images/backgrounds/home_unicorn/pf_web_uploads.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:31 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/svg+xml Content-Length: 1561 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-619" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13722 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247c9f916b2a-DFW
2023-12-28 16:22:31 UTC	1037	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 66 65 61 74 75 72 65 73 2d 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 31 34 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 30 2c 32 39 61 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 31 2e 32 2e 33 32 4c 38 36 2c 34 33 2e 36 31 61 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>features-svg ready</title><g id="ab14"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,
2023-12-28 16:22:31 UTC	524	IN	Data Raw: 33 6d 2d 31 2d 32 2e 34 39 61 39 2e 37 34 2c 39 2e 37 34 2c 30 2c 30 2c 31 2c 30 2d 35 68 34 2e 32 31 61 31 37 2e 38 38 2c 31 37 2e 38 38 2c 30 2c 30 2c 30 2c 30 2c 35 4d 36 30 2c 36 30 2e 35 37 61 31 37 2c 31 37 2c 30 2c 30 2c 31 2c 32 2e 33 38 2c 34 2e 39 35 48 35 37 2e 36 32 41 31 37 2c 31 37 2c 30 2c 30 2c 31 2c 36 30 2c 36 30 2e 35 37 6d 38 2e 36 32 2c 34 2e 39 35 48 36 34 2e 39 35 61 31 39 2e 34 39 2c 31 39 2e 34 39 2c 30 2c 30 2c 30 2d 31 2e 37 32 2d 34 2e 34 33 2c 31 30 2c 31 30 2c 30 2c 30 2c 31 2c 35 2e 33 39 2c 34 2e 34 33 4d 36 30 2c 35 38 41 31 32 2e 34 36 2c 31 32 2e 34 36 2c 30 2c 31 2c 30 2c 37 32 2e 34 36 2c 37 30 2e 35 2c 31 32 2e 34 37 2c 31 32 2e 34 37 2c 30 2c 30 2c 30 2c 36 30 2c 35 38 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d Data Ascii: 3m-1-2.49a9.74,9.74,0,0,1,0-5h4.21a17.88,17.88,0,0,0,0,5M60,60.57a17,17,0,0,1,2.38,4.95H57.62A17,17,0,0,1,60,60.57m8.62,4.95H64.95a19.49,19.49,0,0,0-1.72-4.43,10,10,0,0,1,5.39,4.43M60,58A12.46,12.46,0,1,0,72.46,70.5,12.47,12.47,0,0,0,60,58Z"/><path class=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50225	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	2448	OUT	GET /images/backgrounds/home_unicorn/pf_direct_download.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:31 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/svg+xml Content-Length: 953 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3b9" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2134 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247c7de76bea-DFW
2023-12-28 16:22:31 UTC	953	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 76 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 31 32 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 30 2c 32 39 61 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 31 2e 32 2e 33 32 4c 38 36 2c 34 33 2e 36 31 61 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 31 2e 32 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab12"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,1.2,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50227	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	2446	OUT	GET /images/backgrounds/home_unicorn/pf_bulk_download.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:31 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/svg+xml Content-Length: 911 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-38f" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13418 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247c9ed246de-DFW
2023-12-28 16:22:31 UTC	911	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 66 65 61 74 75 72 65 73 2d 73 76 67 20 72 65 61 64 79 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 31 33 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 30 2c 32 39 61 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 31 2e 32 2e 33 32 4c 38 36 2c 34 33 2e 36 31 61 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>features-svg ready</title><g id="ab13"><path class="cls-1" d="M60,29a2.4,2.4,0,0,1,1.2.32L86,43.61a2.41,2.41,0,0,1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50229	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	2439	OUT	GET /images/backgrounds/home_unicorn/pf_1_time.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:31 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/svg+xml Content-Length: 1332 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-534" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13417 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247caf6747a9-DFW
2023-12-28 16:22:31 UTC	1037	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 20 31 32 30 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 36 63 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 74 6f 70 5f 66 65 61 74 75 72 65 73 76 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 61 62 31 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 34 2e 32 32 2c 36 33 2e 32 39 6c 2d 33 2d 33 61 36 2e 38 33 2c 36 2e 38 33 2c 30 2c 30 2c 30 2d 39 2d 2e 35 35 6c 2d 32 2d 32 61 36 2e 38 33 2c 36 2e 38 33 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="120" height="120" viewBox="0 0 120 120"><defs><style>.cls-1{fill:#6c3;}</style></defs><title>top_featuresv2</title><g id="ab11"><path class="cls-1" d="M74.22,63.29l-3-3a6.83,6.83,0,0,0-9-.55l-2-2a6.83,6.83,0,
2023-12-28 16:22:31 UTC	295	IN	Data Raw: 30 2c 31 2d 31 2e 32 2d 32 2e 30 38 56 34 35 2e 36 39 41 32 2e 34 31 2c 32 2e 34 31 2c 30 2c 30 2c 31 2c 33 34 2c 34 33 2e 36 31 4c 35 38 2e 38 2c 32 39 2e 33 41 32 2e 34 2c 32 2e 34 2c 30 2c 30 2c 31 2c 36 30 2c 32 39 6d 30 2d 35 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2d 33 2e 37 2c 31 4c 33 31 2e 35 31 2c 33 39 2e 32 38 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2d 33 2e 37 2c 36 2e 34 31 56 37 34 2e 33 31 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2c 33 2e 37 2c 36 2e 34 31 4c 35 36 2e 33 2c 39 35 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2c 37 2e 34 2c 30 4c 38 38 2e 34 39 2c 38 30 2e 37 32 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2c 33 2e 37 2d 36 2e 34 31 56 34 35 2e 36 39 61 37 2e 34 2c 37 2e 34 2c 30 2c 30 2c 30 2d 33 2e 37 2d 36 2e 34 31 4c 36 Data Ascii: 0,1-1.2-2.08V45.69A2.41,2.41,0,0,1,34,43.61L58.8,29.3A2.4,2.4,0,0,1,60,29m0-5a7.4,7.4,0,0,0-3.7,1L31.51,39.28a7.4,7.4,0,0,0-3.7,6.41V74.31a7.4,7.4,0,0,0,3.7,6.41L56.3,95a7.4,7.4,0,0,0,7.4,0L88.49,80.72a7.4,7.4,0,0,0,3.7-6.41V45.69a7.4,7.4,0,0,0-3.7-6.41L6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50234	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	2439	OUT	GET /images/backgrounds/newHome/sections/texas.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:31 UTC	399	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/png Content-Length: 1066 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-42a" Expires: Sat, 27 Jan 2024 14:16:19 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 6823 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247d9a60e781-DFW
2023-12-28 16:22:31 UTC	970	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 a2 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa 83 8b f9 69 73 f9 69 73 f9 69 73 fe eb ec fa 85 8d fe de e0 fe e2 e4 f9 69 73 fa 88 90 f9 6b 75 fa 81 8a f9 69 73 f9 6b 75 ff f4 f5 f9 6f 78 f9 6f 78 fd c9 cc f9 71 7a f9 71 7b fd ce d1 fa 81 89 f9 69 73 f9 69 73 fa 80 89 fa 84 8c f9 68 72 fa ee 10 df 00 00 00 35 74 52 4e 53 00 1a 18 02 01 12 0f 0c 15 17 09 03 07 16 04 19 08 0a 05 0e 06 14 11 0b 0d 10 13 65 f7 f4 f1 1e 5d 20 1f f0 5a d9 65 f2 Data Ascii: PNGIHDRxxPLTEisisisiskuiskuoxoxqzq{isishr5tRNSe] Ze
2023-12-28 16:22:31 UTC	96	IN	Data Raw: 2e b1 83 e1 a8 60 97 7a 7f d4 fa 97 0a 17 ec 62 d5 be b7 e9 7f e8 49 b1 8f dc f7 c6 87 7e 2b 38 e1 a0 e4 cc 61 27 a7 a3 de 32 5a c3 2b 8b c3 4e 8a 4d 68 b7 fa f2 4c 78 26 eb 6b d7 aa 11 36 11 7d b6 2f bb 24 59 7a fc 27 bc fa 0b a3 f7 34 fd 0d e4 de 1f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: .`zbI~+8a'2Z+NMhLx&k6}/$Yz'4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50232	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	1067	OUT	GET /fa/img/timer-blue-icon.png HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:31 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/png Content-Length: 649 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-289" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:31 UTC	649	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 4b 50 4c 54 45 00 00 00 36 83 f7 35 83 f6 36 82 f8 36 83 f7 36 82 f7 36 83 f7 34 81 f5 36 83 f8 35 82 f8 35 83 f7 32 83 f4 37 83 f7 36 82 fa 3a 84 ff 35 83 f7 30 80 ef 35 82 f4 36 83 f7 34 83 f7 40 80 ff 36 83 f7 37 81 f9 34 82 f5 36 83 f7 72 6d 88 b9 00 00 00 18 74 52 4e 53 00 df ef 3f 5f df 7f 1f cf 8f 6f 2f bf 2f 1f bf 10 60 9f 7f 10 af 4f 4f ee 58 2d 49 00 00 01 d5 49 44 41 54 48 c7 dd 96 db 92 83 20 0c 86 23 20 22 20 0a 6e 5b df ff 49 57 b1 43 55 0e c1 de ed fe 17 ed 8c fa 91 10 92 10 f8 5f 52 63 13 24 86 9b b0 58 0e 1a 6f c2 fa 08 8b 9b f0 20 56 7f 37 70 fd d3 03 7c a1 95 6e 61 d3 5f 82 0d 25 2b 4c cd 6d 90 ce 23 59 de 22 23 bf 11 b1 69 16 cb Data Ascii: PNGIHDR<<")@KPLTE6566664655276:50564@6746rmtRNS?_o//`OOX-IIDATH # " n[IWCU_Rc$Xo V7p\|na_%+Lm#Y"#i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50233	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	722	OUT	GET /fa/img/gear-list-item.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:31 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/png Content-Length: 267 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-10b" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:31 UTC	267	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 11 08 03 00 00 00 08 46 67 f5 00 00 00 33 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a3 05 46 c9 00 00 00 10 74 52 4e 53 00 5f 7f df bf 4f cf af 9f 20 ef 3f 1f 10 8f 30 74 d0 a2 69 00 00 00 77 49 44 41 54 18 d3 6d 8f 5b 12 80 20 08 45 79 aa 69 96 fb 5f 6d 03 e1 64 4d f7 43 f1 00 17 01 53 27 3e 00 a0 24 84 a9 8d c7 18 5c aa 9d 7b 30 1c 8f 8e 60 e7 c2 f0 a7 8e c0 d5 d8 1e 42 d9 ae aa 36 a0 46 cf ac e7 0e ea 41 f6 0e 89 34 2e 36 f4 62 e2 2c 7b ac d0 e5 e3 97 76 5f c3 1d c9 93 dc c0 a5 3f 7f 6e 0b d3 60 f4 dd 63 1a 0a 95 18 10 c2 54 ac 9e ef aa 0b 27 0f 0a a1 f0 37 e5 46 Data Ascii: PNGIHDRFg3PLTEFtRNS_O ?0tiwIDATm[ Eyi_mdMCS'>$\{0`B6FA4.6b,{v_?n`cT'7F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50235	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	1073	OUT	GET /fa/img/ease-to-use-blue-icon.png HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:31 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/png Content-Length: 558 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-22e" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:31 UTC	558	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2f 00 00 00 2f 08 03 00 00 00 44 f9 63 9e 00 00 00 42 50 4c 54 45 00 00 00 36 83 f7 35 83 f6 35 83 f6 33 80 f2 35 82 f8 35 83 f6 36 83 f7 36 83 f8 36 83 f7 35 82 f8 30 82 f3 35 84 f7 35 82 f5 34 83 f7 3a 84 ff 36 83 f6 35 82 f7 38 80 f7 36 83 f8 37 82 f9 36 83 f7 a0 08 62 f1 00 00 00 15 74 52 4e 53 00 df 5f ef 10 8f 6f 3f cf bf 2f 1f 9f 4f 7f 1f af 9f 20 af 4f 2f 82 8e ce 00 00 01 86 49 44 41 54 48 c7 cd 95 db 9a 83 20 0c 84 39 04 41 51 6b 5d 79 ff 57 5d 4d a0 01 15 dc bd eb 7f 63 9b 0c f3 45 1c 54 ec 40 b7 c8 44 ff f6 22 c2 9d 05 44 c6 20 43 81 11 89 4d 73 89 e5 b1 c8 bc 05 31 67 16 0c ba 6b 19 c1 76 87 0d 15 52 a7 7f 91 34 55 a5 15 89 d5 1c 9a 8f 91 8b 1d a6 df ab db b9 30 24 23 10 67 1c d9 31 dd Data Ascii: PNGIHDR//DcBPLTE65535566650554:658676btRNS_o?/O O/IDATH 9AQk]yW]McET@D"D CMs1gkvR4U0$#g1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50236	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	724	OUT	GET /fa/img/gray_header_logo.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:31 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/png Content-Length: 325 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-145" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:31 UTC	325	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 03 00 00 00 f3 37 75 51 00 00 00 54 50 4c 54 45 c3 c3 c3 c7 c7 c7 00 00 00 c3 c3 c3 bf bf bf c3 c3 c3 c2 c2 c2 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c4 c4 c4 c2 c2 c2 c2 c2 c2 c3 c3 c3 ff ff ff f0 f0 f0 e5 e5 e5 cb cb cb f7 f7 f7 e1 e1 e1 fb fb fb eb eb eb d4 d4 d4 ce ce ce c7 c7 c7 d9 d9 d9 da da da 9e 8f 0a 89 00 00 00 0e 74 52 4e 53 bf 20 00 df 10 ef 9f 7f 5f cf af 9f 8f 3f aa 06 75 3d 00 00 00 92 49 44 41 54 28 cf d5 d2 49 12 c2 30 0c 44 51 21 32 31 75 cb 76 46 b8 ff 3d 31 71 95 93 32 e4 00 fc 95 ec 57 da 49 b4 6a cf 28 bb 74 aa 52 a5 ff b2 46 a5 c1 ef 1e f2 59 f1 36 22 e7 83 43 ec 2a 88 4d a4 cf f2 4a 0f 59 65 26 a7 2c 8e 44 16 0c b4 2c 81 b6 93 9e 7c 02 db b8 c9 12 c8 7e 1d 1c Data Ascii: PNGIHDR7uQTPLTEtRNS _?u=IDAT(I0DQ!21uvF=1q2WIj(tRFY6"C*MJYe&,D,\|~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50237	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	1086	OUT	POST /pixelgif.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 332 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:31 UTC	332	OUT	Data Raw: 7b 22 65 76 74 5f 73 72 63 22 3a 22 77 65 62 22 2c 22 65 76 74 5f 61 63 74 69 6f 6e 22 3a 22 76 69 73 74 79 70 65 22 2c 22 67 70 75 22 3a 22 47 6f 6f 67 6c 65 2c 20 56 75 6c 6b 61 6e 20 31 2e 33 2e 30 20 28 53 77 69 66 74 53 68 61 64 65 72 20 44 65 76 69 63 65 20 28 53 75 62 7a 65 72 6f 29 20 28 30 78 30 30 30 30 43 30 44 45 29 29 2c 20 53 77 69 66 74 53 68 61 64 65 72 20 64 72 69 76 65 72 29 22 2c 22 68 65 69 67 68 74 22 3a 31 32 38 30 2c 22 77 69 64 74 68 22 3a 31 30 32 34 2c 22 62 72 6f 77 73 65 72 22 3a 22 43 48 22 2c 22 62 72 6f 77 73 65 72 76 65 72 22 3a 31 31 37 2c 22 6f 73 22 3a 22 31 30 22 2c 22 63 6f 6f 6b 69 65 73 22 3a 31 2c 22 6d 65 6d 6f 72 79 22 3a 38 2c 22 7a 6f 6f 6d 22 3a 31 30 30 2c 22 76 69 64 65 6f 5f 69 6e 70 75 74 22 3a 30 2c 22 61 Data Ascii: {"evt_src":"web","evt_action":"vistype","gpu":"Google, Vulkan 1.3.0 (SwiftShader Device (Subzero) (0x0000C0DE)), SwiftShader driver)","height":1280,"width":1024,"browser":"CH","browserver":117,"os":"10","cookies":1,"memory":8,"zoom":100,"video_input":0,"a
2023-12-28 16:22:31 UTC	481	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:31 UTC	106	IN	Data Raw: 35 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 5fPNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50239	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	2440	OUT	GET /images/icons/svg_light/social_icons_sprite.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:31 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/svg+xml Content-Length: 4864 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1300" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 14046 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb247fc8cde7d7-DFW
2023-12-28 16:22:31 UTC	1036	IN	Data Raw: 3c 73 76 67 0a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0a 77 69 64 74 68 3d 22 32 30 30 22 0a 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 44 65 66 69 6e 65 20 53 56 47 73 20 2d 2d 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 66 61 63 65 62 6f 6f 6b 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 Data Ascii: <svgxmlns="http://www.w3.org/2000/svg"xmlns:xlink="http://www.w3.org/1999/xlink"width="200"height="24"> ... Define SVGs --> <defs> ... facebook --> <symbol id="facebook" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet
2023-12-28 16:22:31 UTC	1369	IN	Data Raw: 2c 31 39 2e 31 31 20 31 2e 35 34 2c 31 39 2e 30 37 43 33 2e 34 34 2c 32 30 2e 32 39 20 35 2e 37 2c 32 31 20 38 2e 31 32 2c 32 31 43 31 36 2c 32 31 20 32 30 2e 33 33 2c 31 34 2e 34 36 20 32 30 2e 33 33 2c 38 2e 37 39 43 32 30 2e 33 33 2c 38 2e 36 20 32 30 2e 33 33 2c 38 2e 34 32 20 32 30 2e 33 32 2c 38 2e 32 33 43 32 31 2e 31 36 2c 37 2e 36 33 20 32 31 2e 38 38 2c 36 2e 38 37 20 32 32 2e 34 36 2c 36 5a 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 67 6f 6f 67 6c 65 20 70 6c 75 73 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 67 6f 6f 67 6c 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f Data Ascii: ,19.11 1.54,19.07C3.44,20.29 5.7,21 8.12,21C16,21 20.33,14.46 20.33,8.79C20.33,8.6 20.33,8.42 20.32,8.23C21.16,7.63 21.88,6.87 22.46,6Z" /> </symbol> ... google plus --> <symbol id="google" viewBox="0 0 24 24" preserveAspectRatio
2023-12-28 16:22:31 UTC	1369	IN	Data Raw: 33 33 20 31 39 2e 37 35 2c 31 30 2e 34 34 43 31 39 2e 37 35 2c 31 33 2e 37 32 20 31 37 2e 37 31 2c 31 37 2e 32 35 20 31 33 2e 32 35 2c 31 37 2e 32 35 5a 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 74 75 6d 62 6c 72 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 74 75 6d 62 6c 72 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 33 31 31 38 2c 31 39 2e 39 35 32 34 41 35 2e 31 32 36 31 2c 35 2e 31 32 36 31 2c 30 2c 30 2c 31 2c 31 34 2c 32 31 2e 30 37 34 35 68 2d 2e Data Ascii: 33 19.75,10.44C19.75,13.72 17.71,17.25 13.25,17.25Z" /> </symbol> ... tumblr --> <symbol id="tumblr" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M17.3118,19.9524A5.1261,5.1261,0,0,1,14,21.0745h-.
2023-12-28 16:22:31 UTC	1090	IN	Data Raw: 30 61 35 2e 31 33 31 39 2c 35 2e 31 33 31 39 2c 30 2c 30 2c 30 2c 33 2e 31 33 37 37 2d 31 2e 36 30 34 38 2c 35 2e 32 32 34 31 2c 35 2e 32 32 34 31 2c 30 2c 30 2c 30 2c 31 2e 33 34 38 32 2d 32 2e 33 38 31 37 2c 31 32 2e 30 33 37 33 2c 31 32 2e 30 33 37 33 2c 30 2c 30 2c 30 2c 2e 31 34 32 37 2d 32 2e 39 37 32 31 41 32 35 2e 36 38 36 32 2c 32 35 2e 36 38 36 32 2c 30 2c 30 2c 30 2c 32 30 2e 35 33 31 2c 31 30 2e 37 32 34 34 5a 4d 38 2e 31 38 39 34 2c 38 2e 32 38 35 63 2e 32 39 39 32 2d 2e 33 30 32 2e 33 38 31 39 2d 2e 33 31 33 35 2c 32 2e 32 35 34 35 2d 2e 33 31 33 35 2c 31 2e 36 38 31 2c 30 2c 31 2e 37 33 37 35 2e 30 30 33 37 2c 31 2e 39 38 34 35 2e 31 32 38 34 61 2e 38 34 33 31 2e 38 34 33 31 2c 30 2c 30 2c 31 2c 2e 35 31 31 39 2e 38 33 39 31 2e 39 30 33 32 Data Ascii: 0a5.1319,5.1319,0,0,0,3.1377-1.6048,5.2241,5.2241,0,0,0,1.3482-2.3817,12.0373,12.0373,0,0,0,.1427-2.9721A25.6862,25.6862,0,0,0,20.531,10.7244ZM8.1894,8.285c.2992-.302.3819-.3135,2.2545-.3135,1.681,0,1.7375.0037,1.9845.1284a.8431.8431,0,0,1,.5119.8391.9032

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50242	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	1068	OUT	GET /fa/img/shield-blue-icon.png HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:31 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/png Content-Length: 519 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-207" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:31 UTC	519	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2c 00 00 00 36 08 03 00 00 00 8b 17 8b ce 00 00 00 3c 50 4c 54 45 00 00 00 36 82 f7 37 83 fb 35 83 f7 35 83 f7 35 83 f6 36 83 f7 37 82 f8 35 83 f7 34 80 f3 35 82 f8 36 81 f7 36 84 f7 36 83 f8 30 80 ef 36 83 f6 35 81 f7 35 81 f7 35 83 f6 36 83 f7 7f 8d 39 23 00 00 00 13 74 52 4e 53 00 df 1f 7f 9f ef bf 3f 6f 10 8f 5f 5f cf 20 af 4f 2f cf 9b 9e 9e 80 00 00 01 67 49 44 41 54 48 c7 e5 96 db 96 83 20 0c 45 73 41 14 15 6b 87 ff ff d7 91 68 27 ab 86 8b ef 73 1e a8 0b 77 43 4e 13 1b a1 a4 91 79 84 67 1a 7d 3a e4 09 fa da 5c ba e4 7a 78 e0 21 a9 96 26 3b 9d e8 c0 2b e6 4f 6c 25 8b 17 1a 00 88 73 de 1d 5f 9a 2a cd 33 75 7c f9 d1 fa 58 df 45 5f a8 a8 0a e5 34 e3 6b 82 82 48 ee b1 f5 55 54 3c 0f 95 df 91 7b 25 Data Ascii: PNGIHDR,6<PLTE67555675456660655569#tRNS?o__ O/gIDATH EsAkh'swCNyg}:\zx!&;+Ol%s_*3u\|XE_4kHUT<{%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50243	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	2729	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.mediafire.com Connection: keep-alive Content-Length: 8606 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:31 UTC	8606	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 33 34 34 31 32 35 34 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 35 38 38 34 38 33 34 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 63 73 73 2f 6d 66 76 33 5f 31 32 31 39 31 38 2e 70 68 70 3f 76 65 72 3d 73 73 6c 22 2c 22 73 22 3a 36 35 36 2e 31 2c 22 64 22 3a 39 36 31 2e 36 2c 22 69 22 3a 22 6c 69 6e 6b 22 2c 22 70 22 3a 22 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 36 35 36 2e 31 2c 22 64 73 22 3a 30 2c 22 64 65 22 3a 30 2c 22 63 73 22 3a 30 2c Data Ascii: {"memory":{"totalJSHeapSize":23441254,"usedJSHeapSize":15884834,"jsHeapSizeLimit":2172649472},"resources":[{"n":"https://static.mediafire.com/css/mfv3_121918.php?ver=ssl","s":656.1,"d":961.6,"i":"link","p":"","rs":0,"re":0,"fs":656.1,"ds":0,"de":0,"cs":0,
2023-12-28 16:22:31 UTC	374	IN	HTTP/1.1 204 No Content Date: Thu, 28 Dec 2023 16:22:31 GMT Connection: close access-control-allow-origin: https://www.mediafire.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 83cb2480682d6bd8-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50245	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	2729	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.mediafire.com Connection: keep-alive Content-Length: 9032 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:31 UTC	9032	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 33 34 34 31 34 35 35 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 36 30 35 33 31 30 37 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 63 73 73 2f 6d 66 76 33 5f 31 32 31 39 31 38 2e 70 68 70 3f 76 65 72 3d 73 73 6c 22 2c 22 73 22 3a 36 35 36 2e 31 2c 22 64 22 3a 39 36 31 2e 36 2c 22 69 22 3a 22 6c 69 6e 6b 22 2c 22 70 22 3a 22 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 36 35 36 2e 31 2c 22 64 73 22 3a 30 2c 22 64 65 22 3a 30 2c 22 63 73 22 3a 30 2c Data Ascii: {"memory":{"totalJSHeapSize":23441455,"usedJSHeapSize":16053107,"jsHeapSizeLimit":2172649472},"resources":[{"n":"https://static.mediafire.com/css/mfv3_121918.php?ver=ssl","s":656.1,"d":961.6,"i":"link","p":"","rs":0,"re":0,"fs":656.1,"ds":0,"de":0,"cs":0,
2023-12-28 16:22:31 UTC	374	IN	HTTP/1.1 204 No Content Date: Thu, 28 Dec 2023 16:22:31 GMT Connection: close access-control-allow-origin: https://www.mediafire.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 83cb24809e06287f-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50248	162.159.135.22	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	531	OUT	GET /js/device.js HTTP/1.1 Host: device.maxmind.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:32 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:32 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 16148 Connection: close CF-Cache-Status: HIT Age: 6460 Last-Modified: Thu, 28 Dec 2023 14:34:52 GMT Expires: Thu, 28 Dec 2023 20:22:32 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24822b16ea53-DFW
2023-12-28 16:22:32 UTC	996	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 2c 70 3b 77 69 6e 64 6f 77 2e 5f 5f 6d 6d 61 70 69 77 73 3d 77 69 6e 64 6f 77 2e 5f 5f 6d 6d 61 70 69 77 73 7c 7c 7b 7d 3b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2e 5f 5f 6d 6d 61 70 69 77 73 2c 73 3d 5b 22 41 62 61 64 69 20 4d 54 20 43 6f 6e 64 65 6e 73 65 64 20 4c 69 67 68 74 22 2c 22 41 64 6f 62 65 20 46 61 6e 67 73 6f 6e 67 20 53 74 64 22 2c 22 41 64 6f 62 65 20 48 65 62 72 65 77 22 2c 22 41 64 6f 62 65 20 4d 69 6e 67 20 53 74 64 22 2c 22 41 67 65 6e 63 79 20 46 42 22 2c 22 41 72 61 62 22 2c 22 41 72 61 62 69 63 20 54 79 70 65 73 65 74 74 69 6e 67 22 2c 22 41 72 69 61 6c 20 42 6c 61 63 6b 22 2c 22 42 61 74 61 6e 67 22 2c 22 42 61 75 68 61 75 73 20 39 33 22 2c 22 42 65 Data Ascii: (function(){(function(){var m,p;window.__mmapiws=window.__mmapiws\|\|{};var w=window.__mmapiws,s=["Abadi MT Condensed Light","Adobe Fangsong Std","Adobe Hebrew","Adobe Ming Std","Agency FB","Arab","Arabic Typesetting","Arial Black","Batang","Bauhaus 93","Be
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 73 20 47 6f 74 68 69 63 20 4d 54 22 2c 22 4e 69 61 67 61 72 61 20 53 6f 6c 69 64 22 2c 22 4e 79 61 6c 61 22 2c 22 50 61 6c 61 63 65 20 53 63 72 69 70 74 20 4d 54 22 2c 22 50 61 70 79 72 75 73 22 2c 22 50 65 72 70 65 74 75 61 22 2c 22 50 6c 61 79 62 69 6c 6c 22 2c 22 50 4d 69 6e 67 4c 69 55 22 2c 22 52 61 63 68 61 6e 61 22 2c 22 52 6f 63 6b 77 65 6c 6c 22 2c 22 53 61 77 61 73 64 65 65 22 2c 22 53 63 72 69 70 74 20 4d 54 20 42 6f 6c 64 22 2c 22 53 65 67 6f 65 20 50 72 69 6e 74 22 2c 22 53 68 6f 77 63 61 72 64 20 47 6f 74 68 69 63 22 2c 22 53 69 6d 48 65 69 22 2c 22 53 6e 61 70 20 49 54 43 22 2c 22 54 6c 77 67 4d 6f 6e 6f 22 2c 22 54 77 20 43 65 6e 20 4d 54 20 43 6f 6e 64 65 6e 73 65 64 20 45 78 74 72 61 20 42 6f 6c 64 22 2c 22 55 62 75 6e 74 75 22 2c 22 55 Data Ascii: s Gothic MT","Niagara Solid","Nyala","Palace Script MT","Papyrus","Perpetua","Playbill","PMingLiU","Rachana","Rockwell","Sawasdee","Script MT Bold","Segoe Print","Showcard Gothic","SimHei","Snap ITC","TlwgMono","Tw Cen MT Condensed Extra Bold","Ubuntu","U
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 2c 22 48 61 72 6d 6f 6e 79 20 46 69 72 65 66 6f 78 20 50 6c 75 67 69 6e 22 2c 22 48 61 72 6d 6f 6e 79 20 50 6c 75 67 2d 49 6e 22 2c 22 48 65 72 6f 65 73 20 26 20 47 65 6e 65 72 61 6c 73 20 6c 69 76 65 22 2c 22 48 50 44 65 74 65 63 74 22 2c 22 48 74 6d 6c 35 20 6c 6f 63 61 74 69 6f 6e 20 70 72 6f 76 69 64 65 72 22 2c 22 49 45 20 54 61 62 20 70 6c 75 67 69 6e 22 2c 22 69 47 65 74 74 65 72 53 63 72 69 70 74 61 62 6c 65 50 6c 75 67 69 6e 22 2c 22 69 4d 65 73 68 20 70 6c 75 67 69 6e 22 2c 22 4b 61 73 70 65 72 73 6b 79 20 50 61 73 73 77 6f 72 64 20 4d 61 6e 61 67 65 72 22 2c 22 4c 61 73 74 50 61 73 73 22 2c 22 4c 6f 67 4d 65 49 6e 20 50 6c 75 67 69 6e 20 31 2e 30 2e 30 2e 39 33 35 22 2c 22 4c 6f 67 4d 65 49 6e 20 50 6c 75 67 69 6e 20 31 2e 30 2e 30 2e 39 36 31 Data Ascii: ,"Harmony Firefox Plugin","Harmony Plug-In","Heroes & Generals live","HPDetect","Html5 location provider","IE Tab plugin","iGetterScriptablePlugin","iMesh plugin","Kaspersky Password Manager","LastPass","LogMeIn Plugin 1.0.0.935","LogMeIn Plugin 1.0.0.961
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 74 29 7b 76 61 72 20 72 2c 61 2c 6e 2c 63 2c 6f 2c 75 2c 69 2c 66 3b 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 26 33 2c 61 3d 65 2e 6c 65 6e 67 74 68 2d 72 2c 6e 3d 74 2c 6f 3d 33 34 33 32 39 31 38 33 35 33 2c 75 3d 34 36 31 38 34 35 39 30 37 2c 66 3d 30 3b 66 3c 61 3b 29 69 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 66 29 26 32 35 35 7c 28 65 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 66 29 26 32 35 35 29 3c 3c 38 7c 28 65 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 66 29 26 32 35 35 29 3c 3c 31 36 7c 28 65 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 66 29 26 32 35 35 29 3c 3c 32 34 2c 2b 2b 66 2c 69 3d 28 69 26 36 35 35 33 35 29 2a 6f 2b 28 28 28 69 3e 3e 3e 31 36 29 2a 6f 26 36 35 35 33 35 29 3c 3c 31 36 29 Data Ascii: o"];function P(e,t){var r,a,n,c,o,u,i,f;for(r=e.length&3,a=e.length-r,n=t,o=3432918353,u=461845907,f=0;f<a;)i=e.charCodeAt(f)&255\|(e.charCodeAt(++f)&255)<<8\|(e.charCodeAt(++f)&255)<<16\|(e.charCodeAt(++f)&255)<<24,++f,i=(i&65535)o+(((i>>>16)o&65535)<<16)
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 29 7d 7d 76 61 72 20 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 2c 74 3d 65 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 29 7d 63 61 74 63 68 28 72 29 7b 7d 72 65 74 75 72 6e 20 74 3f 28 74 2e 66 69 6c 6c 53 74 79 6c 65 3d 22 72 65 64 22 2c 74 2e 66 69 6c 6c 52 65 63 74 28 33 30 2c 31 30 2c 32 30 30 2c 31 30 30 29 2c 74 2e 73 74 72 6f 6b 65 53 74 79 6c 65 3d 22 23 31 61 33 62 63 31 22 2c 74 2e 6c 69 6e 65 57 69 64 74 68 3d 36 2c 74 2e 6c 69 6e 65 43 61 70 3d 22 72 6f 75 6e 64 22 2c 74 2e 61 72 63 28 35 30 2c 35 30 2c 32 30 2c 30 2c 4d 61 74 68 2e Data Ascii: unction(){n.removeChild(c)}}var F=function(){var e,t;try{e=document.createElement("canvas"),t=e.getContext("2d")}catch(r){}return t?(t.fillStyle="red",t.fillRect(30,10,200,100),t.strokeStyle="#1a3bc1",t.lineWidth=6,t.lineCap="round",t.arc(50,50,20,0,Math.
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 67 74 68 3d 3d 3d 30 7c 7c 65 2e 6c 65 6e 67 74 68 3d 3d 3d 73 2e 6c 65 6e 67 74 68 3f 6e 75 6c 6c 3a 65 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3b 74 72 79 7b 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 2c 74 3d 65 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 29 7d 63 61 74 63 68 28 65 65 29 7b 7d 69 66 28 21 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 72 3d 5b 22 73 61 6e 73 2d 73 65 72 69 66 22 2c 22 73 65 72 69 66 22 2c 22 6d 6f 6e 6f 73 70 61 63 65 22 5d 2c 61 3d 5b 5d 2c 6e 3d 22 37 32 70 78 22 2c 63 3d 22 6d 6d 6d 6d 6d 6d 6d 6d 6d 6d 6c 6c 69 22 2c 6f 3d 30 3b 6f 3c 72 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 2e 66 6f 6e 74 3d 6e 2b 27 20 22 Data Ascii: gth===0\|\|e.length===s.length?null:e},B=function(){var e,t;try{e=document.createElement("canvas"),t=e.getContext("2d")}catch(ee){}if(!t)return null;for(var r=["sans-serif","serif","monospace"],a=[],n="72px",c="mmmmmmmmmmlli",o=0;o<r.length;o++)t.font=n+' "
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 43 74 72 6c 2e 44 65 76 61 6c 56 52 58 43 74 72 6c 2e 31 22 2c 22 4d 61 63 72 6f 6d 65 64 69 61 46 6c 61 73 68 50 61 70 65 72 2e 4d 61 63 72 6f 6d 65 64 69 61 46 6c 61 73 68 50 61 70 65 72 22 2c 22 4d 73 78 6d 6c 32 2e 44 4f 4d 44 6f 63 75 6d 65 6e 74 22 2c 22 4d 73 78 6d 6c 32 2e 58 4d 4c 48 54 54 50 22 2c 22 50 44 46 2e 50 64 66 43 74 72 6c 22 2c 22 51 75 69 63 6b 54 69 6d 65 2e 51 75 69 63 6b 54 69 6d 65 22 2c 22 51 75 69 63 6b 54 69 6d 65 43 68 65 63 6b 4f 62 6a 65 63 74 2e 51 75 69 63 6b 54 69 6d 65 43 68 65 63 6b 2e 31 22 2c 22 52 65 61 6c 50 6c 61 79 65 72 22 2c 22 52 65 61 6c 50 6c 61 79 65 72 2e 52 65 61 6c 50 6c 61 79 65 72 28 74 6d 29 20 41 63 74 69 76 65 58 20 43 6f 6e 74 72 6f 6c 20 28 33 32 2d 62 69 74 29 22 2c 22 52 65 61 6c 56 69 64 65 6f Data Ascii: Ctrl.DevalVRXCtrl.1","MacromediaFlashPaper.MacromediaFlashPaper","Msxml2.DOMDocument","Msxml2.XMLHTTP","PDF.PdfCtrl","QuickTime.QuickTime","QuickTimeCheckObject.QuickTimeCheck.1","RealPlayer","RealPlayer.RealPlayer(tm) ActiveX Control (32-bit)","RealVideo
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 2c 65 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 77 69 6e 64 6f 77 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 64 6f 63 75 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 65 3d 22 28 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 65 6e 61 62 6c 65 64 29 2c 28 2d 6d 6f 7a 2d 74 6f 75 63 68 2d 65 6e 61 62 6c 65 64 29 2c 28 2d 6f 2d 74 6f 75 63 68 2d 65 6e 61 62 6c 65 64 29 2c 28 2d 6d 73 2d 74 6f 75 63 68 2d 65 6e 61 62 6c 65 64 29 22 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 65 29 2e 6d 61 74 63 68 65 73 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 Data Ascii: ,e},W=function(){try{if("ontouchstart"in window\|\|window.DocumentTouch&&document instanceof DocumentTouch)return!0;var e="(-webkit-touch-enabled),(-moz-touch-enabled),(-o-touch-enabled),(-ms-touch-enabled)";return window.matchMedia(e).matches}catch(t){retu
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 7b 20 20 20 67 6c 5f 46 72 61 67 43 6f 6c 6f 72 20 3d 20 76 65 63 34 28 76 61 72 79 69 6e 54 65 78 43 6f 6f 72 64 69 6e 61 74 65 2c 20 30 2c 20 31 29 3b 20 7d 22 2c 6e 3d 65 2e 63 72 65 61 74 65 42 75 66 66 65 72 28 29 3b 65 2e 62 69 6e 64 42 75 66 66 65 72 28 65 2e 41 52 52 41 59 5f 42 55 46 46 45 52 2c 6e 29 3b 76 61 72 20 63 3d 6e 65 77 20 46 6c 6f 61 74 33 32 41 72 72 61 79 28 5b 2d 2e 32 2c 2d 2e 39 2c 30 2c 2e 34 2c 2d 2e 32 36 2c 30 2c 30 2c 2e 37 33 32 31 33 34 34 34 34 2c 30 5d 29 3b 65 2e 62 75 66 66 65 72 44 61 74 61 28 65 2e 41 52 52 41 59 5f 42 55 46 46 45 52 2c 63 2c 65 2e 53 54 41 54 49 43 5f 44 52 41 57 29 2c 6e 2e 69 74 65 6d 53 69 7a 65 3d 33 2c 6e 2e 6e 75 6d 49 74 65 6d 73 3d 33 3b 76 61 72 20 6f 3d 65 2e 63 72 65 61 74 65 50 72 6f 67 Data Ascii: { gl_FragColor = vec4(varyinTexCoordinate, 0, 1); }",n=e.createBuffer();e.bindBuffer(e.ARRAY_BUFFER,n);var c=new Float32Array([-.2,-.9,0,.4,-.26,0,0,.732134444,0]);e.bufferData(e.ARRAY_BUFFER,c,e.STATIC_DRAW),n.itemSize=3,n.numItems=3;var o=e.createProg
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 67 28 29 2b 22 3b 20 64 6f 6d 61 69 6e 3d 22 2b 65 2b 22 3b 20 70 61 74 68 3d 2f 22 7d 63 61 74 63 68 28 6e 29 7b 7d 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 74 72 79 7b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 7d 63 61 74 63 68 28 6e 29 7b 7d 51 28 74 29 7d 2c 76 3b 77 69 6e 64 6f 77 2e 4a 53 4f 4e 26 26 77 69 6e 64 6f 77 2e 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 3f 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 74 6f 4a 53 4f 4e 22 69 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 72 3d 22 74 6f 4a 53 4f 4e 22 69 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 4a 53 4f 4e 2c 6e 3d 4f 62 6a 65 63 74 Data Ascii: g()+"; domain="+e+"; path=/"}catch(n){}if(window.localStorage)try{localStorage.setItem(r,t)}catch(n){}Q(t)},v;window.JSON&&window.JSON.stringify?v=function(e){var t="toJSON"in Array.prototype,r="toJSON"in Object.prototype,a=Array.prototype.toJSON,n=Object

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50246	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	2702	OUT	GET /favicon.ico HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:31 UTC	428	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:31 GMT Content-Type: image/x-icon Content-Length: 10822 Connection: close CF-Ray: 83cb24814c82e5f2-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 98531 Cache-Control: max-age=2592000 ETag: "62deda56-2a46" Expires: Thu, 25 Jan 2024 07:49:35 GMT Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT Vary: Accept-Encoding Server: cloudflare
2023-12-28 16:22:31 UTC	941	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 18 18 00 00 01 00 08 00 c8 06 00 00 ae 04 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 76 0b 00 00 40 40 00 00 01 00 08 00 28 16 00 00 1e 14 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 11 0b 00 00 11 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: hF v@@((
2023-12-28 16:22:31 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 86 2c 4c db 86 2c a3 db 86 2c d2 db 86 2c e9 db 86 2c da db 86 2c a3 db 86 2c 53 db 86 2c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 00 ff ff 00 00 fc 03 00 00 e0 01 00 00 80 01 00 00 80 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 e0 00 00 00 c0 01 00 00 f0 01 00 00 fc 03 00 00 ff ff 00 00 ff ff Data Ascii: ,L,,,,,,S,@
2023-12-28 16:22:31 UTC	1369	IN	Data Raw: 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 18 11 0f 00 00 0f 11 10 04 04 04 04 04 04 0c 0c 0c 0c 0c 0c 0c 0c 14 0f 00 00 00 00 00 00 00 00 21 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 14 0f 00 00 00 00 00 00 00 00 00 00 00 18 0c 0c 0c 0c 0d 0d 0d 0d 0d 1b 11 12 00 00 00 00 00 16 13 00 00 00 00 17 0d 0d 0d 0d 0d 0d 0d 15 10 10 10 18 0f 00 00 1c 1e 05 05 19 00 00 00 00 15 0d 0d 0d 0e 0e 0e 15 0f 00 00 00 00 13 1f 05 05 05 05 05 13 00 00 00 10 0e 0e 0e 0e 0e 0e 0e 19 12 00 12 11 1f 1e 05 05 05 05 Data Ascii: !
2023-12-28 16:22:31 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2023-12-28 16:22:31 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 40 00 00 00 80 00 00 00 01 00 08 00 00 00 00 00 00 10 00 00 11 0b 00 00 11 0b 00 00 00 01 00 00 00 01 00 00 ff ff ff 00 c6 6e 2d 00 ca 73 2d 00 d8 82 2d 00 d5 7f 2d 00 c9 72 2d 00 c8 70 2d 00 da 84 2d 00 db 86 2d 00 cc 74 2d 00 d6 80 2d 00 ce 77 2d 00 d3 7d 2d 00 dc 87 2d 00 c5 6d 2d 00 c7 6f 2d 00 d7 81 2d 00 cf 78 2d 00 d1 7a 2d 00 d0 79 2d 00 c4 6c 2d 00 e8 bd 96 00 dd 9c 62 00 fc f7 f3 00 d3 82 3a 00 f4 df cb 00 d6 8b 47 00 fa ef e5 00 ee Data Ascii: (@n-s---r-p---t--w-}--m-o--x-z-y-l-b:G
2023-12-28 16:22:31 UTC	1369	IN	Data Raw: 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f Data Ascii:
2023-12-28 16:22:31 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1e 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 16 1c 19 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 1a 1f 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 15 15 15 15 23 1b 00 00 00 00 00 00 00 00 00 1e 0b 0b 0b 0b 0b 0b 0b 0b 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 21 11 11 11 11 11 11 11 20 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 22 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 1f 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: #! "
2023-12-28 16:22:31 UTC	1369	IN	Data Raw: 04 04 04 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii:
2023-12-28 16:22:31 UTC	298	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50247	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	723	OUT	GET /fa/img/timer-blue-icon.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:32 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:32 GMT Content-Type: image/png Content-Length: 649 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-289" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:32 UTC	649	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 03 00 00 00 0d 22 29 40 00 00 00 4b 50 4c 54 45 00 00 00 36 83 f7 35 83 f6 36 82 f8 36 83 f7 36 82 f7 36 83 f7 34 81 f5 36 83 f8 35 82 f8 35 83 f7 32 83 f4 37 83 f7 36 82 fa 3a 84 ff 35 83 f7 30 80 ef 35 82 f4 36 83 f7 34 83 f7 40 80 ff 36 83 f7 37 81 f9 34 82 f5 36 83 f7 72 6d 88 b9 00 00 00 18 74 52 4e 53 00 df ef 3f 5f df 7f 1f cf 8f 6f 2f bf 2f 1f bf 10 60 9f 7f 10 af 4f 4f ee 58 2d 49 00 00 01 d5 49 44 41 54 48 c7 dd 96 db 92 83 20 0c 86 23 20 22 20 0a 6e 5b df ff 49 57 b1 43 55 0e c1 de ed fe 17 ed 8c fa 91 10 92 10 f8 5f 52 63 13 24 86 9b b0 58 0e 1a 6f c2 fa 08 8b 9b f0 20 56 7f 37 70 fd d3 03 7c a1 95 6e 61 d3 5f 82 0d 25 2b 4c cd 6d 90 ce 23 59 de 22 23 bf 11 b1 69 16 cb Data Ascii: PNGIHDR<<")@KPLTE6566664655276:50564@6746rmtRNS?_o//`OOX-IIDATH # " n[IWCU_Rc$Xo V7p\|na_%+Lm#Y"#i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50249	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:31 UTC	729	OUT	GET /fa/img/ease-to-use-blue-icon.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:32 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:32 GMT Content-Type: image/png Content-Length: 558 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-22e" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:32 UTC	558	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2f 00 00 00 2f 08 03 00 00 00 44 f9 63 9e 00 00 00 42 50 4c 54 45 00 00 00 36 83 f7 35 83 f6 35 83 f6 33 80 f2 35 82 f8 35 83 f6 36 83 f7 36 83 f8 36 83 f7 35 82 f8 30 82 f3 35 84 f7 35 82 f5 34 83 f7 3a 84 ff 36 83 f6 35 82 f7 38 80 f7 36 83 f8 37 82 f9 36 83 f7 a0 08 62 f1 00 00 00 15 74 52 4e 53 00 df 5f ef 10 8f 6f 3f cf bf 2f 1f 9f 4f 7f 1f af 9f 20 af 4f 2f 82 8e ce 00 00 01 86 49 44 41 54 48 c7 cd 95 db 9a 83 20 0c 84 39 04 41 51 6b 5d 79 ff 57 5d 4d a0 01 15 dc bd eb 7f 63 9b 0c f3 45 1c 54 ec 40 b7 c8 44 ff f6 22 c2 9d 05 44 c6 20 43 81 11 89 4d 73 89 e5 b1 c8 bc 05 31 67 16 0c ba 6b 19 c1 76 87 0d 15 52 a7 7f 91 34 55 a5 15 89 d5 1c 9a 8f 91 8b 1d a6 df ab db b9 30 24 23 10 67 1c d9 31 dd Data Ascii: PNGIHDR//DcBPLTE65535566650554:658676btRNS_o?/O O/IDATH 9AQk]yW]McET@D"D CMs1gkvR4U0$#g1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50250	142.250.138.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:32 UTC	1081	OUT	GET /recaptcha/api2/bframe?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:32 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 28 Dec 2023 16:22:32 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-xupuyGLuur6fvP2Jszs7gw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:32 UTC	361	IN	Data Raw: 31 63 36 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1c66<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2023-12-28 16:22:32 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f Data Ascii: to/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//
2023-12-28 16:22:32 UTC	1252	IN	Data Raw: 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c Data Ascii: oboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2023-12-28 16:22:32 UTC	1252	IN	Data Raw: 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-st
2023-12-28 16:22:32 UTC	1252	IN	Data Raw: 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d Data Ascii: oto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2023-12-28 16:22:32 UTC	1252	IN	Data Raw: 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 Data Ascii: /* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168
2023-12-28 16:22:32 UTC	657	IN	Data Raw: 79 47 4c 75 75 72 36 66 76 50 32 4a 73 7a 73 37 67 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 75 2d 78 63 71 33 50 4f 43 57 46 6c 43 72 33 78 38 5f 49 50 78 67 50 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 78 75 70 75 Data Ascii: yGLuur6fvP2Jszs7gw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js" nonce="xupu
2023-12-28 16:22:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50251	142.250.115.147	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:32 UTC	1500	OUT	GET /pagead/1p-user-list/858128210/?random=1703780547888&cv=11&fst=1703779200000&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&frm=0&tiba=Download%20PcAppStore&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_xhLRCrumQpNfS5D_dMxOFBVivwZJyORVs6t0pqNhQWF_wVKj&random=3400480480&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:22:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50252	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:32 UTC	709	OUT	GET /pixelgif.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:32 UTC	431	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:32 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:32 UTC	106	IN	Data Raw: 35 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 5fPNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50254	142.250.115.147	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:32 UTC	1497	OUT	GET /pagead/1p-user-list/858128210/?random=1703780548033&cv=11&fst=1703779200000&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&frm=0&tiba=Download%20PcAppStore&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_AWSr3n-BZ1stuKC5eD_j0YmbC56nVnRpr8sQgacVp_xN7eYX&random=738566534&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:32 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:22:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50255	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:32 UTC	724	OUT	GET /fa/img/shield-blue-icon.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:32 UTC	354	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:32 GMT Content-Type: image/png Content-Length: 519 Connection: close Last-Modified: Mon, 15 May 2023 11:13:40 GMT ETag: "646213e4-207" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:32 UTC	519	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2c 00 00 00 36 08 03 00 00 00 8b 17 8b ce 00 00 00 3c 50 4c 54 45 00 00 00 36 82 f7 37 83 fb 35 83 f7 35 83 f7 35 83 f6 36 83 f7 37 82 f8 35 83 f7 34 80 f3 35 82 f8 36 81 f7 36 84 f7 36 83 f8 30 80 ef 36 83 f6 35 81 f7 35 81 f7 35 83 f6 36 83 f7 7f 8d 39 23 00 00 00 13 74 52 4e 53 00 df 1f 7f 9f ef bf 3f 6f 10 8f 5f 5f cf 20 af 4f 2f cf 9b 9e 9e 80 00 00 01 67 49 44 41 54 48 c7 e5 96 db 96 83 20 0c 45 73 41 14 15 6b 87 ff ff d7 91 68 27 ab 86 8b ef 73 1e a8 0b 77 43 4e 13 1b a1 a4 91 79 84 67 1a 7d 3a e4 09 fa da 5c ba e4 7a 78 e0 21 a9 96 26 3b 9d e8 c0 2b e6 4f 6c 25 8b 17 1a 00 88 73 de 1d 5f 9a 2a cd 33 75 7c f9 d1 fa 58 df 45 5f a8 a8 0a e5 34 e3 6b 82 82 48 ee b1 f5 55 54 3c 0f 95 df 91 7b 25 Data Ascii: PNGIHDR,6<PLTE67555675456660655569#tRNS?o__ O/gIDATH EsAkh'swCNyg}:\zx!&;+Ol%s_*3u\|XE_4kHUT<{%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50253	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:32 UTC	2464	OUT	GET /favicon.ico HTTP/1.1 Host: www.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0
2023-12-28 16:22:32 UTC	429	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:32 GMT Content-Type: image/x-icon Content-Length: 10822 Connection: close CF-Ray: 83cb2484cad6e9ad-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 203577 Cache-Control: max-age=2592000 ETag: "62deda56-2a46" Expires: Thu, 25 Jan 2024 07:49:35 GMT Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT Vary: Accept-Encoding Server: cloudflare
2023-12-28 16:22:32 UTC	940	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 18 18 00 00 01 00 08 00 c8 06 00 00 ae 04 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 76 0b 00 00 40 40 00 00 01 00 08 00 28 16 00 00 1e 14 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 11 0b 00 00 11 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: hF v@@((
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 86 2c 4c db 86 2c a3 db 86 2c d2 db 86 2c e9 db 86 2c da db 86 2c a3 db 86 2c 53 db 86 2c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 00 ff ff 00 00 fc 03 00 00 e0 01 00 00 80 01 00 00 80 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 e0 00 00 00 c0 01 00 00 f0 01 00 00 fc 03 00 00 ff ff 00 00 ff Data Ascii: ,L,,,,,,S,@
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 07 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 18 11 0f 00 00 0f 11 10 04 04 04 04 04 04 0c 0c 0c 0c 0c 0c 0c 0c 14 0f 00 00 00 00 00 00 00 00 21 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 14 0f 00 00 00 00 00 00 00 00 00 00 00 18 0c 0c 0c 0c 0d 0d 0d 0d 0d 1b 11 12 00 00 00 00 00 16 13 00 00 00 00 17 0d 0d 0d 0d 0d 0d 0d 15 10 10 10 18 0f 00 00 1c 1e 05 05 19 00 00 00 00 15 0d 0d 0d 0e 0e 0e 15 0f 00 00 00 00 13 1f 05 05 05 05 05 13 00 00 00 10 0e 0e 0e 0e 0e 0e 0e 19 12 00 12 11 1f 1e 05 05 05 Data Ascii: !
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 40 00 00 00 80 00 00 00 01 00 08 00 00 00 00 00 00 10 00 00 11 0b 00 00 11 0b 00 00 00 01 00 00 00 01 00 00 ff ff ff 00 c6 6e 2d 00 ca 73 2d 00 d8 82 2d 00 d5 7f 2d 00 c9 72 2d 00 c8 70 2d 00 da 84 2d 00 db 86 2d 00 cc 74 2d 00 d6 80 2d 00 ce 77 2d 00 d3 7d 2d 00 dc 87 2d 00 c5 6d 2d 00 c7 6f 2d 00 d7 81 2d 00 cf 78 2d 00 d1 7a 2d 00 d0 79 2d 00 c4 6c 2d 00 e8 bd 96 00 dd 9c 62 00 fc f7 f3 00 d3 82 3a 00 f4 df cb 00 d6 8b 47 00 fa ef e5 00 Data Ascii: (@n-s---r-p---t--w-}--m-o--x-z-y-l-b:G
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f Data Ascii:
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1e 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 16 1c 19 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 0b 1a 1f 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 15 15 15 15 23 1b 00 00 00 00 00 00 00 00 00 1e 0b 0b 0b 0b 0b 0b 0b 0b 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 21 11 11 11 11 11 11 11 20 00 00 00 00 00 00 00 00 00 11 11 11 11 11 11 11 11 11 11 11 11 11 11 22 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 1f 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: #! "
2023-12-28 16:22:32 UTC	1369	IN	Data Raw: 04 04 04 04 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii:
2023-12-28 16:22:32 UTC	299	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50256	142.250.138.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:32 UTC	1053	OUT	POST /recaptcha/api2/reload?k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 10210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:32 UTC	10210	OUT	Data Raw: 0a 18 75 2d 78 63 71 33 50 4f 43 57 46 6c 43 72 33 78 38 5f 49 50 78 67 50 75 12 a4 0f 30 33 41 46 63 57 65 41 35 56 52 4b 4d 5f 55 44 37 42 33 6c 4f 48 59 59 45 77 47 4e 30 51 41 67 68 41 32 63 68 35 41 6b 42 45 65 77 5f 66 6d 30 52 7a 43 32 63 49 4c 41 53 73 36 74 71 46 32 48 5f 6c 54 53 68 51 4b 49 73 4c 6c 68 57 5f 66 7a 71 38 70 45 70 4b 33 6a 45 6a 65 54 67 45 47 4a 36 31 56 57 64 46 32 52 4b 6c 66 6f 4a 36 73 63 48 72 42 39 71 42 4b 7a 67 67 6e 78 52 75 71 48 32 67 49 52 6c 32 78 39 65 61 4e 4a 50 72 38 47 6f 30 32 42 4a 30 6f 42 39 48 79 34 4a 32 35 56 4d 4f 52 56 5f 78 53 64 61 47 77 44 78 58 67 5f 70 6d 48 78 58 78 64 33 37 41 34 52 37 61 63 59 70 4b 70 4b 78 35 64 7a 61 77 50 5f 69 56 70 73 63 50 74 4f 62 39 43 45 5a 61 46 66 34 79 6d 53 63 42 Data Ascii: u-xcq3POCWFlCr3x8_IPxgPu03AFcWeA5VRKM_UD7B3lOHYYEwGN0QAghA2ch5AkBEew_fm0RzC2cILASs6tqF2H_lTShQKIsLlhW_fzq8pEpK3jEjeTgEGJ61VWdF2RKlfoJ6scHrB9qBKzggnxRuqH2gIRl2x9eaNJPr8Go02BJ0oB9Hy4J25VMORV_xSdaGwDxXg_pmHxXxd37A4R7acYpKpKx5dzawP_iVpscPtOb9CEZaFf4ymScB
2023-12-28 16:22:33 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Thu, 28 Dec 2023 16:22:33 GMT Expires: Thu, 28 Dec 2023 16:22:33 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09APYnBZXPBnEhLgloLxIQvlvVnbYF6g_esAiJVVgMX2e5VMArwNUh90ArkuCPOkbpAwZtN2A360aHN1cdPBB9yzE;Path=/recaptcha;Expires=Tue, 25-Jun-2024 16:22:33 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:33 UTC	556	IN	Data Raw: 32 32 63 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 64 2d 73 59 2d 38 6d 70 64 38 53 6b 59 43 30 45 7a 51 4d 5a 32 68 2d 67 71 56 73 42 77 52 30 38 6a 51 6c 31 50 79 43 6f 72 72 4c 34 7a 4d 5f 47 43 47 72 68 6d 6d 37 6c 6f 43 71 58 31 78 4a 6c 77 71 7a 70 61 34 6b 75 31 4a 59 64 4f 51 4b 62 70 73 6c 34 4c 57 6a 73 73 62 6b 4b 58 70 75 4c 65 6b 75 6f 4f 33 59 73 46 67 43 76 71 64 69 47 73 70 6e 57 69 76 4e 43 6b 4b 38 70 59 73 42 44 6d 63 53 69 42 4e 2d 68 4a 6b 79 32 52 4d 31 45 67 49 6b 6b 71 38 2d 67 46 35 74 7a 68 54 70 73 66 4a 41 45 48 61 5f 58 77 6c 38 6a 79 72 31 6b 30 61 4d 69 41 44 75 6f 49 39 71 63 49 44 44 36 42 4c 73 78 44 66 49 6f 75 33 74 42 58 39 6f 79 49 5f 78 49 65 67 58 74 45 41 46 47 47 56 37 56 43 74 Data Ascii: 22c)]}'["rresp","03AFcWeA6d-sY-8mpd8SkYC0EzQMZ2h-gqVsBwR08jQl1PyCorrL4zM_GCGrhmm7loCqX1xJlwqzpa4ku1JYdOQKbpsl4LWjssbkKXpuLekuoO3YsFgCvqdiGspnWivNCkK8pYsBDmcSiBN-hJky2RM1EgIkkq8-gF5tzhTpsfJAEHa_Xwl8jyr1k0aMiADuoI9qcIDD6BLsxDfIou3tBX9oyI_xIegXtEAFGGV7VCt
2023-12-28 16:22:33 UTC	7	IN	Data Raw: 56 4e 6a 69 78 0d 0a Data Ascii: VNjix
2023-12-28 16:22:33 UTC	1252	IN	Data Raw: 61 32 63 0d 0a 53 32 6a 6c 62 30 6f 4e 69 56 58 4a 74 6a 78 57 39 72 57 36 62 37 52 61 54 50 79 31 76 56 38 63 74 6c 52 34 47 67 2d 48 38 74 72 44 49 48 6a 55 4e 71 41 68 6d 34 75 76 4a 71 74 55 6b 4a 41 54 66 37 4f 47 57 75 38 4f 46 32 50 62 52 6f 7a 50 7a 58 54 65 6d 53 47 35 77 66 74 41 64 62 4b 6d 30 44 47 4d 51 62 49 52 6b 57 7a 51 43 47 59 34 6e 39 75 69 4a 6c 54 74 65 49 43 43 43 51 33 46 33 4a 56 6d 69 37 6a 41 49 6c 74 7a 65 65 70 7a 6d 52 4d 7a 57 77 62 62 76 6d 5a 57 65 71 5a 64 77 5a 58 77 4e 6f 4f 6e 4a 31 75 47 32 2d 6b 47 75 62 36 36 38 6c 6c 36 74 48 77 34 77 48 45 32 4c 4d 38 37 53 76 72 78 51 6b 62 6f 64 63 6c 76 30 30 36 4c 59 73 56 64 75 70 52 35 33 42 32 39 4a 53 45 43 6f 43 50 5a 75 30 4a 75 75 41 30 4e 35 45 78 37 58 75 79 54 75 57 Data Ascii: a2cS2jlb0oNiVXJtjxW9rW6b7RaTPy1vV8ctlR4Gg-H8trDIHjUNqAhm4uvJqtUkJATf7OGWu8OF2PbRozPzXTemSG5wftAdbKm0DGMQbIRkWzQCGY4n9uiJlTteICCCQ3F3JVmi7jAIltzeepzmRMzWwbbvmZWeqZdwZXwNoOnJ1uG2-kGub668ll6tHw4wHE2LM87SvrxQkbodclv006LYsVdupR53B29JSECoCPZu0JuuA0N5Ex7XuyTuW
2023-12-28 16:22:33 UTC	1252	IN	Data Raw: 52 67 74 73 7a 49 64 53 52 68 5f 4f 35 48 66 4c 53 6d 63 41 52 4f 59 30 6c 39 4a 78 72 41 54 47 49 41 37 72 31 63 6e 31 79 68 45 7a 7a 69 46 6a 61 79 30 61 4c 61 79 6e 72 48 44 77 34 48 5a 4b 61 6f 4f 7a 63 7a 50 35 73 4f 62 50 42 76 6f 4d 35 54 66 35 68 78 71 52 47 74 35 57 69 4b 55 74 33 72 42 2d 32 38 64 78 72 75 48 33 45 63 4d 59 35 52 37 70 34 74 41 78 69 51 51 67 48 32 73 62 37 42 32 6c 32 74 78 38 59 74 56 35 2d 52 44 6e 6d 37 61 4b 51 4c 70 41 58 78 33 4d 51 72 38 43 71 63 6b 4c 6c 4a 7a 35 5a 76 6f 74 33 35 56 55 66 44 4a 76 38 46 73 72 49 4a 31 41 6c 55 6b 4a 55 67 65 51 56 42 55 5a 73 6c 76 4c 46 68 72 32 73 78 4e 6c 47 79 6b 38 4f 34 30 41 4f 49 66 4c 4b 51 33 6e 70 4c 49 50 50 69 67 50 39 74 46 47 5f 6c 78 38 43 32 58 75 34 4d 59 73 48 55 41 Data Ascii: RgtszIdSRh_O5HfLSmcAROY0l9JxrATGIA7r1cn1yhEzziFjay0aLaynrHDw4HZKaoOzczP5sObPBvoM5Tf5hxqRGt5WiKUt3rB-28dxruH3EcMY5R7p4tAxiQQgH2sb7B2l2tx8YtV5-RDnm7aKQLpAXx3MQr8CqckLlJz5Zvot35VUfDJv8FsrIJ1AlUkJUgeQVBUZslvLFhr2sxNlGyk8O40AOIfLKQ3npLIPPigP9tFG_lx8C2Xu4MYsHUA
2023-12-28 16:22:33 UTC	107	IN	Data Raw: 69 53 34 6b 70 34 51 47 59 69 35 58 75 45 7a 6f 6d 6a 61 64 32 72 35 33 47 42 6a 64 63 78 6e 36 63 31 6a 34 45 32 73 66 46 4e 70 6b 6f 37 30 67 4c 57 31 45 4e 79 71 71 39 56 76 38 33 54 71 65 38 4d 49 42 43 57 4c 58 68 49 72 64 66 62 4d 53 6d 49 56 44 77 66 42 70 59 55 66 78 37 4d 72 52 76 78 38 43 54 54 72 76 53 0d 0a Data Ascii: iS4kp4QGYi5XuEzomjad2r53GBjdcxn6c1j4E2sfFNpko70gLW1ENyqq9Vv83Tqe8MIBCWLXhIrdfbMSmIVDwfBpYUfx7MrRvx8CTTrvS
2023-12-28 16:22:33 UTC	1252	IN	Data Raw: 34 32 30 65 0d 0a 72 59 43 52 32 56 30 61 4f 33 76 78 48 37 6c 5a 37 49 67 4f 34 65 4c 79 59 53 70 34 6f 31 42 50 32 73 55 62 72 6e 54 6f 48 4f 4c 61 76 66 37 5f 77 6b 6d 73 5a 67 33 35 44 75 33 70 33 59 74 46 76 53 67 37 38 4c 72 67 76 75 79 4a 42 41 39 71 6b 43 50 69 31 35 47 57 4d 4d 34 4a 6b 61 39 4d 32 30 76 58 68 51 64 5a 6e 4a 58 75 5f 75 72 53 6d 65 68 70 32 57 52 5a 36 36 69 50 53 6f 4d 50 6e 31 43 56 78 34 35 4b 38 39 46 57 33 63 55 70 52 31 61 6b 48 47 4f 67 75 47 4f 2d 63 2d 64 50 61 6a 68 67 43 5f 45 47 30 58 79 41 6e 63 4c 32 57 51 55 59 38 69 35 2d 72 53 6b 68 37 68 74 66 73 49 66 49 64 37 38 2d 6c 6e 45 77 36 78 38 2d 36 6e 7a 34 34 79 6d 34 77 65 64 56 50 4a 38 51 33 47 30 52 59 32 57 52 30 54 33 6a 58 74 6c 6f 38 47 59 41 59 52 78 6d 55 Data Ascii: 420erYCR2V0aO3vxH7lZ7IgO4eLyYSp4o1BP2sUbrnToHOLavf7_wkmsZg35Du3p3YtFvSg78LrgvuyJBA9qkCPi15GWMM4Jka9M20vXhQdZnJXu_urSmehp2WRZ66iPSoMPn1CVx45K89FW3cUpR1akHGOguGO-c-dPajhgC_EG0XyAncL2WQUY8i5-rSkh7htfsIfId78-lnEw6x8-6nz44ym4wedVPJ8Q3G0RY2WR0T3jXtlo8GYAYRxmU
2023-12-28 16:22:33 UTC	1252	IN	Data Raw: 71 63 79 39 69 5a 79 39 54 53 46 56 72 52 57 6c 77 61 46 46 31 57 6e 46 59 65 55 78 36 52 45 35 42 4d 55 78 6a 54 32 70 4a 57 54 56 51 4f 54 4e 76 55 32 4a 4a 4d 45 39 4c 54 55 74 73 64 46 6c 5a 4c 6d 70 7a 22 2c 22 22 2c 22 63 31 6c 35 54 33 4a 35 61 6d 78 6b 63 6b 64 6d 64 58 56 79 63 56 4a 6d 64 55 39 6f 4e 32 31 46 64 6a 52 74 55 7a 6c 32 63 6d 64 71 65 47 31 46 53 43 74 46 4f 55 68 54 55 33 52 70 62 6b 74 4f 57 44 46 6b 54 48 70 78 63 6d 78 6d 52 53 74 50 65 44 4a 36 4b 31 4e 58 4f 57 52 31 5a 6d 78 6c 53 45 52 36 64 31 52 4d 56 48 4e 72 61 47 74 78 65 47 77 33 4e 32 35 34 4f 46 41 72 51 56 70 6b 4c 7a 6c 79 52 47 46 53 53 58 6c 69 62 56 4a 68 52 57 52 43 64 7a 4e 4b 59 55 70 6f 53 56 4e 49 51 7a 5a 51 64 57 63 30 4d 6e 68 78 64 7a 68 32 57 45 4a 70 Data Ascii: qcy9iZy9TSFVrRWlwaFF1WnFYeUx6RE5BMUxjT2pJWTVQOTNvU2JJME9LTUtsdFlZLmpz","","c1l5T3J5amxkckdmdXVycVJmdU9oN21FdjRtUzl2cmdqeG1FSCtFOUhTU3RpbktOWDFkTHpxcmxmRStPeDJ6K1NXOWR1ZmxlSER6d1RMVHNraGtxeGw3N254OFArQVpkLzlyRGFSSXlibVJhRWRCdzNKYUpoSVNIQzZQdWc0Mnhxdzh2WEJp
2023-12-28 16:22:33 UTC	1252	IN	Data Raw: 69 38 31 65 45 78 30 64 6a 4e 46 63 47 35 6c 51 6d 4a 7a 4e 45 31 31 53 6d 31 43 53 6a 56 56 52 30 64 43 65 47 56 46 52 47 59 76 59 6b 5a 4a 61 58 4a 69 64 6b 5a 69 57 45 78 45 59 55 70 6d 51 58 64 6e 5a 6b 77 76 57 45 39 61 4f 47 35 53 4d 55 4a 4b 54 32 46 47 53 6b 6c 55 5a 57 4a 4a 51 69 39 76 55 79 74 68 57 47 64 4a 4c 30 68 6f 65 47 68 58 63 58 5a 4a 4e 46 5a 76 52 56 49 30 5a 30 39 75 53 6e 6b 32 52 46 4e 61 61 6e 42 6c 4b 32 51 34 64 45 45 79 57 6d 64 43 54 57 39 59 4d 30 6c 7a 62 55 4a 36 62 30 5a 58 62 6d 52 59 55 46 46 35 5a 46 64 68 64 48 52 53 51 58 70 49 56 45 4a 4a 61 6a 56 33 51 30 39 44 56 55 39 6d 54 6e 46 4a 59 56 64 6f 61 47 70 35 4d 46 4a 79 4d 31 4e 5a 55 31 68 42 52 6b 39 75 5a 48 5a 52 62 58 56 69 55 56 64 32 56 6b 4e 79 61 55 67 35 Data Ascii: i81eEx0djNFcG5lQmJzNE11Sm1CSjVVR0dCeGVFRGYvYkZJaXJidkZiWExEYUpmQXdnZkwvWE9aOG5SMUJKT2FGSklUZWJJQi9vUythWGdJL0hoeGhXcXZJNFZvRVI0Z09uSnk2RFNaanBlK2Q4dEEyWmdCTW9YM0lzbUJ6b0ZXbmRYUFF5ZFdhdHRSQXpIVEJJajV3Q09DVU9mTnFJYVdoaGp5MFJyM1NZU1hBRk9uZHZRbXViUVd2VkNyaUg5
2023-12-28 16:22:33 UTC	1252	IN	Data Raw: 32 5a 47 53 48 45 34 55 6e 68 6d 62 6b 39 6e 51 6a 6c 59 63 6c 46 57 55 57 68 4b 53 6c 52 55 53 6a 41 34 56 6a 4a 34 62 47 64 79 54 33 6c 33 54 7a 51 34 54 30 4a 36 54 55 56 77 53 55 5a 76 55 6a 55 33 64 33 52 57 56 6d 46 68 65 6b 4e 36 57 6c 4e 43 4d 6c 42 36 53 6b 56 4b 4e 44 64 73 52 79 39 50 64 47 78 32 55 30 68 45 54 46 63 79 54 30 31 5a 54 46 5a 52 4d 6b 6f 33 63 57 6f 34 4d 55 31 4a 52 45 6c 44 64 58 52 55 62 45 35 58 64 32 31 32 53 6b 64 79 53 56 45 78 4e 6c 56 78 4d 58 6f 33 53 43 74 56 4d 56 51 31 57 54 6c 47 52 57 68 49 4d 58 70 56 4b 79 74 78 56 6e 68 49 62 48 6c 35 53 48 46 52 4f 48 70 75 52 6b 31 48 62 58 64 68 61 6a 6c 72 53 6d 52 4f 4d 56 52 33 53 31 6c 6c 4f 44 6b 32 61 31 64 70 64 33 64 78 56 44 4a 55 59 30 4e 79 52 54 4d 7a 59 58 49 77 Data Ascii: 2ZGSHE4Unhmbk9nQjlYclFWUWhKSlRUSjA4VjJ4bGdyT3l3TzQ4T0J6TUVwSUZvUjU3d3RWVmFhekN6WlNCMlB6SkVKNDdsRy9PdGx2U0hETFcyT01ZTFZRMko3cWo4MU1JRElDdXRUbE5Xd212SkdySVExNlVxMXo3SCtVMVQ1WTlGRWhIMXpVKytxVnhIbHl5SHFROHpuRk1HbXdhajlrSmROMVR3S1llODk2a1dpd3dxVDJUY0NyRTMzYXIw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50258	142.251.116.99	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:32 UTC	1269	OUT	GET /pagead/1p-user-list/858128210/?random=1703780547888&cv=11&fst=1703779200000&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&frm=0&tiba=Download%20PcAppStore&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_xhLRCrumQpNfS5D_dMxOFBVivwZJyORVs6t0pqNhQWF_wVKj&random=3400480480&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:33 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:22:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50259	142.251.116.99	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:32 UTC	1266	OUT	GET /pagead/1p-user-list/858128210/?random=1703780548033&cv=11&fst=1703779200000&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9103256652&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&ref=https%3A%2F%2Fpcapp.store%2F%3Fap%3Dadw%26as%3Dus_software%26dm%5Bads%5D%3D2green_start_728x90%26gclid%3DEAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE&frm=0&tiba=Download%20PcAppStore&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_AWSr3n-BZ1stuKC5eD_j0YmbC56nVnRpr8sQgacVp_xN7eYX&random=738566534&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:33 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:22:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50257	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:32 UTC	1068	OUT	GET /lp/appstore/img/favicon.ico HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?ap=adw&as=us_software&dm[ads]=2green_start_728x90&gclid=EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:33 UTC	359	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:33 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close Last-Modified: Mon, 19 Dec 2022 11:26:57 GMT ETag: "63a04a81-10be" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:33 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 2c 68 ff 40 2c 68 ff c0 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff c0 2c 68 ff 40 ff ff ff 00 ff ff ff 00 ff ff ff 00 2c 68 ff 60 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c Data Ascii: ( @ ,h@,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h@,h`,h,h,h,h,h,h,h,h,h,h,h,h,h,h,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50261	104.18.42.177	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:33 UTC	623	OUT	POST /ant_squire HTTP/1.1 Host: d-ipv6.mmapiws.com Connection: keep-alive Content-Length: 6646 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:33 UTC	6646	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 32 35 36 39 35 22 2c 22 63 61 6e 76 61 73 22 3a 7b 22 32 64 48 61 73 68 22 3a 33 32 32 36 36 32 32 38 39 37 2c 22 77 65 62 67 6c 22 3a 7b 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 5b 22 41 4e 47 4c 45 5f 69 6e 73 74 61 6e 63 65 64 5f 61 72 72 61 79 73 22 2c 22 45 58 54 5f 62 6c 65 6e 64 5f 6d 69 6e 6d 61 78 22 2c 22 45 58 54 5f 63 6f 6c 6f 72 5f 62 75 66 66 65 72 5f 68 61 6c 66 5f 66 6c 6f 61 74 22 2c 22 45 58 54 5f 66 6c 6f 61 74 5f 62 6c 65 6e 64 22 2c 22 45 58 54 5f 66 72 61 67 5f 64 65 70 74 68 22 2c 22 45 58 54 5f 73 68 61 64 65 72 5f 74 65 78 74 75 72 65 5f 6c 6f 64 22 2c 22 45 58 54 5f 74 65 78 74 75 72 65 5f 63 6f 6d 70 72 65 73 73 69 6f 6e 5f 62 70 74 63 22 2c 22 45 58 54 5f 74 65 78 74 75 72 65 5f 63 6f 6d Data Ascii: {"accountId":"25695","canvas":{"2dHash":3226622897,"webgl":{"extensions":["ANGLE_instanced_arrays","EXT_blend_minmax","EXT_color_buffer_half_float","EXT_float_blend","EXT_frag_depth","EXT_shader_texture_lod","EXT_texture_compression_bptc","EXT_texture_com
2023-12-28 16:22:33 UTC	317	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:33 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 91 Connection: close access-control-allow-origin: * CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 83cb2489b94c2fd8-DFW
2023-12-28 16:22:33 UTC	91	IN	Data Raw: 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 3b 30 31 38 63 62 31 33 63 2d 31 32 61 37 2d 37 64 61 30 2d 39 38 39 66 2d 33 66 61 34 63 30 34 32 66 65 63 32 3a 62 31 61 34 65 31 30 61 62 61 62 62 31 33 62 34 62 65 36 38 30 39 31 37 38 64 32 66 63 30 36 30 36 31 30 64 34 37 38 31 Data Ascii: mediafire.com;018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50262	142.251.116.99	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:33 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LeWC3MUAAAAACO6R6WOryA0gVoBNN-B7849fmpm HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZXPBnEhLgloLxIQvlvVnbYF6g_esAiJVVgMX2e5VMArwNUh90ArkuCPOkbpAwZtN2A360aHN1cdPBB9yzE; NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:33 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Thu, 28 Dec 2023 16:22:33 GMT Expires: Thu, 28 Dec 2023 16:22:33 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:33 UTC	217	IN	Data Raw: 64 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: d3<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2023-12-28 16:22:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50263	167.99.235.203	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:33 UTC	724	OUT	GET /lp/appstore/img/favicon.ico HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1703780544699264; default_lp=lpd_appstore_r7; ml_model=AlpAll5; ml_prediction_type=max; ml_lp_prediction_us_software=lp36_farss_dl_last_mini_36; _gcl_aw=GCL.1703780548.EAIaIQobChMI7tusisWygwMVetvjBx3FogLvEAEYASAAEgI3mvD_BwE; _gcl_au=1.1.1615816129.1703780548; _ga_VFQWFX3X1C=GS1.1.1703780548.1.0.1703780548.60.0.0; _ga=GA1.1.1655450335.1703780548
2023-12-28 16:22:33 UTC	359	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:33 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close Last-Modified: Mon, 19 Dec 2022 11:26:57 GMT ETag: "63a04a81-10be" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:22:33 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 2c 68 ff 40 2c 68 ff c0 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff c0 2c 68 ff 40 ff ff ff 00 ff ff ff 00 ff ff ff 00 2c 68 ff 60 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c 68 ff ff 2c Data Ascii: ( @ ,h@,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h@,h`,h,h,h,h,h,h,h,h,h,h,h,h,h,h,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50264	104.18.42.177	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:33 UTC	352	OUT	GET /ant_squire HTTP/1.1 Host: d-ipv6.mmapiws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:34 UTC	259	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 28 Dec 2023 16:22:34 GMT Content-Length: 0 Connection: close CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 83cb248efc074784-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50265	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:34 UTC	2819	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.mediafire.com Connection: keep-alive Content-Length: 595 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
2023-12-28 16:22:34 UTC	595	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 33 2e 31 30 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 33 2e 31 30 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 33 32 66 66 66 65 65 39 2d 65 62 35 34 2d 34 33 61 32 2d 61 61 37 39 2d 66 38 39 36 32 31 61 65 32 61 31 31 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 30 33 37 38 30 35 34 34 33 31 38 2e 31 2c 22 73 69 74 65 54 6f 6b 65 6e 22 3a 22 38 65 34 66 39 34 38 34 64 38 62 38 34 30 62 32 38 65 34 65 30 63 63 39 32 62 39 30 Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2023.10.0","fl":"2023.10.0"},"pageloadId":"32fffee9-eb54-43a2-aa79-f89621ae2a11","location":"https://www.mediafire.com/","landingPath":"/","startTime":1703780544318.1,"siteToken":"8e4f9484d8b840b28e4e0cc92b90
2023-12-28 16:22:34 UTC	374	IN	HTTP/1.1 204 No Content Date: Thu, 28 Dec 2023 16:22:34 GMT Connection: close access-control-allow-origin: https://www.mediafire.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 83cb2491a9c8e932-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50266	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:35 UTC	2850	OUT	GET /upgrade HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
2023-12-28 16:22:35 UTC	296	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 28 Dec 2023 16:22:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: http://www.mediafire.com/upgrade/ CF-Ray: 83cb249749e04778-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Server: cloudflare
2023-12-28 16:22:35 UTC	177	IN	Data Raw: 61 62 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: ab<html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
2023-12-28 16:22:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50267	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:35 UTC	2851	OUT	GET /upgrade/ HTTP/1.1 Host: www.mediafire.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
2023-12-28 16:22:35 UTC	519	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb249928f4aa46-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0 Expires: 0 Strict-Transport-Security: max-age=0 Vary: Accept-Encoding Content-Security-Policy: frame-ancestors *.mediafire.com Pragma: no-cache X-Frame-Options: SAMEORIGIN Server: cloudflare
2023-12-28 16:22:35 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 73 68 61 72 69 6e 67 20 61 6e 64 20 73 74 6f 72 61 67 65 20 6d 61 64 65 20 73 69 6d 70 6c 65 3c 2f 74 69 74 Data Ascii: 7ff2 <!DOCTYPE html> <html lang="en-US" xmlns:fb="http://www.facebook.com/2008/fbml" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /><title>File sharing and storage made simple</tit
2023-12-28 16:22:35 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 73 2f 6d 66 5f 6c 6f 67 6f 32 35 30 78 32 35 30 2e 70 6e 67 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 74 77 69 74 74 65 72 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 73 2f 6d 66 5f 6c 6f 67 6f 32 35 30 78 32 35 30 2e 70 6e 67 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 65 64 69 61 46 69 72 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f Data Ascii: content="https://www.mediafire.com/images/logos/mf_logo250x250.png" /><meta property="twitter:image" content="https://www.mediafire.com/images/logos/mf_logo250x250.png" /><meta property="og:title" content="MediaFire" /><meta property="twitter:title" co
2023-12-28 16:22:35 UTC	1369	IN	Data Raw: 3d 32 30 32 33 2d 31 32 2d 32 38 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 38 30 30 2c 37 30 30 2c 34 30 30 2c 33 30 30 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 2f 3e 20 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 38 5d 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 63 73 73 2f Data Ascii: =2023-12-28" rel="stylesheet" type="text/css" /> <link href="https://fonts.googleapis.com/css?family=Open+Sans:800,700,400,300" rel="stylesheet" type="text/css" /> ...[if lte IE 8]> <link rel="stylesheet" type="text/css" href="//static.mediafire.com/css/
2023-12-28 16:22:35 UTC	1369	IN	Data Raw: 61 73 63 72 69 70 74 22 3e 76 61 72 20 4a 53 5f 4c 6f 61 64 54 69 6d 65 3d 20 31 32 31 39 31 38 3b 76 61 72 20 73 44 65 66 61 75 6c 74 53 68 61 72 65 4c 69 6e 6b 50 72 6f 74 6f 63 6f 6c 3d 27 68 74 74 70 73 27 3b 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 79 28 29 3b 7d 3b 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 38 32 39 35 34 31 2d 31 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 Data Ascii: ascript">var JS_LoadTime= 121918;var sDefaultShareLinkProtocol='https';window.onload=function(){Cy();}; </script><script async src="https://www.googletagmanager.com/gtag/js?id=UA-829541-1"></script><script> try { window.dataLayer = w
2023-12-28 16:22:35 UTC	1369	IN	Data Raw: 72 74 22 2c 22 70 6f 73 74 49 6e 73 65 72 74 22 2c 22 72 65 6d 6f 76 65 22 5d 0a 20 20 20 20 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 73 28 6f 2c 61 5b 63 5d 29 7d 6e 2e 49 64 65 6e 74 69 66 79 3d 6f 3b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 71 3d 5b 5d 0a 20 20 20 20 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 0a 20 20 20 20 3b 76 61 72 20 6c 3d 5b 22 73 65 74 50 72 6f 64 75 63 74 49 64 22 2c 22 73 65 74 51 75 61 6e 74 69 74 79 22 2c 22 73 65 74 50 72 69 63 65 22 2c 22 73 65 74 52 65 76 65 6e 75 65 54 79 70 65 22 2c 22 73 65 74 45 76 65 6e 74 50 72 6f 70 65 72 74 69 65 73 22 5d 0a 20 20 20 20 3b 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 6c 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 7b 73 28 Data Ascii: rt","postInsert","remove"] ;for(var c=0;c<a.length;c++){s(o,a[c])}n.Identify=o;var u=function(){this._q=[] ;return this} ;var l=["setProductId","setQuantity","setPrice","setRevenueType","setEventProperties"] ;for(var p=0;p<l.length;p++){s(
2023-12-28 16:22:35 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 3d 27 64 61 74 61 4c 61 79 65 72 27 3f 27 26 6c 3d 27 2b 6c 3a 27 27 3b 6a 2e 61 73 79 6e 63 3d 74 72 75 65 3b 6a 2e 73 72 63 3d 0a 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 6d 2e 6a 73 3f 69 64 3d 27 2b 69 2b 64 6c 3b 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6a 2c 66 29 3b 0a 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 64 61 74 61 4c 61 79 65 72 27 2c 27 47 54 4d 2d 35 33 4c 50 34 54 27 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 74 79 6c 65 3e 2e 61 73 79 6e 63 2d 68 69 64 65 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 20 3c 2f 73 74 Data Ascii: lement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);})(window,document,'script','dataLayer','GTM-53LP4T');</script><style>.async-hide { opacity: 0 !important} </st
2023-12-28 16:22:35 UTC	1369	IN	Data Raw: 7b 76 61 72 20 6c 6f 61 64 44 65 76 69 63 65 4a 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 6c 65 6d 65 6e 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 65 6c 65 6d 65 6e 74 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 64 65 76 69 63 65 2e 6d 61 78 6d 69 6e 64 2e 63 6f 6d 2f 6a 73 2f 64 65 76 69 63 65 2e 6a 73 27 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 6c 65 6d 65 6e 74 29 3b 7d 3b 69 66 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 6c 6f 61 64 44 65 76 69 63 65 4a 73 2c 66 61 6c 73 65 29 3b 7d 65 6c 73 65 20 69 66 28 77 69 Data Ascii: {var loadDeviceJs=function(){var element=document.createElement('script');element.src='https://device.maxmind.com/js/device.js';document.body.appendChild(element);};if(window.addEventListener){window.addEventListener('load',loadDeviceJs,false);}else if(wi
2023-12-28 16:22:35 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 69 64 3d 22 6d 6f 64 61 6c 5f 77 69 6e 64 6f 77 5f 63 6c 6f 73 65 72 22 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 2d 63 6c 6f 73 65 22 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 43 6c 6f 73 65 20 50 6f 70 75 70 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 4d 73 67 57 72 61 70 70 65 72 22 20 73 74 79 6c 65 3e 20 3c 69 66 72 61 6d 65 20 6e 61 6d 65 3d 22 6d 6f 64 61 6c 5f 6d 73 67 5f 69 66 72 61 6d 65 22 20 69 64 3d 22 6d 6f 64 61 6c 5f 6d 73 67 5f 69 66 72 61 6d 65 22 20 73 72 63 3d 22 2f 62 6c 61 6e 6b 2e 68 74 6d 6c 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 3d 22 74 Data Ascii: return false;" id="modal_window_closer" class="popup-close"><span style="display:none;">Close Popup</span></a> <div class="modalMsgWrapper" style> <iframe name="modal_msg_iframe" id="modal_msg_iframe" src="/blank.html" frameborder="0" allowTransparency="t
2023-12-28 16:22:35 UTC	1369	IN	Data Raw: 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 53 63 72 6f 6c 6c 20 75 70 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 20 3c 61 20 63 6c 61 73 73 3d 22 6d 73 67 73 63 72 6f 6c 6c 5f 64 6e 22 20 68 72 65 66 3d 22 23 22 20 6f 6e 63 6c 69 63 6b 3d 22 50 65 28 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 53 63 72 6f 6c 6c 20 64 6f 77 6e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 20 3c 70 20 69 64 3d 22 6e 6f 74 69 66 79 5f 6d 73 67 6e 75 6d 62 65 72 22 20 63 6c 61 73 73 3d 22 6d 73 67 6e 75 6d 62 65 72 22 3e 3c 2f 70 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 70 67 72 61 64 65 5f 79 6f 75 72 5f 62 72 6f 77 73 65 72 22 3e 20 3c 64 Data Ascii: style="display:none;">Scroll up</span></a> <a class="msgscroll_dn" href="#" onclick="Pe();return false;"><span style="display:none;">Scroll down</span></a> <p id="notify_msgnumber" class="msgnumber"></p> </div> </div> <div class="upgrade_your_browser"> <d
2023-12-28 16:22:35 UTC	1369	IN	Data Raw: 6d 61 78 2d 68 65 69 67 68 74 3a 32 35 70 78 22 20 69 64 3d 22 6d 66 5f 6c 6f 67 6f 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 5f 72 65 76 65 72 73 65 64 22 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 73 2f 68 65 61 64 65 72 2f 6d 66 5f 6c 6f 67 6f 5f 75 31 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 5f 72 65 76 65 72 73 65 64 2e 73 76 67 22 20 2f 3e 20 3c 69 6d 67 20 61 6c 74 3d 22 4d 65 64 69 61 46 69 72 65 22 20 77 69 64 74 68 3d 22 31 38 30 22 20 73 74 79 6c 65 3d 22 6d 61 78 2d 68 65 69 67 68 74 3a 32 35 70 78 22 20 69 64 3d 22 6d 66 5f 6c 6f 67 6f 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 22 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 Data Ascii: max-height:25px" id="mf_logo_full_color_reversed" src="//static.mediafire.com/images/backgrounds/header/mf_logo_u1_full_color_reversed.svg" /> <img alt="MediaFire" width="180" style="max-height:25px" id="mf_logo_full_color" src="//static.mediafire.com/ima

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50270	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	2742	OUT	GET /images/basic-plan.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
2023-12-28 16:22:36 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:36 GMT Content-Type: image/svg+xml Content-Length: 4950 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1356" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11292 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb249b7c35e905-DFW
2023-12-28 16:22:36 UTC	1036	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 33 37 22 20 68 65 69 67 68 74 3d 22 31 34 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 33 37 20 31 34 35 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 41 44 41 44 41 22 20 64 3d 22 4d 30 20 30 68 32 33 37 76 31 34 35 48 30 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 35 46 35 46 35 22 20 64 3d 22 4d 37 20 32 34 68 32 32 33 76 31 31 34 48 37 7a 22 2f 3e 0a 20 20 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 34 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 78 3d 22 34 37 22 20 79 3d 22 33 34 22 20 66 69 6c 6c 3d 22 23 44 37 44 37 44 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="237" height="145" fill="none" viewBox="0 0 237 145"> <path fill="#DADADA" d="M0 0h237v145H0z"/> <path fill="#F5F5F5" d="M7 24h223v114H7z"/> <rect width="144" height="24" x="47" y="34" fill="#D7D7D
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 35 35 2d 2e 32 35 37 2d 2e 33 31 36 2d 2e 36 34 39 2d 2e 34 37 34 2d 31 2e 31 37 36 2d 2e 34 37 34 68 2d 2e 35 36 32 76 33 2e 39 39 39 68 2e 34 33 63 2e 35 38 36 20 30 20 31 2e 30 31 35 2d 2e 31 37 20 31 2e 32 38 39 2d 2e 35 30 38 2e 32 37 33 2d 2e 33 34 32 2e 34 31 2d 2e 38 36 32 2e 34 31 2d 31 2e 35 36 32 7a 4d 39 35 2e 31 31 20 31 31 36 2e 32 37 39 63 30 20 31 2e 31 39 32 2d 2e 33 32 38 20 32 2e 31 31 2d 2e 39 38 36 20 32 2e 37 35 34 2d 2e 36 35 34 2e 36 34 35 2d 31 2e 35 37 35 2e 39 36 37 2d 32 2e 37 36 34 2e 39 36 37 68 2d 32 2e 33 31 76 2d 37 2e 31 33 39 68 32 2e 34 37 32 63 31 2e 31 34 35 20 30 20 32 2e 30 33 2e 32 39 33 20 32 2e 36 35 2e 38 37 39 2e 36 32 36 2e 35 38 36 2e 39 33 38 20 31 2e 34 33 33 2e 39 33 38 20 32 2e 35 33 39 7a 6d 2d 32 2e 30 Data Ascii: 55-.257-.316-.649-.474-1.176-.474h-.562v3.999h.43c.586 0 1.015-.17 1.289-.508.273-.342.41-.862.41-1.562zM95.11 116.279c0 1.192-.328 2.11-.986 2.754-.654.645-1.575.967-2.764.967h-2.31v-7.139h2.472c1.145 0 2.03.293 2.65.879.626.586.938 1.433.938 2.539zm-2.0
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 2e 30 39 34 20 31 32 30 76 2d 37 2e 31 33 39 68 31 2e 39 32 38 76 35 2e 35 38 31 68 32 2e 37 34 39 56 31 32 30 68 2d 34 2e 36 37 37 7a 4d 31 33 35 2e 35 39 34 20 31 31 36 2e 34 32 31 63 30 20 31 2e 32 30 31 2d 2e 32 39 35 20 32 2e 31 31 34 2d 2e 38 38 34 20 32 2e 37 33 39 73 2d 31 2e 34 35 32 2e 39 33 38 2d 32 2e 35 38 38 2e 39 33 38 63 2d 31 2e 31 32 20 30 2d 31 2e 39 37 39 2d 2e 33 31 34 2d 32 2e 35 37 38 2d 2e 39 34 33 2d 2e 35 39 36 2d 2e 36 32 38 2d 2e 38 39 34 2d 31 2e 35 34 33 2d 2e 38 39 34 2d 32 2e 37 34 34 20 30 2d 31 2e 31 38 38 2e 32 39 37 2d 32 2e 30 39 35 2e 38 38 39 2d 32 2e 37 32 2e 35 39 36 2d 2e 36 32 38 20 31 2e 34 36 2d 2e 39 34 32 20 32 2e 35 39 33 2d 2e 39 34 32 20 31 2e 31 33 36 20 30 20 31 2e 39 39 37 2e 33 31 31 20 32 2e 35 38 33 Data Ascii: .094 120v-7.139h1.928v5.581h2.749V120h-4.677zM135.594 116.421c0 1.201-.295 2.114-.884 2.739s-1.452.938-2.588.938c-1.12 0-1.979-.314-2.578-.943-.596-.628-.894-1.543-.894-2.744 0-1.188.297-2.095.889-2.72.596-.628 1.46-.942 2.593-.942 1.136 0 1.997.311 2.583
2023-12-28 16:22:36 UTC	1176	IN	Data Raw: 33 2d 31 2e 31 34 2d 2e 33 39 2d 31 2e 34 35 35 2d 2e 32 35 38 2d 2e 33 31 36 2d 2e 36 35 2d 2e 34 37 34 2d 31 2e 31 37 37 2d 2e 34 37 34 68 2d 2e 35 36 32 76 33 2e 39 39 39 68 2e 34 33 63 2e 35 38 36 20 30 20 31 2e 30 31 35 2d 2e 31 37 20 31 2e 32 38 39 2d 2e 35 30 38 2e 32 37 33 2d 2e 33 34 32 2e 34 31 2d 2e 38 36 32 2e 34 31 2d 31 2e 35 36 32 7a 22 2f 3e 0a 20 20 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 35 37 22 20 78 3d 22 31 36 38 22 20 79 3d 22 36 39 22 20 66 69 6c 6c 3d 22 23 44 37 44 37 44 37 22 20 72 78 3d 22 32 22 2f 3e 0a 20 20 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 39 22 20 68 65 69 67 68 74 3d 22 35 36 22 20 78 3d 22 31 36 38 2e 35 22 20 79 3d 22 36 39 2e 35 22 20 73 74 72 6f 6b 65 3d 22 23 30 Data Ascii: 3-1.14-.39-1.455-.258-.316-.65-.474-1.177-.474h-.562v3.999h.43c.586 0 1.015-.17 1.289-.508.273-.342.41-.862.41-1.562z"/> <rect width="50" height="57" x="168" y="69" fill="#D7D7D7" rx="2"/> <rect width="49" height="56" x="168.5" y="69.5" stroke="#0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50276	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	2953	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/upgrade/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:22:36 UTC	416	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:22:36 GMT Connection: close CF-Ray: 83cb249e1a1a2d41-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 607892 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:22:36 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50275	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	2929	OUT	GET /templates/upgrade/upgrade_button.php HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/upgrade/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
2023-12-28 16:22:36 UTC	307	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb249e1c92aa7f-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, nofollow Server: cloudflare
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 31 36 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 Data Ascii: 16c0<!DOCTYPE html><html><head><style> html, body, a { margin: 0; padding: 0; border: 0; outline: 0; } html { font-size: 14px;
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 6e 2d 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 32 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: n-height: 36px; line-height: 1.5; margin: 0; padding: 6px 12px; border: 0; outline: 0; text-transform: uppercase; text-align: center;
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 73 76 67 5f 64 61 72 6b 2f 69 63 6f 6e 73 5f 73 70 72 69 74 65 2e 73 76 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 Data Ascii: inline-flex; flex-shrink: 0; height: 24px; width: 24px; background-image: url(//static.mediafire.com/images/icons/svg_dark/icons_sprite.svg); background-repeat: no-repeat;
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 42 74 6e 2d 69 63 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 61 20 69 64 3d 22 75 70 67 72 61 64 65 5f 61 63 63 74 22 20 63 6c 61 73 73 3d 22 75 70 67 72 61 64 65 5f 61 63 63 74 20 42 74 6e 20 42 74 6e 2d 2d 67 72 65 65 6e 55 70 67 72 61 64 65 22 20 68 72 65 66 3d 22 2f 75 70 67 72 61 64 65 22 20 74 69 74 6c 65 3d 22 55 70 67 72 61 64 65 20 6e 6f 77 21 22 20 74 61 72 67 65 74 3d 22 5f 74 6f 70 22 Data Ascii: } .Btn-icon { margin-right: 0; } } </style></head><body><a id="upgrade_acct" class="upgrade_acct Btn Btn--greenUpgrade" href="/upgrade" title="Upgrade now!" target="_top"
2023-12-28 16:22:36 UTC	356	IN	Data Raw: 79 43 6f 64 65 20 3d 3d 3d 20 39 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 73 68 6f 77 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 73 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 73 68 6f 77 Data Ascii: yCode === 9) { document.body.classList.add('show-focus-outlines'); } }); document.addEventListener('click', function(e) { document.body.classList.remove('show
2023-12-28 16:22:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50273	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	2806	OUT	GET /images/icons/svg_light/icons_sprite.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
2023-12-28 16:22:36 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:36 GMT Content-Type: image/svg+xml Content-Length: 37035 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-90ab" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 12128 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb249dc8dd3acf-DFW
2023-12-28 16:22:36 UTC	1035	IN	Data Raw: 3c 73 76 67 0a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0a 77 69 64 74 68 3d 22 31 36 35 36 22 0a 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 44 65 66 69 6e 65 20 53 56 47 73 20 2d 2d 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 65 61 72 63 68 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 65 61 72 63 68 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a Data Ascii: <svgxmlns="http://www.w3.org/2000/svg"xmlns:xlink="http://www.w3.org/1999/xlink"width="1656"height="24"> ... Define SVGs --> <defs> ... search --> <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 21 2d 2d 20 6c 69 73 74 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6c 69 73 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 34 22 20 79 3d 22 35 22 20 77 69 64 74 68 3d 22 33 22 20 68 65 69 67 68 74 3d 22 33 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 34 22 20 79 3d 22 31 30 22 20 77 69 64 74 68 3d 22 33 22 20 68 65 69 67 68 74 3d 22 33 22 2f 3e 0a 20 20 Data Ascii: !-- list --> <symbol id="list" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <rect x="4" y="5" width="3" height="3"/> <rect x="4" y="10" width="3" height="3"/>
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 37 35 2c 30 2c 31 2c 30 2c 31 32 2c 33 2e 37 5a 4d 38 2e 38 39 31 2c 31 37 2e 35 33 33 61 2e 35 39 33 2e 35 39 33 2c 30 2c 30 2c 31 2d 2e 38 38 32 2e 32 32 32 41 37 2e 30 31 39 2c 37 2e 30 31 39 2c 30 2c 30 2c 31 2c 35 2c 31 32 61 36 2e 39 2c 36 2e 39 2c 30 2c 30 2c 31 2c 2e 31 39 32 2d 31 2e 36 32 39 2e 35 39 31 2e 35 39 31 2c 30 2c 30 2c 31 2c 2e 39 37 39 2d 2e 32 38 36 4c 37 2e 34 31 2c 31 31 2e 32 35 37 61 2e 35 38 38 2e 35 38 38 2c 30 2c 30 2c 30 2c 2e 32 38 31 2e 31 34 37 6c 31 2e 37 38 33 2e 33 37 39 61 31 2e 31 37 31 2c 31 2e 31 37 31 2c 30 2c 30 2c 31 2c 2e 39 31 33 2e 39 36 6c 2e 31 36 34 2c 31 2e 30 32 38 61 2e 35 38 37 2e 35 38 37 2c 30 2c 30 2c 31 2d 2e 30 34 38 2e 33 34 33 5a 6d 37 2e 39 32 31 2d 31 2e 35 30 35 2d 31 2e 36 37 37 2d 31 2e 39 Data Ascii: 75,0,1,0,12,3.7ZM8.891,17.533a.593.593,0,0,1-.882.222A7.019,7.019,0,0,1,5,12a6.9,6.9,0,0,1,.192-1.629.591.591,0,0,1,.979-.286L7.41,11.257a.588.588,0,0,0,.281.147l1.783.379a1.171,1.171,0,0,1,.913.96l.164,1.028a.587.587,0,0,1-.048.343Zm7.921-1.505-1.677-1.9
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 65 63 74 20 78 3d 22 35 2e 30 30 38 22 20 79 3d 22 31 36 2e 30 30 35 22 20 77 69 64 74 68 3d 22 31 32 2e 39 39 32 22 20 68 65 69 67 68 74 3d 22 32 2e 39 39 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 31 2e 35 20 31 35 2e 30 30 39 20 31 38 20 38 20 31 32 2e 39 38 36 20 38 20 31 32 2e 39 38 36 20 34 2e 30 33 32 20 31 30 20 34 2e 30 33 32 20 31 30 20 38 20 35 20 38 20 31 31 2e 35 20 31 35 2e 30 30 39 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 68 61 72 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 68 61 72 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 Data Ascii: ect x="5.008" y="16.005" width="12.992" height="2.995"/> <polygon points="11.5 15.009 18 8 12.986 8 12.986 4.032 10 4.032 10 8 5 8 11.5 15.009"/> </symbol> ... share --> <symbol id="share" viewBox="0 0 24 24" preserve
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 38 2e 36 35 2c 31 37 2e 30 33 6c 2d 33 2e 36 37 2d 33 2e 36 38 41 35 2e 39 34 32 2c 35 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 36 2c 31 30 61 36 2c 36 2c 30 2c 31 2c 30 2d 36 2c 36 2c 35 2e 39 2c 35 2e 39 2c 30 2c 30 2c 30 2c 32 2e 37 32 2d 2e 36 35 6c 33 2e 38 31 2c 33 2e 38 61 2e 39 34 32 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 2e 33 32 2c 30 6c 2e 38 2d 2e 38 41 2e 39 34 32 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 38 2e 36 35 2c 31 37 2e 30 33 5a 6d 2d 36 2e 39 39 2d 32 2e 37 34 41 34 2e 35 33 37 2c 34 2e 35 33 37 2c 30 2c 30 2c 31 2c 31 30 2c 31 34 2e 36 2c 34 2e 36 2c 34 2e 36 2c 30 2c 31 2c 31 2c Data Ascii: d="M0 0h24v24H0z" fill="none"/> <path d="M18.65,17.03l-3.67-3.68A5.942,5.942,0,0,0,16,10a6,6,0,1,0-6,6,5.9,5.9,0,0,0,2.72-.65l3.81,3.8a.942.942,0,0,0,1.32,0l.8-.8A.942.942,0,0,0,18.65,17.03Zm-6.99-2.74A4.537,4.537,0,0,1,10,14.6,4.6,4.6,0,1,1,
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 38 20 35 20 31 31 20 35 20 31 37 20 31 31 20 31 37 2e 35 20 31 31 2e 35 20 31 37 20 31 32 20 31 31 20 31 38 20 38 20 31 38 20 31 34 2e 35 20 31 31 2e 35 20 38 20 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 6d 61 6c 6c 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 6d 61 6c 6c 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 Data Ascii: e"/> <polygon points="8 5 11 5 17 11 17.5 11.5 17 12 11 18 8 18 14.5 11.5 8 5"/> </symbol> ... small --> <symbol id="small" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z"
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 56 31 37 2e 37 31 31 48 38 2e 30 35 39 56 31 32 2e 34 71 30 2d 2e 39 31 33 2d 2e 31 34 39 2d 33 2e 36 34 38 68 2e 30 37 6c 32 2e 37 35 2c 38 2e 39 36 31 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 6c 61 72 67 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6c 61 72 67 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 Data Ascii: V17.711H8.059V12.4q0-.913-.149-3.648h.07l2.75,8.961Z"/> </symbol> ... large --> <symbol id="large" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <path d="M1
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2c 35 56 31 38 48 32 30 56 35 5a 4d 36 2c 37 48 31 38 76 35 6c 2d 33 2c 33 2d 33 2d 33 4c 38 2c 31 36 48 36 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 39 22 20 63 79 3d 22 31 30 22 20 72 3d 22 31 2e 36 38 37 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 6d 65 6e 75 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6d 65 6e 75 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 Data Ascii: fill="none"/> <path d="M4,5V18H20V5ZM6,7H18v5l-3,3-3-3L8,16H6Z"/> <circle cx="9" cy="10" r="1.687"/> </symbol> ... menu --> <symbol id="menu" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 31 31 2c 31 33 2e 35 63 30 2d 31 2e 39 33 2c 32 2e 30 31 2d 33 2e 35 2c 34 2e 35 2d 33 2e 35 53 32 30 2c 31 31 2e 35 37 2c 32 30 2c 31 33 2e 35 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 62 6f 6f 6b 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 62 6f 6f 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2c 31 38 61 Data Ascii: 11,13.5c0-1.93,2.01-3.5,4.5-3.5S20,11.57,20,13.5Z"/> </symbol> ... book --> <symbol id="book" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <path d="M12,18a
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 34 2e 39 39 34 20 31 31 2e 35 20 31 30 20 36 2e 39 39 35 20 31 30 20 31 30 20 31 36 2e 30 30 31 20 31 30 20 31 36 2e 30 30 31 20 34 20 31 39 20 34 20 31 39 20 31 39 20 31 36 2e 30 30 31 20 31 39 20 31 36 2e 30 30 31 20 31 33 20 31 30 20 31 33 20 31 30 20 31 36 2e 30 30 35 20 34 2e 39 39 34 20 31 31 2e 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 66 69 6c 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 66 69 6c 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 Data Ascii: <path d="M0 0h24v24H0z" fill="none"/> <polygon points="4.994 11.5 10 6.995 10 10 16.001 10 16.001 4 19 4 19 19 16.001 19 16.001 13 10 13 10 16.005 4.994 11.5"/> </symbol> ... file --> <symbol id="file" viewBox="0 0 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50274	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	2745	OUT	GET /images/right-icon_2x.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
2023-12-28 16:22:36 UTC	397	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:36 GMT Content-Type: image/png Content-Length: 235 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-eb" Expires: Sat, 27 Jan 2024 12:23:06 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2890 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb249ddca54762-DFW
2023-12-28 16:22:36 UTC	235	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 17 04 03 00 00 00 05 26 59 5a 00 00 00 0f 50 4c 54 45 00 00 00 85 ca 79 83 c7 77 84 c9 7a 85 c9 7a d0 f4 08 08 00 00 00 04 74 52 4e 53 00 bf 40 7f 4d 52 fc 1f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e3 04 1d 11 37 27 23 1e 36 16 00 00 00 5f 49 44 41 54 18 d3 8d d0 b1 0d 80 30 0c 44 d1 8b 27 88 50 06 a0 f0 00 ac 60 f4 f7 9f 89 82 00 b9 8e eb ac 67 c5 76 a4 25 9b 2c 8d dd ea c1 e9 8c 35 0c a0 3b d7 1f 3e 9c 5b 39 0f ba 31 94 33 f4 e5 f1 04 6a 99 1d cc 3c b3 f3 2e df d5 c2 79 36 2c 9b 87 b3 94 7e 98 c2 59 ca f2 8f 8c 8f 2f c8 0f 1a 28 c6 66 23 56 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR&YZPLTEywzztRNS@MRpHYstIME7'#6_IDAT0D'P`gv%,5;>[913j<.y6,~Y/(f#VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50277	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	2745	OUT	GET /images/cross-icon_2x.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781
2023-12-28 16:22:36 UTC	397	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:36 GMT Content-Type: image/png Content-Length: 232 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-e8" Expires: Sat, 27 Jan 2024 15:59:01 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1415 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb249e298c2fe8-DFW
2023-12-28 16:22:36 UTC	232	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 15 04 03 00 00 00 5b 39 b8 a5 00 00 00 0f 50 4c 54 45 00 00 00 ff 11 3d ff 10 40 ff 10 3e ff 11 3e 42 6d 75 f8 00 00 00 04 74 52 4e 53 00 bf 40 7f 4d 52 fc 1f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e3 04 1d 11 37 27 23 1e 36 16 00 00 00 5c 49 44 41 54 08 d7 65 8f d1 09 80 30 10 43 9f ba 40 11 07 f0 c3 11 5c c0 9a fd 67 52 e3 09 01 ef a3 57 5e 4a 9a c0 8c 67 6c 30 68 f5 7d 3b 60 51 37 96 1a 9b 2c 78 dd a0 53 e7 4b 4a 7d 50 61 0b bb ca ed 86 1f b6 50 18 26 e9 e4 cf f3 7d f8 a4 7f fc 9b 79 32 67 e6 cf 5e d1 f7 02 a4 21 19 ab ca e7 32 ca 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR[9PLTE=@>>BmutRNS@MRpHYstIME7'#6\IDATe0C@\gRW^Jgl0h};`Q7,xSKJ}PaP&}y2g^!2IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50278	34.218.121.115	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	636	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1065 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:36 UTC	1065	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 37 63 61 38 31 30 31 63 36 66 62 33 37 39 35 31 30 66 33 35 30 66 39 34 63 63 64 65 64 61 34 64 26 63 6c 69 65 6e 74 3d 32 38 39 31 36 62 36 63 64 36 30 63 37 39 63 30 34 34 37 62 33 63 32 33 61 64 36 39 38 63 39 38 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 59 73 30 72 52 68 43 6a 43 2d 72 68 55 70 6d 46 69 69 62 37 73 73 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 30 33 37 38 30 35 35 35 34 34 37 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 33 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 30 33 37 38 30 35 32 32 35 39 39 25 32 43 25 32 32 Data Ascii: checksum=7ca8101c6fb379510f350f94ccdeda4d&client=28916b6cd60c79c0447b3c23ad698c98&e=%5B%7B%22device_id%22%3A%22Ys0rRhCjC-rhUpmFiib7ss%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1703780555447%2C%22event_id%22%3A3%2C%22session_id%22%3A1703780522599%2C%22
2023-12-28 16:22:37 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:36 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0cc-0940f8005841c6483d10385a Strict-Transport-Security: max-age=15768000
2023-12-28 16:22:37 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50283	142.250.113.139	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	859	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:36 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 28 Dec 2023 16:22:36 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:36 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2023-12-28 16:22:36 UTC	1252	IN	Data Raw: 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e Data Ascii: (Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;},0)};_.ca=function(a){a&&"function"==typeof a.
2023-12-28 16:22:36 UTC	1252	IN	Data Raw: 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b 5f 2e 44 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 43 61 28 29 3f 21 31 3a 5f 2e 76 28 22 4f 70 65 72 61 22 29 7d 3b Data Ascii: \|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};_.Da=function(){return _.Ca()?!1:_.v("Opera")};
2023-12-28 16:22:36 UTC	1252	IN	Data Raw: 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 55 61 2e 61 70 70 6c 79 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 30 3d 3d 3d 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 5f 2e 56 61 28 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 61 5b 30 5d 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2b 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 64 5d 29 2b 61 5b 64 2b 31 5d 3b 72 65 74 75 72 6e 20 5f 2e 56 61 28 63 29 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 72 65 74 75 72 6e 28 61 3d 6e 75 6c 6c 3d 3d 28 63 3d 28 62 3d 61 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 Data Ascii: toLowerCase()===a+":"})};_.Wa=function(a){var b=_.Ua.apply(1,arguments);if(0===b.length)return _.Va(a[0]);for(var c=a[0],d=0;d<b.length;d++)c+=encodeURIComponent(b[d])+a[d+1];return _.Va(c)};_.Xa=function(a){var b,c;return(a=null==(c=(b=a.document).queryS
2023-12-28 16:22:36 UTC	1252	IN	Data Raw: 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 66 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 74 68 69 73 2e 67 3d 66 3b 66 62 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 Data Ascii: {var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&fb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;fb(this,"description",{configurable:!0,writable:!0,valu
2023-12-28 16:22:36 UTC	1252	IN	Data Raw: 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6d 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 6e 65 77 20 63 3b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 63 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 7d 69 66 28 22 75 6e 64 65 Data Ascii: h(b.value);a=c}return a};lb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.mb=function(){function a(){function c(){}new c;Reflect.construct(c,[],function(){});return new c instanceof c}if("unde
2023-12-28 16:22:36 UTC	1252	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 72 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 Data Ascii: ion(){return _.mb});w("Reflect.setPrototypeOf",function(a){return a?a:rb?function(b,c){try{return rb(b,c),!0}catch(d){return!1}}:null});w("Promise",function(a){function b(){this.g=null}function c(g){return g instanceof e?g:new e(function(h){h(g)})}if(a)
2023-12-28 16:22:36 UTC	1252	IN	Data Raw: 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 22 2b 74 68 69 73 2e 67 29 3b 74 68 69 73 2e 67 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 67 26 26 74 68 69 73 2e 4d 28 29 3b 74 68 69 73 2e 44 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 64 28 66 Data Ascii: this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`"+this.g);this.g=g;this.j=h;2===this.g&&this.M();this.D()};e.prototype.M=function(){var g=this;d(f
2023-12-28 16:22:36 UTC	1252	IN	Data Raw: 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 51 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 68 3f 66 2e 68 28 6c 29 3a 0a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: hen(void 0,g)};e.prototype.Qc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null==this.h?f.h(l):this.h.push(l);this.A=!0};e.resolve=c;e.reject=function(g){return new e(function(h
2023-12-28 16:22:36 UTC	1252	IN	Data Raw: 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 Data Ascii: bject[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50282	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	2551	OUT	GET /images/basic-plan.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1
2023-12-28 16:22:36 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:36 GMT Content-Type: image/svg+xml Content-Length: 4950 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1356" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11292 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24a02c28e7a2-DFW
2023-12-28 16:22:36 UTC	1036	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 33 37 22 20 68 65 69 67 68 74 3d 22 31 34 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 33 37 20 31 34 35 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 41 44 41 44 41 22 20 64 3d 22 4d 30 20 30 68 32 33 37 76 31 34 35 48 30 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 35 46 35 46 35 22 20 64 3d 22 4d 37 20 32 34 68 32 32 33 76 31 31 34 48 37 7a 22 2f 3e 0a 20 20 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 34 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 78 3d 22 34 37 22 20 79 3d 22 33 34 22 20 66 69 6c 6c 3d 22 23 44 37 44 37 44 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="237" height="145" fill="none" viewBox="0 0 237 145"> <path fill="#DADADA" d="M0 0h237v145H0z"/> <path fill="#F5F5F5" d="M7 24h223v114H7z"/> <rect width="144" height="24" x="47" y="34" fill="#D7D7D
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 35 35 2d 2e 32 35 37 2d 2e 33 31 36 2d 2e 36 34 39 2d 2e 34 37 34 2d 31 2e 31 37 36 2d 2e 34 37 34 68 2d 2e 35 36 32 76 33 2e 39 39 39 68 2e 34 33 63 2e 35 38 36 20 30 20 31 2e 30 31 35 2d 2e 31 37 20 31 2e 32 38 39 2d 2e 35 30 38 2e 32 37 33 2d 2e 33 34 32 2e 34 31 2d 2e 38 36 32 2e 34 31 2d 31 2e 35 36 32 7a 4d 39 35 2e 31 31 20 31 31 36 2e 32 37 39 63 30 20 31 2e 31 39 32 2d 2e 33 32 38 20 32 2e 31 31 2d 2e 39 38 36 20 32 2e 37 35 34 2d 2e 36 35 34 2e 36 34 35 2d 31 2e 35 37 35 2e 39 36 37 2d 32 2e 37 36 34 2e 39 36 37 68 2d 32 2e 33 31 76 2d 37 2e 31 33 39 68 32 2e 34 37 32 63 31 2e 31 34 35 20 30 20 32 2e 30 33 2e 32 39 33 20 32 2e 36 35 2e 38 37 39 2e 36 32 36 2e 35 38 36 2e 39 33 38 20 31 2e 34 33 33 2e 39 33 38 20 32 2e 35 33 39 7a 6d 2d 32 2e 30 Data Ascii: 55-.257-.316-.649-.474-1.176-.474h-.562v3.999h.43c.586 0 1.015-.17 1.289-.508.273-.342.41-.862.41-1.562zM95.11 116.279c0 1.192-.328 2.11-.986 2.754-.654.645-1.575.967-2.764.967h-2.31v-7.139h2.472c1.145 0 2.03.293 2.65.879.626.586.938 1.433.938 2.539zm-2.0
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 2e 30 39 34 20 31 32 30 76 2d 37 2e 31 33 39 68 31 2e 39 32 38 76 35 2e 35 38 31 68 32 2e 37 34 39 56 31 32 30 68 2d 34 2e 36 37 37 7a 4d 31 33 35 2e 35 39 34 20 31 31 36 2e 34 32 31 63 30 20 31 2e 32 30 31 2d 2e 32 39 35 20 32 2e 31 31 34 2d 2e 38 38 34 20 32 2e 37 33 39 73 2d 31 2e 34 35 32 2e 39 33 38 2d 32 2e 35 38 38 2e 39 33 38 63 2d 31 2e 31 32 20 30 2d 31 2e 39 37 39 2d 2e 33 31 34 2d 32 2e 35 37 38 2d 2e 39 34 33 2d 2e 35 39 36 2d 2e 36 32 38 2d 2e 38 39 34 2d 31 2e 35 34 33 2d 2e 38 39 34 2d 32 2e 37 34 34 20 30 2d 31 2e 31 38 38 2e 32 39 37 2d 32 2e 30 39 35 2e 38 38 39 2d 32 2e 37 32 2e 35 39 36 2d 2e 36 32 38 20 31 2e 34 36 2d 2e 39 34 32 20 32 2e 35 39 33 2d 2e 39 34 32 20 31 2e 31 33 36 20 30 20 31 2e 39 39 37 2e 33 31 31 20 32 2e 35 38 33 Data Ascii: .094 120v-7.139h1.928v5.581h2.749V120h-4.677zM135.594 116.421c0 1.201-.295 2.114-.884 2.739s-1.452.938-2.588.938c-1.12 0-1.979-.314-2.578-.943-.596-.628-.894-1.543-.894-2.744 0-1.188.297-2.095.889-2.72.596-.628 1.46-.942 2.593-.942 1.136 0 1.997.311 2.583
2023-12-28 16:22:36 UTC	1176	IN	Data Raw: 33 2d 31 2e 31 34 2d 2e 33 39 2d 31 2e 34 35 35 2d 2e 32 35 38 2d 2e 33 31 36 2d 2e 36 35 2d 2e 34 37 34 2d 31 2e 31 37 37 2d 2e 34 37 34 68 2d 2e 35 36 32 76 33 2e 39 39 39 68 2e 34 33 63 2e 35 38 36 20 30 20 31 2e 30 31 35 2d 2e 31 37 20 31 2e 32 38 39 2d 2e 35 30 38 2e 32 37 33 2d 2e 33 34 32 2e 34 31 2d 2e 38 36 32 2e 34 31 2d 31 2e 35 36 32 7a 22 2f 3e 0a 20 20 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 35 37 22 20 78 3d 22 31 36 38 22 20 79 3d 22 36 39 22 20 66 69 6c 6c 3d 22 23 44 37 44 37 44 37 22 20 72 78 3d 22 32 22 2f 3e 0a 20 20 20 20 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 39 22 20 68 65 69 67 68 74 3d 22 35 36 22 20 78 3d 22 31 36 38 2e 35 22 20 79 3d 22 36 39 2e 35 22 20 73 74 72 6f 6b 65 3d 22 23 30 Data Ascii: 3-1.14-.39-1.455-.258-.316-.65-.474-1.177-.474h-.562v3.999h.43c.586 0 1.015-.17 1.289-.508.273-.342.41-.862.41-1.562z"/> <rect width="50" height="57" x="168" y="69" fill="#D7D7D7" rx="2"/> <rect width="49" height="56" x="168.5" y="69.5" stroke="#0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50284	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	2857	OUT	GET /images/icons/svg_dark/social_icons_sprite.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1
2023-12-28 16:22:36 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:36 GMT Content-Type: image/svg+xml Content-Length: 4864 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1300" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2451 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24a05d272ff4-DFW
2023-12-28 16:22:36 UTC	1037	IN	Data Raw: 3c 73 76 67 0a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0a 77 69 64 74 68 3d 22 32 30 30 22 0a 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 44 65 66 69 6e 65 20 53 56 47 73 20 2d 2d 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 66 61 63 65 62 6f 6f 6b 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 Data Ascii: <svgxmlns="http://www.w3.org/2000/svg"xmlns:xlink="http://www.w3.org/1999/xlink"width="200"height="24"> ... Define SVGs --> <defs> ... facebook --> <symbol id="facebook" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 31 39 2e 31 31 20 31 2e 35 34 2c 31 39 2e 30 37 43 33 2e 34 34 2c 32 30 2e 32 39 20 35 2e 37 2c 32 31 20 38 2e 31 32 2c 32 31 43 31 36 2c 32 31 20 32 30 2e 33 33 2c 31 34 2e 34 36 20 32 30 2e 33 33 2c 38 2e 37 39 43 32 30 2e 33 33 2c 38 2e 36 20 32 30 2e 33 33 2c 38 2e 34 32 20 32 30 2e 33 32 2c 38 2e 32 33 43 32 31 2e 31 36 2c 37 2e 36 33 20 32 31 2e 38 38 2c 36 2e 38 37 20 32 32 2e 34 36 2c 36 5a 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 67 6f 6f 67 6c 65 20 70 6c 75 73 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 67 6f 6f 67 6c 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d Data Ascii: 19.11 1.54,19.07C3.44,20.29 5.7,21 8.12,21C16,21 20.33,14.46 20.33,8.79C20.33,8.6 20.33,8.42 20.32,8.23C21.16,7.63 21.88,6.87 22.46,6Z" /> </symbol> ... google plus --> <symbol id="google" viewBox="0 0 24 24" preserveAspectRatio=
2023-12-28 16:22:36 UTC	1369	IN	Data Raw: 33 20 31 39 2e 37 35 2c 31 30 2e 34 34 43 31 39 2e 37 35 2c 31 33 2e 37 32 20 31 37 2e 37 31 2c 31 37 2e 32 35 20 31 33 2e 32 35 2c 31 37 2e 32 35 5a 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 74 75 6d 62 6c 72 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 74 75 6d 62 6c 72 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 33 31 31 38 2c 31 39 2e 39 35 32 34 41 35 2e 31 32 36 31 2c 35 2e 31 32 36 31 2c 30 2c 30 2c 31 2c 31 34 2c 32 31 2e 30 37 34 35 68 2d 2e 31 Data Ascii: 3 19.75,10.44C19.75,13.72 17.71,17.25 13.25,17.25Z" /> </symbol> ... tumblr --> <symbol id="tumblr" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M17.3118,19.9524A5.1261,5.1261,0,0,1,14,21.0745h-.1
2023-12-28 16:22:36 UTC	1089	IN	Data Raw: 61 35 2e 31 33 31 39 2c 35 2e 31 33 31 39 2c 30 2c 30 2c 30 2c 33 2e 31 33 37 37 2d 31 2e 36 30 34 38 2c 35 2e 32 32 34 31 2c 35 2e 32 32 34 31 2c 30 2c 30 2c 30 2c 31 2e 33 34 38 32 2d 32 2e 33 38 31 37 2c 31 32 2e 30 33 37 33 2c 31 32 2e 30 33 37 33 2c 30 2c 30 2c 30 2c 2e 31 34 32 37 2d 32 2e 39 37 32 31 41 32 35 2e 36 38 36 32 2c 32 35 2e 36 38 36 32 2c 30 2c 30 2c 30 2c 32 30 2e 35 33 31 2c 31 30 2e 37 32 34 34 5a 4d 38 2e 31 38 39 34 2c 38 2e 32 38 35 63 2e 32 39 39 32 2d 2e 33 30 32 2e 33 38 31 39 2d 2e 33 31 33 35 2c 32 2e 32 35 34 35 2d 2e 33 31 33 35 2c 31 2e 36 38 31 2c 30 2c 31 2e 37 33 37 35 2e 30 30 33 37 2c 31 2e 39 38 34 35 2e 31 32 38 34 61 2e 38 34 33 31 2e 38 34 33 31 2c 30 2c 30 2c 31 2c 2e 35 31 31 39 2e 38 33 39 31 2e 39 30 33 32 2e Data Ascii: a5.1319,5.1319,0,0,0,3.1377-1.6048,5.2241,5.2241,0,0,0,1.3482-2.3817,12.0373,12.0373,0,0,0,.1427-2.9721A25.6862,25.6862,0,0,0,20.531,10.7244ZM8.1894,8.285c.2992-.302.3819-.3135,2.2545-.3135,1.681,0,1.7375.0037,1.9845.1284a.8431.8431,0,0,1,.5119.8391.9032.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50286	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	2554	OUT	GET /images/right-icon_2x.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==
2023-12-28 16:22:37 UTC	397	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:37 GMT Content-Type: image/png Content-Length: 235 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-eb" Expires: Sat, 27 Jan 2024 12:23:06 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2891 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24a14d8846c6-DFW
2023-12-28 16:22:37 UTC	235	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 17 04 03 00 00 00 05 26 59 5a 00 00 00 0f 50 4c 54 45 00 00 00 85 ca 79 83 c7 77 84 c9 7a 85 c9 7a d0 f4 08 08 00 00 00 04 74 52 4e 53 00 bf 40 7f 4d 52 fc 1f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e3 04 1d 11 37 27 23 1e 36 16 00 00 00 5f 49 44 41 54 18 d3 8d d0 b1 0d 80 30 0c 44 d1 8b 27 88 50 06 a0 f0 00 ac 60 f4 f7 9f 89 82 00 b9 8e eb ac 67 c5 76 a4 25 9b 2c 8d dd ea c1 e9 8c 35 0c a0 3b d7 1f 3e 9c 5b 39 0f ba 31 94 33 f4 e5 f1 04 6a 99 1d cc 3c b3 f3 2e df d5 c2 79 36 2c 9b 87 b3 94 7e 98 c2 59 ca f2 8f 8c 8f 2f c8 0f 1a 28 c6 66 23 56 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR&YZPLTEywzztRNS@MRpHYstIME7'#6_IDAT0D'P`gv%,5;>[913j<.y6,~Y/(f#VIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50287	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	2569	OUT	GET /images/icons/svg_light/icons_sprite.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==
2023-12-28 16:22:37 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:37 GMT Content-Type: image/svg+xml Content-Length: 37035 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-90ab" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 10914 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24a15d124743-DFW
2023-12-28 16:22:37 UTC	1035	IN	Data Raw: 3c 73 76 67 0a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0a 77 69 64 74 68 3d 22 31 36 35 36 22 0a 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 44 65 66 69 6e 65 20 53 56 47 73 20 2d 2d 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 65 61 72 63 68 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 65 61 72 63 68 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a Data Ascii: <svgxmlns="http://www.w3.org/2000/svg"xmlns:xlink="http://www.w3.org/1999/xlink"width="1656"height="24"> ... Define SVGs --> <defs> ... search --> <symbol id="search" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">
2023-12-28 16:22:37 UTC	1369	IN	Data Raw: 21 2d 2d 20 6c 69 73 74 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6c 69 73 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 34 22 20 79 3d 22 35 22 20 77 69 64 74 68 3d 22 33 22 20 68 65 69 67 68 74 3d 22 33 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 78 3d 22 34 22 20 79 3d 22 31 30 22 20 77 69 64 74 68 3d 22 33 22 20 68 65 69 67 68 74 3d 22 33 22 2f 3e 0a 20 20 Data Ascii: !-- list --> <symbol id="list" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <rect x="4" y="5" width="3" height="3"/> <rect x="4" y="10" width="3" height="3"/>
2023-12-28 16:22:37 UTC	1369	IN	Data Raw: 37 35 2c 30 2c 31 2c 30 2c 31 32 2c 33 2e 37 5a 4d 38 2e 38 39 31 2c 31 37 2e 35 33 33 61 2e 35 39 33 2e 35 39 33 2c 30 2c 30 2c 31 2d 2e 38 38 32 2e 32 32 32 41 37 2e 30 31 39 2c 37 2e 30 31 39 2c 30 2c 30 2c 31 2c 35 2c 31 32 61 36 2e 39 2c 36 2e 39 2c 30 2c 30 2c 31 2c 2e 31 39 32 2d 31 2e 36 32 39 2e 35 39 31 2e 35 39 31 2c 30 2c 30 2c 31 2c 2e 39 37 39 2d 2e 32 38 36 4c 37 2e 34 31 2c 31 31 2e 32 35 37 61 2e 35 38 38 2e 35 38 38 2c 30 2c 30 2c 30 2c 2e 32 38 31 2e 31 34 37 6c 31 2e 37 38 33 2e 33 37 39 61 31 2e 31 37 31 2c 31 2e 31 37 31 2c 30 2c 30 2c 31 2c 2e 39 31 33 2e 39 36 6c 2e 31 36 34 2c 31 2e 30 32 38 61 2e 35 38 37 2e 35 38 37 2c 30 2c 30 2c 31 2d 2e 30 34 38 2e 33 34 33 5a 6d 37 2e 39 32 31 2d 31 2e 35 30 35 2d 31 2e 36 37 37 2d 31 2e 39 Data Ascii: 75,0,1,0,12,3.7ZM8.891,17.533a.593.593,0,0,1-.882.222A7.019,7.019,0,0,1,5,12a6.9,6.9,0,0,1,.192-1.629.591.591,0,0,1,.979-.286L7.41,11.257a.588.588,0,0,0,.281.147l1.783.379a1.171,1.171,0,0,1,.913.96l.164,1.028a.587.587,0,0,1-.048.343Zm7.921-1.505-1.677-1.9
2023-12-28 16:22:37 UTC	1369	IN	Data Raw: 65 63 74 20 78 3d 22 35 2e 30 30 38 22 20 79 3d 22 31 36 2e 30 30 35 22 20 77 69 64 74 68 3d 22 31 32 2e 39 39 32 22 20 68 65 69 67 68 74 3d 22 32 2e 39 39 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 31 31 2e 35 20 31 35 2e 30 30 39 20 31 38 20 38 20 31 32 2e 39 38 36 20 38 20 31 32 2e 39 38 36 20 34 2e 30 33 32 20 31 30 20 34 2e 30 33 32 20 31 30 20 38 20 35 20 38 20 31 31 2e 35 20 31 35 2e 30 30 39 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 68 61 72 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 68 61 72 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 Data Ascii: ect x="5.008" y="16.005" width="12.992" height="2.995"/> <polygon points="11.5 15.009 18 8 12.986 8 12.986 4.032 10 4.032 10 8 5 8 11.5 15.009"/> </symbol> ... share --> <symbol id="share" viewBox="0 0 24 24" preserve
2023-12-28 16:22:37 UTC	1369	IN	Data Raw: 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 38 2e 36 35 2c 31 37 2e 30 33 6c 2d 33 2e 36 37 2d 33 2e 36 38 41 35 2e 39 34 32 2c 35 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 36 2c 31 30 61 36 2c 36 2c 30 2c 31 2c 30 2d 36 2c 36 2c 35 2e 39 2c 35 2e 39 2c 30 2c 30 2c 30 2c 32 2e 37 32 2d 2e 36 35 6c 33 2e 38 31 2c 33 2e 38 61 2e 39 34 32 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 2e 33 32 2c 30 6c 2e 38 2d 2e 38 41 2e 39 34 32 2e 39 34 32 2c 30 2c 30 2c 30 2c 31 38 2e 36 35 2c 31 37 2e 30 33 5a 6d 2d 36 2e 39 39 2d 32 2e 37 34 41 34 2e 35 33 37 2c 34 2e 35 33 37 2c 30 2c 30 2c 31 2c 31 30 2c 31 34 2e 36 2c 34 2e 36 2c 34 2e 36 2c 30 2c 31 2c 31 2c Data Ascii: d="M0 0h24v24H0z" fill="none"/> <path d="M18.65,17.03l-3.67-3.68A5.942,5.942,0,0,0,16,10a6,6,0,1,0-6,6,5.9,5.9,0,0,0,2.72-.65l3.81,3.8a.942.942,0,0,0,1.32,0l.8-.8A.942.942,0,0,0,18.65,17.03Zm-6.99-2.74A4.537,4.537,0,0,1,10,14.6,4.6,4.6,0,1,1,
2023-12-28 16:22:37 UTC	1369	IN	Data Raw: 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 38 20 35 20 31 31 20 35 20 31 37 20 31 31 20 31 37 2e 35 20 31 31 2e 35 20 31 37 20 31 32 20 31 31 20 31 38 20 38 20 31 38 20 31 34 2e 35 20 31 31 2e 35 20 38 20 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 6d 61 6c 6c 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 73 6d 61 6c 6c 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 Data Ascii: e"/> <polygon points="8 5 11 5 17 11 17.5 11.5 17 12 11 18 8 18 14.5 11.5 8 5"/> </symbol> ... small --> <symbol id="small" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z"
2023-12-28 16:22:37 UTC	1369	IN	Data Raw: 56 31 37 2e 37 31 31 48 38 2e 30 35 39 56 31 32 2e 34 71 30 2d 2e 39 31 33 2d 2e 31 34 39 2d 33 2e 36 34 38 68 2e 30 37 6c 32 2e 37 35 2c 38 2e 39 36 31 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 6c 61 72 67 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6c 61 72 67 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 Data Ascii: V17.711H8.059V12.4q0-.913-.149-3.648h.07l2.75,8.961Z"/> </symbol> ... large --> <symbol id="large" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <path d="M1
2023-12-28 16:22:37 UTC	1369	IN	Data Raw: 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2c 35 56 31 38 48 32 30 56 35 5a 4d 36 2c 37 48 31 38 76 35 6c 2d 33 2c 33 2d 33 2d 33 4c 38 2c 31 36 48 36 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 39 22 20 63 79 3d 22 31 30 22 20 72 3d 22 31 2e 36 38 37 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 6d 65 6e 75 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 6d 65 6e 75 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 Data Ascii: fill="none"/> <path d="M4,5V18H20V5ZM6,7H18v5l-3,3-3-3L8,16H6Z"/> <circle cx="9" cy="10" r="1.687"/> </symbol> ... menu --> <symbol id="menu" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet">
2023-12-28 16:22:37 UTC	1369	IN	Data Raw: 31 31 2c 31 33 2e 35 63 30 2d 31 2e 39 33 2c 32 2e 30 31 2d 33 2e 35 2c 34 2e 35 2d 33 2e 35 53 32 30 2c 31 31 2e 35 37 2c 32 30 2c 31 33 2e 35 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 62 6f 6f 6b 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 62 6f 6f 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2c 31 38 61 Data Ascii: 11,13.5c0-1.93,2.01-3.5,4.5-3.5S20,11.57,20,13.5Z"/> </symbol> ... book --> <symbol id="book" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M0 0h24v24H0z" fill="none"/> <path d="M12,18a
2023-12-28 16:22:37 UTC	1369	IN	Data Raw: 20 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 34 2e 39 39 34 20 31 31 2e 35 20 31 30 20 36 2e 39 39 35 20 31 30 20 31 30 20 31 36 2e 30 30 31 20 31 30 20 31 36 2e 30 30 31 20 34 20 31 39 20 34 20 31 39 20 31 39 20 31 36 2e 30 30 31 20 31 39 20 31 36 2e 30 30 31 20 31 33 20 31 30 20 31 33 20 31 30 20 31 36 2e 30 30 35 20 34 2e 39 39 34 20 31 31 2e 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 66 69 6c 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 66 69 6c 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 Data Ascii: <path d="M0 0h24v24H0z" fill="none"/> <polygon points="4.994 11.5 10 6.995 10 10 16.001 10 16.001 4 19 4 19 19 16.001 19 16.001 13 10 13 10 16.005 4.994 11.5"/> </symbol> ... file --> <symbol id="file" viewBox="0 0 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50288	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:36 UTC	2953	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/upgrade/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojntt2.0.2.2; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780546.37.0.0; _ga=GA1.1.1411026819.1703780523; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:22:37 UTC	417	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:22:37 GMT Connection: close CF-Ray: 83cb24a19f2ee5f2-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 2607508 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:22:37 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50289	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:37 UTC	2554	OUT	GET /images/cross-icon_2x.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==
2023-12-28 16:22:37 UTC	398	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:37 GMT Content-Type: image/png Content-Length: 232 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-e8" Expires: Sat, 27 Jan 2024 11:58:58 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 12620 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24a1df6e3ab5-DFW
2023-12-28 16:22:37 UTC	232	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 15 04 03 00 00 00 5b 39 b8 a5 00 00 00 0f 50 4c 54 45 00 00 00 ff 11 3d ff 10 40 ff 10 3e ff 11 3e 42 6d 75 f8 00 00 00 04 74 52 4e 53 00 bf 40 7f 4d 52 fc 1f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e3 04 1d 11 37 27 23 1e 36 16 00 00 00 5c 49 44 41 54 08 d7 65 8f d1 09 80 30 10 43 9f ba 40 11 07 f0 c3 11 5c c0 9a fd 67 52 e3 09 01 ef a3 57 5e 4a 9a c0 8c 67 6c 30 68 f5 7d 3b 60 51 37 96 1a 9b 2c 78 dd a0 53 e7 4b 4a 7d 50 61 0b bb ca ed 86 1f b6 50 18 26 e9 e4 cf f3 7d f8 a4 7f fc 9b 79 32 67 e6 cf 5e d1 f7 02 a4 21 19 ab ca e7 32 ca 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR[9PLTE=@>>BmutRNS@MRpHYstIME7'#6\IDATe0C@\gRW^Jgl0h};`Q7,xSKJ}PaP&}y2g^!2IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50297	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:37 UTC	2575	OUT	GET /images/icons/svg_dark/social_icons_sprite.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==
2023-12-28 16:22:37 UTC	333	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:37 GMT Content-Type: image/svg+xml Content-Length: 4864 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-1300" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 10229 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24a3d8dc2cc4-DFW
2023-12-28 16:22:37 UTC	1036	IN	Data Raw: 3c 73 76 67 0a 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 0a 77 69 64 74 68 3d 22 32 30 30 22 0a 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 44 65 66 69 6e 65 20 53 56 47 73 20 2d 2d 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 66 61 63 65 62 6f 6f 6b 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 66 61 63 65 62 6f 6f 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 Data Ascii: <svgxmlns="http://www.w3.org/2000/svg"xmlns:xlink="http://www.w3.org/1999/xlink"width="200"height="24"> ... Define SVGs --> <defs> ... facebook --> <symbol id="facebook" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet
2023-12-28 16:22:37 UTC	1369	IN	Data Raw: 2c 31 39 2e 31 31 20 31 2e 35 34 2c 31 39 2e 30 37 43 33 2e 34 34 2c 32 30 2e 32 39 20 35 2e 37 2c 32 31 20 38 2e 31 32 2c 32 31 43 31 36 2c 32 31 20 32 30 2e 33 33 2c 31 34 2e 34 36 20 32 30 2e 33 33 2c 38 2e 37 39 43 32 30 2e 33 33 2c 38 2e 36 20 32 30 2e 33 33 2c 38 2e 34 32 20 32 30 2e 33 32 2c 38 2e 32 33 43 32 31 2e 31 36 2c 37 2e 36 33 20 32 31 2e 38 38 2c 36 2e 38 37 20 32 32 2e 34 36 2c 36 5a 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 67 6f 6f 67 6c 65 20 70 6c 75 73 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 67 6f 6f 67 6c 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f Data Ascii: ,19.11 1.54,19.07C3.44,20.29 5.7,21 8.12,21C16,21 20.33,14.46 20.33,8.79C20.33,8.6 20.33,8.42 20.32,8.23C21.16,7.63 21.88,6.87 22.46,6Z" /> </symbol> ... google plus --> <symbol id="google" viewBox="0 0 24 24" preserveAspectRatio
2023-12-28 16:22:37 UTC	1369	IN	Data Raw: 33 33 20 31 39 2e 37 35 2c 31 30 2e 34 34 43 31 39 2e 37 35 2c 31 33 2e 37 32 20 31 37 2e 37 31 2c 31 37 2e 32 35 20 31 33 2e 32 35 2c 31 37 2e 32 35 5a 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 74 75 6d 62 6c 72 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 74 75 6d 62 6c 72 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 6e 59 4d 69 6e 20 6d 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 33 31 31 38 2c 31 39 2e 39 35 32 34 41 35 2e 31 32 36 31 2c 35 2e 31 32 36 31 2c 30 2c 30 2c 31 2c 31 34 2c 32 31 2e 30 37 34 35 68 2d 2e Data Ascii: 33 19.75,10.44C19.75,13.72 17.71,17.25 13.25,17.25Z" /> </symbol> ... tumblr --> <symbol id="tumblr" viewBox="0 0 24 24" preserveAspectRatio="xMinYMin meet"> <path d="M17.3118,19.9524A5.1261,5.1261,0,0,1,14,21.0745h-.
2023-12-28 16:22:37 UTC	1090	IN	Data Raw: 30 61 35 2e 31 33 31 39 2c 35 2e 31 33 31 39 2c 30 2c 30 2c 30 2c 33 2e 31 33 37 37 2d 31 2e 36 30 34 38 2c 35 2e 32 32 34 31 2c 35 2e 32 32 34 31 2c 30 2c 30 2c 30 2c 31 2e 33 34 38 32 2d 32 2e 33 38 31 37 2c 31 32 2e 30 33 37 33 2c 31 32 2e 30 33 37 33 2c 30 2c 30 2c 30 2c 2e 31 34 32 37 2d 32 2e 39 37 32 31 41 32 35 2e 36 38 36 32 2c 32 35 2e 36 38 36 32 2c 30 2c 30 2c 30 2c 32 30 2e 35 33 31 2c 31 30 2e 37 32 34 34 5a 4d 38 2e 31 38 39 34 2c 38 2e 32 38 35 63 2e 32 39 39 32 2d 2e 33 30 32 2e 33 38 31 39 2d 2e 33 31 33 35 2c 32 2e 32 35 34 35 2d 2e 33 31 33 35 2c 31 2e 36 38 31 2c 30 2c 31 2e 37 33 37 35 2e 30 30 33 37 2c 31 2e 39 38 34 35 2e 31 32 38 34 61 2e 38 34 33 31 2e 38 34 33 31 2c 30 2c 30 2c 31 2c 2e 35 31 31 39 2e 38 33 39 31 2e 39 30 33 32 Data Ascii: 0a5.1319,5.1319,0,0,0,3.1377-1.6048,5.2241,5.2241,0,0,0,1.3482-2.3817,12.0373,12.0373,0,0,0,.1427-2.9721A25.6862,25.6862,0,0,0,20.531,10.7244ZM8.1894,8.285c.2992-.302.3819-.3135,2.2545-.3135,1.681,0,1.7375.0037,1.9845.1284a.8431.8431,0,0,1,.5119.8391.9032

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50298	35.166.142.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:37 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:37 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Dec 2023 16:22:37 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0cd-00047b7a015212481b3da14f Strict-Transport-Security: max-age=15768000
2023-12-28 16:22:37 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50299	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:37 UTC	2998	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/upgrade/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:22:37 UTC	416	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:22:37 GMT Connection: close CF-Ray: 83cb24a5085d6c5b-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 607885 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:22:37 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50304	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:38 UTC	2998	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/upgrade/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:22:38 UTC	416	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:22:38 GMT Connection: close CF-Ray: 83cb24a86e2572fb-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 607894 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:22:38 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50307	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:38 UTC	2960	OUT	GET /images/icons/svg_dark/arrow_dropdown.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
2023-12-28 16:22:38 UTC	329	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:38 GMT Content-Type: image/svg+xml Content-Length: 315 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-13b" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 442 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24a9ce1c3590-DFW
2023-12-28 16:22:38 UTC	315	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50312	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:38 UTC	2678	OUT	GET /images/icons/svg_dark/arrow_dropdown.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
2023-12-28 16:22:39 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:39 GMT Content-Type: image/svg+xml Content-Length: 315 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-13b" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1929 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24adcf2b3168-DFW
2023-12-28 16:22:39 UTC	315	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50313	104.18.42.177	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:39 UTC	623	OUT	POST /ant_squire HTTP/1.1 Host: d-ipv6.mmapiws.com Connection: keep-alive Content-Length: 6806 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:39 UTC	6806	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 32 35 36 39 35 22 2c 22 63 61 6e 76 61 73 22 3a 7b 22 32 64 48 61 73 68 22 3a 33 32 32 36 36 32 32 38 39 37 2c 22 77 65 62 67 6c 22 3a 7b 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 5b 22 41 4e 47 4c 45 5f 69 6e 73 74 61 6e 63 65 64 5f 61 72 72 61 79 73 22 2c 22 45 58 54 5f 62 6c 65 6e 64 5f 6d 69 6e 6d 61 78 22 2c 22 45 58 54 5f 63 6f 6c 6f 72 5f 62 75 66 66 65 72 5f 68 61 6c 66 5f 66 6c 6f 61 74 22 2c 22 45 58 54 5f 66 6c 6f 61 74 5f 62 6c 65 6e 64 22 2c 22 45 58 54 5f 66 72 61 67 5f 64 65 70 74 68 22 2c 22 45 58 54 5f 73 68 61 64 65 72 5f 74 65 78 74 75 72 65 5f 6c 6f 64 22 2c 22 45 58 54 5f 74 65 78 74 75 72 65 5f 63 6f 6d 70 72 65 73 73 69 6f 6e 5f 62 70 74 63 22 2c 22 45 58 54 5f 74 65 78 74 75 72 65 5f 63 6f 6d Data Ascii: {"accountId":"25695","canvas":{"2dHash":3226622897,"webgl":{"extensions":["ANGLE_instanced_arrays","EXT_blend_minmax","EXT_color_buffer_half_float","EXT_float_blend","EXT_frag_depth","EXT_shader_texture_lod","EXT_texture_compression_bptc","EXT_texture_com
2023-12-28 16:22:39 UTC	317	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:39 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 91 Connection: close access-control-allow-origin: * CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 83cb24aef8a87301-DFW
2023-12-28 16:22:39 UTC	91	IN	Data Raw: 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 3b 30 31 38 63 62 31 33 63 2d 31 32 61 37 2d 37 64 61 30 2d 39 38 39 66 2d 33 66 61 34 63 30 34 32 66 65 63 32 3a 62 31 61 34 65 31 30 61 62 61 62 62 31 33 62 34 62 65 36 38 30 39 31 37 38 64 32 66 63 30 36 30 36 31 30 64 34 37 38 31 Data Ascii: mediafire.com;018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50318	104.18.42.177	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:39 UTC	352	OUT	GET /ant_squire HTTP/1.1 Host: d-ipv6.mmapiws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:40 UTC	259	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 28 Dec 2023 16:22:40 GMT Content-Length: 0 Connection: close CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 83cb24b44958eb2f-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50320	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:41 UTC	3002	OUT	GET /login/ HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
2023-12-28 16:22:41 UTC	341	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb24bd6e366bc6-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=0 Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN Server: cloudflare
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 Data Ascii: 7ff2 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"> <head><script async src="https://www.googletagmanager.com/gtag/js?id
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 3e 20 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 3e 4c 6f 67 69 6e 20 6f 72 20 53 69 67 6e 75 70 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 68 74 6d 6c 2c 62 6f 64 79 2c 64 69 76 2c 73 70 61 6e 2c 61 70 70 6c 65 74 2c 6f 62 6a 65 63 74 2c 69 66 72 61 6d 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 70 72 65 2c 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 62 69 67 2c 63 69 74 65 2c 63 6f 64 65 2c 64 65 6c 2c 64 66 6e 2c 65 6d 2c 66 6f 6e 74 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 74 2c 76 61 72 2c 62 2c 75 2c 69 Data Ascii: > </script> <title>Login or Signup</title> <style type="text/css">html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,font,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 69 61 72 79 3a 65 6d 70 74 79 2c 20 2e 67 62 74 6e 43 61 75 74 69 6f 6e 3a 65 6d 70 74 79 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 3b 7d 2e 67 62 74 6e 50 72 69 6d 61 72 79 7b 63 6f 6c 6f 72 3a 23 38 38 38 44 39 43 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 38 45 39 45 43 3b 7d 2e 67 62 74 6e 53 65 63 6f 6e 64 61 72 79 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 63 33 3b 7d 2e 67 62 74 6e 54 65 72 74 69 61 72 79 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 37 66 3b 7d 2e 67 62 74 6e 43 61 75 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 66 35 39 33 39 3b 7d 2e 67 62 74 6e 50 72 69 6d 61 Data Ascii: iary:empty, .gbtnCaution:empty{padding-right:12px;padding-left:12px;}.gbtnPrimary{color:#888D9C;background:#E8E9EC;}.gbtnSecondary{color:#fff;background:#6c3;}.gbtnTertiary{color:#fff;background:#07f;}.gbtnCaution{color:#fff;background:#ef5939;}.gbtnPrima
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 61 75 74 6f 20 35 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 73 2f 68 65 61 64 65 72 2f 6d 66 5f 6c 6f 67 6f 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 2e 73 76 67 29 20 63 65 6e 74 65 72 2f 32 35 30 70 78 20 61 75 74 6f 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 69 6e 70 75 74 2c 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 7d 2e 70 6f 70 75 70 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6f Data Ascii: auto 50px;background:url(//static.mediafire.com/images/backgrounds/header/mf_logo_full_color.svg) center/250px auto no-repeat;}input,button{display:block;margin-bottom:10px;}.popup-title{font-size:24px;line-height:24px;font-weight:300;white-space:nowrap;o
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 6b 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 7d 2e 70 77 64 53 74 72 65 6e 67 74 68 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 34 70 78 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 34 70 78 3b 7d 23 70 77 64 46 69 65 6c 64 2e 76 61 6c 69 64 20 2e 70 77 64 53 74 72 65 6e 67 74 68 2c 20 23 70 77 64 46 69 65 6c 64 2e 69 6e 76 61 6c 69 64 20 2e 70 77 64 53 74 72 65 6e 67 74 68 7b 72 69 67 68 74 3a 33 34 70 78 3b 7d 2e 70 77 64 54 69 70 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 7d 2e 70 77 64 54 69 70 73 20 2e 74 6f 6f 6c 74 69 70 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 31 36 70 78 3b 6d 61 72 67 Data Ascii: k;text-align:center;margin-top:15px;}.pwdStrength{position:absolute;right:4px;top:50%;margin-top:-14px;}#pwdField.valid .pwdStrength, #pwdField.invalid .pwdStrength{right:34px;}.pwdTips{display:block;padding:10px;}.pwdTips .tooltip{margin-left:-216px;marg
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 61 72 74 20 2e 73 74 65 70 30 20 70 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6f 70 61 63 69 74 79 3a 30 3b 68 65 69 67 68 74 3a 30 3b 7d 23 63 6f 6e 74 61 69 6e 65 72 2e 6e 65 77 53 74 61 72 74 20 2e 73 74 65 70 30 20 70 7b 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 30 73 20 6c 69 6e 65 61 72 20 2e 32 73 2c 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 6c 69 6e 65 61 72 20 2e 32 73 2c 68 65 69 67 68 74 20 30 73 20 6c 69 6e 65 61 72 20 30 73 3b 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 30 73 20 6c 69 6e 65 61 72 20 2e 32 73 2c 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 6c 69 6e 65 61 72 20 2e 32 73 2c 68 65 69 67 68 74 20 30 73 20 6c 69 6e 65 61 72 20 30 73 3b 20 2d 6d 73 Data Ascii: art .step0 p{visibility:hidden;opacity:0;height:0;}#container.newStart .step0 p{ -webkit-transition:opacity 0s linear .2s,visibility 0s linear .2s,height 0s linear 0s; -moz-transition:opacity 0s linear .2s,visibility 0s linear .2s,height 0s linear 0s; -ms
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 75 70 42 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 73 76 67 5f 64 61 72 6b 2f 74 77 69 74 74 65 72 2e 73 76 67 29 20 6c 65 66 74 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 63 6f 6c 6f 72 3a 23 31 44 41 31 46 32 3b 7d 23 67 6f 6f 67 6c 65 4c 6f 67 69 6e 42 74 6e 2c 20 23 67 6f 6f 67 6c 65 53 69 67 6e 75 70 42 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 73 2f 6c 69 67 68 74 62 6f 78 2f 6c 6f 67 69 6e 5f 73 69 67 6e 75 70 2f 73 69 67 6e 75 70 47 67 6c 2e 70 6e 67 29 20 6c 65 66 74 20 63 65 6e 74 65 72 Data Ascii: upBtn{background:url(//static.mediafire.com/images/icons/svg_dark/twitter.svg) left center no-repeat;color:#1DA1F2;}#googleLoginBtn, #googleSignupBtn{background:url(//static.mediafire.com/images/backgrounds/lightbox/login_signup/signupGgl.png) left center
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 77 69 64 74 68 3a 30 20 31 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 7d 2e 6d 66 54 4f 53 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 7d 2e 6d 66 54 4f 53 20 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 7b 77 69 64 74 68 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 34 70 78 3b 6c 65 66 74 3a 30 3b 7d 2e 6d 66 54 4f 53 20 6c 61 62 65 6c 20 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 2e 6d 66 54 4f 53 Data Ascii: width:0 1px;padding-bottom:10px;}.mfTOS label{display:block;position:relative;margin-bottom:20px;padding-left:20px;}.mfTOS label input[type="checkbox"]{width:auto!important;margin:0;position:absolute;top:4px;left:0;}.mfTOS label span{display:block;}.mfTOS
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 23 63 6f 6e 74 61 69 6e 65 72 2e 61 63 63 6f 75 6e 74 4e 6f 74 46 6f 75 6e 64 20 23 65 6d 61 69 6c 53 69 67 6e 75 70 2c 20 23 63 6f 6e 74 61 69 6e 65 72 2e 61 63 63 6f 75 6e 74 4e 6f 74 46 6f 75 6e 64 20 23 73 6f 63 69 61 6c 53 69 67 6e 75 70 2c 20 23 63 6f 6e 74 61 69 6e 65 72 2e 61 63 63 6f 75 6e 74 4e 6f 74 46 6f 75 6e 64 20 2e 54 4f 53 62 61 63 6b 4c 69 6e 6b 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 23 63 6f 6e 74 61 69 6e 65 72 2e 61 63 63 6f 75 6e 74 4e 6f 74 46 6f 75 6e 64 20 2e 54 4f 53 62 61 63 6b 4c 69 6e 6b 2e 63 61 6e 63 65 6c 53 69 67 6e 75 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 23 63 6f 6e 74 61 69 6e 65 72 2e 61 63 63 6f 75 6e 74 4e 6f 74 46 6f 75 6e 64 20 23 54 4f 53 73 6f 63 69 61 6c 3e 20 2e 77 61 72 6e 69 6e 67 42 6f 78 Data Ascii: #container.accountNotFound #emailSignup, #container.accountNotFound #socialSignup, #container.accountNotFound .TOSbackLink{display:none;}#container.accountNotFound .TOSbackLink.cancelSignup{display:block;}#container.accountNotFound #TOSsocial> .warningBox
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 7d 2e 73 6f 63 69 61 6c 49 6e 50 72 6f 67 72 65 73 73 20 64 69 76 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 73 76 67 5f 64 61 72 6b 2f 6c 6f 61 64 69 6e 67 5f 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 2e 73 76 67 29 20 30 20 63 65 6e 74 65 72 2f 32 34 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 73 6f 63 69 61 6c 49 6e 50 72 6f 67 72 65 73 73 20 64 69 76 20 61 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d Data Ascii: eight:0;visibility:hidden;}.socialInProgress div{font-weight:bold;margin-bottom:15px;padding-left:30px;background:url(//static.mediafire.com/images/icons/svg_dark/loading_indeterminate.svg) 0 center/24px no-repeat;}.socialInProgress div a{font-weight:norm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50323	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:41 UTC	2832	OUT	GET /js/gopro_121918.js HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
2023-12-28 16:22:41 UTC	425	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:41 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 15 Nov 2023 20:25:49 GMT Vary: Accept-Encoding ETag: W/"6555294d-6a5b" Expires: Sat, 27 Jan 2024 10:59:41 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 12213 Server: cloudflare CF-RAY: 83cb24bec981ea4f-DFW
2023-12-28 16:22:41 UTC	944	IN	Data Raw: 36 61 35 62 0d 0a 76 61 72 20 61 77 59 3d 30 3b 76 61 72 20 62 6f 47 3d 36 3b 76 61 72 20 62 6e 78 3d 33 30 3b 47 4c 42 5f 61 53 61 6c 65 73 54 61 78 5a 69 70 43 6f 64 65 73 3d 77 69 6e 64 6f 77 2e 47 4c 42 5f 61 53 61 6c 65 73 54 61 78 5a 69 70 43 6f 64 65 73 7c 7c 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 53 58 28 65 72 72 6f 72 43 6f 64 65 2c 70 61 79 6d 65 6e 74 54 79 70 65 2c 70 69 64 4e 75 6d 2c 74 61 72 67 65 74 49 44 2c 70 6f 73 74 64 61 74 61 29 7b 76 61 72 20 61 4f 7a 3d 28 28 65 72 72 6f 72 43 6f 64 65 3d 3d 35 33 29 7c 7c 28 65 72 72 6f 72 43 6f 64 65 3d 3d 35 34 29 29 3f 66 61 6c 73 65 3a 74 72 75 65 3b 24 2e 61 6a 61 78 28 7b 74 79 70 65 3a 27 50 4f 53 54 27 2c 75 72 6c 3a 27 2f 64 79 6e 61 6d 69 63 2f 6c 6f 67 5f 70 75 72 63 68 61 73 65 5f 65 72 Data Ascii: 6a5bvar awY=0;var boG=6;var bnx=30;GLB_aSalesTaxZipCodes=window.GLB_aSalesTaxZipCodes\|\|[];function SX(errorCode,paymentType,pidNum,targetID,postdata){var aOz=((errorCode==53)\|\|(errorCode==54))?false:true;$.ajax({type:'POST',url:'/dynamic/log_purchase_er
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 27 29 29 7b 76 61 72 20 56 48 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 70 61 79 6d 65 6e 74 5f 6d 65 74 68 6f 64 27 29 2e 76 61 6c 75 65 3b 7d 65 6c 73 65 7b 76 61 72 20 56 48 3d 27 6e 65 77 63 72 65 64 69 74 27 3b 7d 69 66 28 56 48 3d 3d 22 6e 65 77 63 72 65 64 69 74 22 7c 7c 56 48 3d 3d 22 70 72 65 76 63 72 65 64 69 74 22 29 7b 61 4f 79 3d 28 56 48 3d 3d 22 6e 65 77 63 72 65 64 69 74 22 29 3f 32 3a 31 3b 76 61 72 20 61 50 52 3d 24 28 27 23 63 72 65 64 69 74 5f 63 61 72 64 5f 66 6f 72 6d 27 29 3b 76 61 72 20 56 4d 3d 5b 5d 3b 69 66 28 56 48 3d 3d 27 70 72 65 76 63 72 65 64 69 74 27 29 7b 76 61 72 20 61 6f 4a 3d 27 23 61 63 6b 6e 6f 77 Data Ascii: tElementById('payment_method')){var VH=document.getElementById('payment_method').value;}else{var VH='newcredit';}if(VH=="newcredit"\|\|VH=="prevcredit"){aOy=(VH=="newcredit")?2:1;var aPR=$('#credit_card_form');var VM=[];if(VH=='prevcredit'){var aoJ='#acknow
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 2c 24 28 74 68 69 73 29 2e 76 61 6c 28 29 5d 29 3b 7d 62 72 65 61 6b 3b 63 61 73 65 20 27 62 69 6c 6c 69 6e 67 5f 61 64 64 72 65 73 73 31 27 3a 76 61 72 20 61 70 53 3d 24 28 74 68 69 73 29 2e 76 61 6c 28 29 2e 6c 65 6e 67 74 68 3b 69 66 28 61 70 53 3d 3d 30 7c 7c 61 70 53 3e 35 30 29 7b 56 4d 2e 70 75 73 68 28 5b 79 64 2c 22 42 69 6c 6c 69 6e 67 20 61 64 64 72 65 73 73 20 69 73 20 69 6e 76 61 6c 69 64 2e 22 2c 24 28 74 68 69 73 29 2e 76 61 6c 28 29 5d 29 3b 7d 62 72 65 61 6b 3b 63 61 73 65 20 27 62 69 6c 6c 69 6e 67 5f 63 69 74 79 27 3a 76 61 72 20 61 70 53 3d 24 28 74 68 69 73 29 2e 76 61 6c 28 29 2e 6c 65 6e 67 74 68 3b 69 66 28 61 70 53 3d 3d 30 7c 7c 61 70 53 3e 35 30 29 7b 56 4d 2e 70 75 73 68 28 5b 79 64 2c 22 42 69 6c 6c 69 6e 67 20 63 69 74 79 20 Data Ascii: ,$(this).val()]);}break;case 'billing_address1':var apS=$(this).val().length;if(apS==0\|\|apS>50){VM.push([yd,"Billing address is invalid.",$(this).val()]);}break;case 'billing_city':var apS=$(this).val().length;if(apS==0\|\|apS>50){VM.push([yd,"Billing city
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 69 6e 66 6f 27 26 26 24 28 27 23 63 6f 75 6e 74 72 79 5f 69 6e 66 6f 27 29 2e 76 61 6c 28 29 21 3d 27 55 53 27 29 7c 7c 28 79 64 3d 3d 27 62 69 6c 6c 69 6e 67 5f 70 6f 73 74 61 6c 5f 63 6f 64 65 5f 69 6e 66 6f 27 26 26 24 28 27 23 62 69 6c 6c 69 6e 67 5f 63 6f 75 6e 74 72 79 27 29 2e 76 61 6c 28 29 21 3d 27 55 53 27 29 29 7b 76 61 72 20 61 70 53 3d 24 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 69 66 28 61 70 53 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 56 4d 2e 70 75 73 68 28 5b 79 64 2c 22 4d 75 73 74 20 65 6e 74 65 72 20 61 20 70 6f 73 74 61 6c 20 63 6f 64 65 2e 22 2c 24 28 74 68 69 73 29 2e 76 61 6c 28 29 5d 29 3b 7d 7d 62 72 65 61 6b 3b 63 61 73 65 20 27 63 61 72 64 5f 6e 75 6d 62 65 72 27 3a 76 61 72 20 61 70 53 3d 24 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 69 Data Ascii: info'&&$('#country_info').val()!='US')\|\|(yd=='billing_postal_code_info'&&$('#billing_country').val()!='US')){var apS=$(this).val();if(apS.length==0){VM.push([yd,"Must enter a postal code.",$(this).val()]);}}break;case 'card_number':var apS=$(this).val();i
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 6c 65 6e 67 74 68 3d 3d 30 29 7b 76 61 72 20 61 70 75 3d 24 28 27 23 68 69 64 64 65 6e 5f 70 69 64 27 29 2e 76 61 6c 28 29 3b 53 58 28 31 30 31 2c 62 68 58 2c 61 70 75 2c 22 50 61 73 73 65 64 20 6a 73 20 63 68 65 63 6b 6f 75 74 20 76 61 6c 69 64 61 74 69 6f 6e 22 29 3b 69 66 28 77 69 6e 64 6f 77 2e 47 4c 42 5f 66 53 68 6f 77 50 72 6f 55 70 73 65 6c 6c 26 26 77 69 6e 64 6f 77 2e 47 4c 42 5f 66 53 68 6f 77 50 72 6f 55 70 73 65 6c 6c 28 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 72 65 74 75 72 6e 20 74 72 75 65 3b 7d 65 6c 73 65 7b 44 6f 48 69 64 65 28 27 63 68 65 63 6b 6f 75 74 5f 70 61 67 65 5f 70 72 6f 63 65 73 73 69 6e 67 27 29 3b 44 6f 53 68 6f 77 28 27 63 68 65 63 6b 6f 75 74 5f 70 61 67 65 5f 73 68 6f 77 27 29 3b 5a 69 28 30 2c 27 54 68 65 72 Data Ascii: length==0){var apu=$('#hidden_pid').val();SX(101,bhX,apu,"Passed js checkout validation");if(window.GLB_fShowProUpsell&&window.GLB_fShowProUpsell()){return false;}return true;}else{DoHide('checkout_page_processing');DoShow('checkout_page_show');Zi(0,'Ther
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 74 53 74 61 74 75 73 49 63 6f 6e 27 29 2e 61 64 64 43 6c 61 73 73 28 27 69 73 2d 6e 6f 74 56 61 6c 69 64 27 29 3b 24 28 27 23 27 2b 56 67 5b 69 5d 5b 30 5d 29 2e 61 64 64 43 6c 61 73 73 28 27 65 72 72 6f 72 27 29 3b 7d 65 6c 73 65 7b 24 28 56 6a 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 73 69 62 6c 69 6e 67 73 28 27 2e 46 6f 72 6d 2d 69 6e 70 75 74 45 72 72 6f 72 54 65 78 74 27 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 27 62 6c 6f 63 6b 27 29 3b 24 28 56 6a 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 73 69 62 6c 69 6e 67 73 28 27 2e 46 6f 72 6d 2d 69 6e 70 75 74 45 72 72 6f 72 54 65 78 74 27 29 2e 68 74 6d 6c 28 56 67 5b 69 5d 5b 31 5d 29 3b 24 28 56 6a 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 73 Data Ascii: tStatusIcon').addClass('is-notValid');$('#'+Vg[i][0]).addClass('error');}else{$(Vj).parent().parent().siblings('.Form-inputErrorText').css('display','block');$(Vj).parent().parent().siblings('.Form-inputErrorText').html(Vg[i][1]);$(Vj).parent().parent().s
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 22 29 3b 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 55 41 28 62 61 66 29 7b 74 72 79 7b 69 66 28 62 61 66 3d 3d 27 6e 65 77 63 72 65 64 69 74 27 29 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6e 65 77 5f 63 72 65 64 69 74 5f 63 61 72 64 5f 66 73 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 62 6c 6f 63 6b 27 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 73 61 76 65 64 5f 63 61 72 64 5f 66 73 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 72 64 5f 63 6f 64 65 32 27 29 2e 6e 61 6d 65 3d 27 6e 6f 6e 65 27 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 Data Ascii: ");}};function UA(baf){try{if(baf=='newcredit'){document.getElementById('new_credit_card_fs').style.display='block';document.getElementById('saved_card_fs').style.display='none';document.getElementById('card_code2').name='none';document.getElementById('ca
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 74 72 79 3d 24 28 27 23 63 6f 75 6e 74 72 79 5f 69 6e 66 6f 27 29 2e 76 61 6c 28 29 3b 73 43 75 72 72 65 6e 74 53 74 61 74 65 3d 24 28 27 23 73 74 61 74 65 5f 69 6e 66 6f 27 29 2e 76 61 6c 28 29 3b 73 43 75 72 72 65 6e 74 5a 69 70 3d 24 28 27 23 7a 69 70 5f 69 6e 66 6f 27 29 2e 76 61 6c 28 29 3b 61 66 3d 70 61 72 73 65 46 6c 6f 61 74 28 24 28 22 23 68 69 64 64 65 6e 5f 61 6d 6f 75 6e 74 22 29 2e 74 65 78 74 28 29 29 3b 66 54 61 78 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 70 5a 28 61 66 2c 73 43 75 72 72 65 6e 74 53 74 61 74 65 2c 73 43 75 72 72 65 6e 74 43 6f 75 6e 74 72 79 2c 73 43 75 72 72 65 6e 74 5a 69 70 29 29 3b 61 73 6b 3d 61 66 2b 66 54 61 78 3b 24 28 22 23 73 61 6c 65 73 5f 74 61 78 22 29 2e 74 65 78 74 28 22 24 22 2b 66 54 61 78 2e 74 6f 46 69 78 Data Ascii: try=$('#country_info').val();sCurrentState=$('#state_info').val();sCurrentZip=$('#zip_info').val();af=parseFloat($("#hidden_amount").text());fTax=parseFloat(apZ(af,sCurrentState,sCurrentCountry,sCurrentZip));ask=af+fTax;$("#sales_tax").text("$"+fTax.toFix
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 6e 65 27 29 3b 7d 65 6c 73 65 20 69 66 28 65 2e 74 61 72 67 65 74 2e 69 64 3d 3d 22 72 65 67 69 6f 6e 5f 69 6e 66 6f 22 29 7b 24 28 74 68 69 73 29 2e 73 69 62 6c 69 6e 67 73 28 27 2e 46 6f 72 6d 2d 69 6e 70 75 74 53 74 61 74 75 73 49 63 6f 6e 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 69 73 2d 76 61 6c 69 64 27 29 3b 7d 65 6c 73 65 7b 24 28 74 68 69 73 29 2e 73 69 62 6c 69 6e 67 73 28 27 2e 46 6f 72 6d 2d 69 6e 70 75 74 53 74 61 74 75 73 49 63 6f 6e 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 69 73 2d 76 61 6c 69 64 27 29 3b 24 28 74 68 69 73 29 2e 73 69 62 6c 69 6e 67 73 28 27 2e 46 6f 72 6d 2d 69 6e 70 75 74 53 74 61 74 75 73 49 63 6f 6e 27 29 2e 61 64 64 43 6c 61 73 73 28 27 69 73 2d 6e 6f 74 56 61 6c 69 64 27 29 3b 24 28 74 68 69 73 29 2e 61 Data Ascii: ne');}else if(e.target.id=="region_info"){$(this).siblings('.Form-inputStatusIcon').removeClass('is-valid');}else{$(this).siblings('.Form-inputStatusIcon').removeClass('is-valid');$(this).siblings('.Form-inputStatusIcon').addClass('is-notValid');$(this).a
2023-12-28 16:22:41 UTC	1369	IN	Data Raw: 65 6e 67 74 68 3e 3d 6d 69 6e 6c 65 6e 67 74 68 29 7b 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 73 69 62 6c 69 6e 67 73 28 27 2e 46 6f 72 6d 2d 69 6e 70 75 74 53 74 61 74 75 73 49 63 6f 6e 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 69 73 2d 6e 6f 74 56 61 6c 69 64 27 29 3b 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 73 69 62 6c 69 6e 67 73 28 27 2e 46 6f 72 6d 2d 69 6e 70 75 74 53 74 61 74 75 73 49 63 6f 6e 27 29 2e 61 64 64 43 6c 61 73 73 28 27 69 73 2d 76 61 6c 69 64 27 29 3b 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 65 72 72 6f 72 27 29 3b 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 73 69 62 6c 69 6e 67 73 28 27 2e 46 6f 72 6d 2d 69 6e 70 75 74 45 72 72 6f 72 54 65 78 74 27 29 2e 63 73 73 28 27 64 69 73 Data Ascii: ength>=minlength){$(this).parent().siblings('.Form-inputStatusIcon').removeClass('is-notValid');$(this).parent().siblings('.Form-inputStatusIcon').addClass('is-valid');$(this).removeClass('error');$(this).parent().siblings('.Form-inputErrorText').css('dis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50326	157.240.25.13	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:42 UTC	533	OUT	GET /en_US/sdk.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:42 UTC	1488	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: bbafd6a0cd25916b37ab2facc0302103 ETag: "8c10e69bc27779441e38fc0cbd8201ca" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * cross-origin-resource-policy: cross-origin content-md5: u6/WoM0lkWs3qy+swDAhAw== Expires: Thu, 28 Dec 2023 16:25:55 GMT Cache-Control: public,max-age=1200,stale-while-revalidate=3600 document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), gamepad=(), keyboard-map=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff reporting-endpoints: X-Frame-Options: DENY Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: yo+16FuzMJXV2UJ+Hbf79gpMBUpKFj2M5hfd5MWu4aLWoTkRlklkiq4bNQY4Y2NulP+FAsJ80BbXNAVKH7uq7w== Date: Thu, 28 Dec 2023 16:22:42 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 3093
2023-12-28 16:22:42 UTC	1	IN	Data Raw: 2f Data Ascii: /
2023-12-28 16:22:42 UTC	3092	IN	Data Raw: 2a 31 37 30 33 37 37 39 35 35 35 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 30 36 30 33 33 33 38 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1703779555,,JIT Construction: v1010603338,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50319	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:42 UTC	3104	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/login/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:22:42 UTC	417	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:22:42 GMT Connection: close CF-Ray: 83cb24c36ad14683-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 2431382 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:22:42 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50330	157.240.25.13	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:42 UTC	603	OUT	GET /en_US/sdk.js?hash=d62197507f1d9af64ac8f40ae2838b60 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mediafire.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:42 UTC	1504	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Access-Control-Expose-Headers: X-FB-Content-MD5 x-fb-content-md5: 71dfc72eaa61663b4c7f700d99c0cda6 ETag: "d4c200810321e623ac55ef30ef029dc2" Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * Access-Control-Allow-Origin: * cross-origin-resource-policy: cross-origin content-md5: cd/HLqphZjtMf3ANmcDNpg== Expires: Fri, 27 Dec 2024 14:46:27 GMT Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), gamepad=(), keyboard-map=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff reporting-endpoints: X-Frame-Options: DENY Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: mwL96lvf3Ygpbx8pUQyqM8sLCZVuYnHql2aHD4HnsjNWq9Z1MDw+n4mMitP9eA/8dNeB7l9chwWjU7QyiB9SCg== Date: Thu, 28 Dec 2023 16:22:42 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 304212
2023-12-28 16:22:42 UTC	1	IN	Data Raw: 2f Data Ascii: /
2023-12-28 16:22:43 UTC	16180	IN	Data Raw: 2a 31 37 30 33 37 37 34 37 38 37 2c 2c 4a 49 54 20 43 6f 6e 73 74 72 75 63 74 69 6f 6e 3a 20 76 31 30 31 30 36 30 33 33 33 38 2c 65 6e 5f 55 53 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 20 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 Data Ascii: 1703774787,,JIT Construction: v1010603338,en_US//** * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. * * You are hereby granted a non-exclusive, worldwide, royalty-free license to use, * copy, modify, and distribute this software
2023-12-28 16:22:43 UTC	16384	IN	Data Raw: 20 62 3d 49 28 61 2c 68 2c 63 2c 64 2c 65 2c 66 2c 67 29 3b 62 21 3d 3d 71 26 26 42 2e 70 75 73 68 28 48 28 61 29 2b 22 3a 22 2b 28 65 3f 22 20 22 3a 22 22 29 2b 62 29 7d 29 2c 74 3d 42 2e 6c 65 6e 67 74 68 3f 65 3f 22 7b 5c 6e 22 2b 66 2b 42 2e 6a 6f 69 6e 28 22 2c 5c 6e 22 2b 66 29 2b 22 5c 6e 22 2b 6b 2b 22 7d 22 3a 22 7b 22 2b 42 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 7d 22 3a 22 7b 7d 22 3b 67 2e 70 6f 70 28 29 3b 72 65 74 75 72 6e 20 74 7d 7d 3b 61 2e 73 74 72 69 6e 67 69 66 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 2c 68 3b 69 66 28 63 5b 74 79 70 65 6f 66 20 62 5d 26 26 62 29 69 66 28 28 68 3d 6e 2e 63 61 6c 6c 28 62 29 29 3d 3d 74 29 66 3d 62 3b 65 6c 73 65 20 69 66 28 68 3d 3d 78 29 7b 67 3d 7b 7d 3b 66 6f 72 Data Ascii: b=I(a,h,c,d,e,f,g);b!==q&&B.push(H(a)+":"+(e?" ":"")+b)}),t=B.length?e?"{\n"+f+B.join(",\n"+f)+"\n"+k+"}":"{"+B.join(",")+"}":"{}";g.pop();return t}};a.stringify=function(a,b,d){var e,f,g,h;if(c[typeof b]&&b)if((h=n.call(b))==t)f=b;else if(h==x){g={};for
2023-12-28 16:22:43 UTC	16384	IN	Data Raw: 6f 6c 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 66 62 5f 64 69 61 6c 6f 67 5f 63 6f 6e 74 65 6e 74 20 2e 64 69 61 6c 6f 67 5f 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 68 74 74 70 73 3a 5c 2f 5c 2f 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 5c 2f 72 73 72 63 2e 70 68 70 5c 2f 76 33 5c 2f 79 39 5c 2f 72 5c 2f 6a 4b 45 63 56 50 5a 46 6b 2d 32 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 5c 75 30 30 32 35 20 35 30 5c 75 30 30 32 35 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 34 61 34 61 34 61 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 Data Ascii: old;line-height:18px;text-align:center;vertical-align:middle}.fb_dialog_content .dialog_content{background:url(https:\/\/connect.facebook.net\/rsrc.php\/v3\/y9\/r\/jKEcVPZFk-2.gif) no-repeat 50\u0025 50\u0025;border:1px solid #4a4a4a;border-bottom:0;borde
2023-12-28 16:22:43 UTC	16384	IN	Data Raw: 72 6f 72 22 2c 5b 22 4d 61 6e 61 67 65 64 45 72 72 6f 72 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 61 62 65 6c 48 65 6c 70 65 72 73 2e 69 6e 68 65 72 69 74 73 4c 6f 6f 73 65 28 62 2c 61 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 62 7d 28 63 28 22 4d 61 6e 61 67 65 64 45 72 72 6f 72 22 29 29 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 61 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 73 70 72 69 6e 74 66 22 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 61 72 67 75 6d Data Ascii: ror",["ManagedError"],(function(a,b,c,d,e,f,g){a=function(a){babelHelpers.inheritsLoose(b,a);function b(b){return a.call(this,b)\|\|this}return b}(c("ManagedError"));g["default"]=a}),98);__d("sprintf",[],(function(a,b,c,d,e,f){function a(a){for(var b=argum
2023-12-28 16:22:43 UTC	1500	IN	Data Raw: 42 22 29 2e 70 72 6f 76 69 64 65 28 22 41 70 70 45 76 65 6e 74 73 22 2c 64 28 22 73 64 6b 2e 41 70 70 45 76 65 6e 74 73 22 29 2e 41 70 70 45 76 65 6e 74 73 29 7d 62 3d 7b 69 6e 69 74 3a 61 7d 3b 65 3d 62 3b 67 5b 22 64 65 66 61 75 6c 74 22 5d 3d 65 7d 29 2c 39 38 29 3b 0a 5f 5f 64 28 22 73 64 6b 2e 41 75 74 68 53 74 61 74 65 22 2c 5b 22 73 64 6b 2e 41 75 74 68 55 74 69 6c 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3d 69 28 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 61 3d 7b 69 67 41 75 74 68 52 65 73 70 6f 6e 73 65 3a 6e 75 6c 6c 2c 66 62 41 75 74 68 52 65 73 70 6f 6e 73 65 3a 6e 75 6c 6c 2c 66 62 4c 6f 67 69 6e 53 74 61 74 75 73 3a 6e 75 6c 6c Data Ascii: B").provide("AppEvents",d("sdk.AppEvents").AppEvents)}b={init:a};e=b;g["default"]=e}),98);__d("sdk.AuthState",["sdk.AuthUtils"],(function(a,b,c,d,e,f,g){"use strict";var h=i();function i(){var a={igAuthResponse:null,fbAuthResponse:null,fbLoginStatus:null
2023-12-28 16:22:43 UTC	14884	IN	Data Raw: 5b 31 5d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 68 3d 61 3b 61 3d 63 28 22 51 75 65 72 79 53 74 72 69 6e 67 22 29 2e 65 6e 63 6f 64 65 28 7b 62 61 73 65 5f 64 6f 6d 61 69 6e 3a 68 21 3d 3d 6e 75 6c 6c 26 26 68 21 3d 3d 22 2e 22 3f 68 3a 22 22 7d 29 3b 76 61 72 20 62 3d 6e 65 77 20 44 61 74 65 28 29 3b 62 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 62 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2b 31 29 3b 6a 28 22 66 62 6d 5f 22 2c 61 2c 62 2e 67 65 74 54 69 6d 65 28 29 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 72 65 74 75 72 6e 20 68 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 61 3d 6b 28 22 66 62 6d 5f 22 29 3b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 68 3d 3d 3d 6e 75 6c 6c 29 7b 61 3d 63 28 22 51 75 65 72 79 53 74 72 69 6e 67 22 29 2e Data Ascii: [1]}function a(a){h=a;a=c("QueryString").encode({base_domain:h!==null&&h!=="."?h:""});var b=new Date();b.setFullYear(b.getFullYear()+1);j("fbm_",a,b.getTime(),!0)}function b(){return h}function l(){var a=k("fbm_");if(a!=null&&h===null){a=c("QueryString").
2023-12-28 16:22:43 UTC	16384	IN	Data Raw: 6c 69 6e 65 6e 6f 29 3b 62 2e 63 6f 6c 75 6d 6e 3d 3d 6e 75 6c 6c 26 26 61 2e 63 6f 6c 6e 6f 21 3d 6e 75 6c 6c 26 26 28 62 2e 63 6f 6c 75 6d 6e 3d 61 2e 63 6f 6c 6e 6f 29 3b 62 2e 67 75 61 72 64 4c 69 73 74 3d 5b 61 61 5d 3b 62 2e 6c 6f 67 67 69 6e 67 53 6f 75 72 63 65 3d 22 4f 4e 45 52 52 4f 52 22 3b 28 61 3d 76 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 72 65 70 6f 72 74 45 72 72 6f 72 28 62 29 7d 76 61 72 20 77 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 74 79 70 65 6f 66 20 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 3b 69 66 28 76 21 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 3d 62 3b 61 2e 61 64 64 45 76 65 6e Data Ascii: lineno);b.column==null&&a.colno!=null&&(b.column=a.colno);b.guardList=[aa];b.loggingSource="ONERROR";(a=v)===null\|\|a===void 0?void 0:a.reportError(b)}var w={setup:function(b){if(typeof a.addEventListener!=="function")return;if(v!=null)return;v=b;a.addEven
2023-12-28 16:22:43 UTC	16384	IN	Data Raw: 30 3f 62 3a 5b 5d 3b 61 2e 74 61 61 6c 4f 70 63 6f 64 65 73 2e 70 75 73 68 28 67 2e 50 52 45 56 49 4f 55 53 5f 44 49 52 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 46 3d 7b 65 72 72 3a 68 2c 45 72 72 6f 72 42 72 6f 77 73 65 72 43 6f 6e 73 6f 6c 65 3a 6a 2c 45 72 72 6f 72 44 79 6e 61 6d 69 63 44 61 74 61 3a 6b 2c 45 72 72 6f 72 46 69 6c 74 65 72 3a 73 2c 45 72 72 6f 72 47 6c 6f 62 61 6c 45 76 65 6e 74 48 61 6e 64 6c 65 72 3a 77 2c 45 72 72 6f 72 47 75 61 72 64 3a 54 2c 45 72 72 6f 72 47 75 61 72 64 53 74 61 74 65 3a 79 2c 45 72 72 6f 72 4d 65 74 61 64 61 74 61 3a 41 2c 45 72 72 6f 72 4e 6f 72 6d 61 6c 69 7a 65 55 74 69 6c 73 3a 4d 2c 45 72 72 6f 72 50 6f 73 74 65 72 3a 74 61 2c 45 72 72 6f 72 50 75 62 53 75 62 3a 52 2c 45 72 72 6f 72 53 65 72 69 61 6c 69 7a 65 Data Ascii: 0?b:[];a.taalOpcodes.push(g.PREVIOUS_DIR);return a}};F={err:h,ErrorBrowserConsole:j,ErrorDynamicData:k,ErrorFilter:s,ErrorGlobalEventHandler:w,ErrorGuard:T,ErrorGuardState:y,ErrorMetadata:A,ErrorNormalizeUtils:M,ErrorPoster:ta,ErrorPubSub:R,ErrorSerialize
2023-12-28 16:22:43 UTC	14884	IN	Data Raw: 2c 65 78 70 69 72 65 73 49 6e 3a 4e 75 6d 62 65 72 28 65 2e 65 78 70 69 72 65 73 5f 69 6e 29 2c 73 69 67 6e 65 64 52 65 71 75 65 73 74 3a 65 2e 73 69 67 6e 65 64 5f 72 65 71 75 65 73 74 2c 67 72 61 70 68 44 6f 6d 61 69 6e 3a 65 2e 67 72 61 70 68 5f 64 6f 6d 61 69 6e 7d 3b 65 2e 65 6e 66 6f 72 63 65 5f 68 74 74 70 73 21 3d 6e 75 6c 6c 26 26 63 28 22 73 64 6b 2e 52 75 6e 74 69 6d 65 22 29 2e 73 65 74 45 6e 66 6f 72 63 65 48 74 74 70 73 28 21 30 29 3b 65 2e 64 61 74 61 5f 61 63 63 65 73 73 5f 65 78 70 69 72 61 74 69 6f 6e 5f 74 69 6d 65 21 3d 6e 75 6c 6c 26 26 28 67 2e 64 61 74 61 5f 61 63 63 65 73 73 5f 65 78 70 69 72 61 74 69 6f 6e 5f 74 69 6d 65 3d 4e 75 6d 62 65 72 28 65 2e 64 61 74 61 5f 61 63 63 65 73 73 5f 65 78 70 69 72 61 74 69 6f 6e 5f 74 69 6d 65 Data Ascii: ,expiresIn:Number(e.expires_in),signedRequest:e.signed_request,graphDomain:e.graph_domain};e.enforce_https!=null&&c("sdk.Runtime").setEnforceHttps(!0);e.data_access_expiration_time!=null&&(g.data_access_expiration_time=Number(e.data_access_expiration_time

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50331	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:42 UTC	2907	OUT	GET /images/icons/svg_dark/twitter.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
2023-12-28 16:22:42 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:42 GMT Content-Type: image/svg+xml Content-Length: 952 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3b8" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2923 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24c5ca8d2ccc-DFW
2023-12-28 16:22:42 UTC	952	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50332	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:42 UTC	2921	OUT	GET /images/icons/svg_dark/loading_indeterminate.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
2023-12-28 16:22:42 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:42 GMT Content-Type: image/svg+xml Content-Length: 570 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-23a" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1661 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24c5ca8f2ca6-DFW
2023-12-28 16:22:42 UTC	570	IN	Data Raw: 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 6c 6f 61 64 65 72 2d 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0a 20 20 20 20 20 77 69 64 74 68 3d 22 34 30 70 78 22 20 68 65 69 67 68 74 3d 22 34 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 35 30 20 35 30 3b 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d Data Ascii: <svg version="1.1" id="loader-1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="40px" height="40px" viewBox="0 0 50 50" style="enable-background:new 0 0 50 50;" xml:space="preserve"> <path fill=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50334	142.250.138.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:42 UTC	1241	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LeGuMUSAAAAACGl-wDE9NNLuUZygPg7iNvMGtXD&co=aHR0cHM6Ly93d3cubWVkaWFmaXJlLmNvbTo0NDM.&hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&size=normal&cb=1h1hgawztxq1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZXPBnEhLgloLxIQvlvVnbYF6g_esAiJVVgMX2e5VMArwNUh90ArkuCPOkbpAwZtN2A360aHN1cdPBB9yzE; NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:43 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 28 Dec 2023 16:22:43 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-o6RJsTfK7QXW-PQdLNsDcw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:43 UTC	361	IN	Data Raw: 32 61 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2a4a<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2023-12-28 16:22:43 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2023-12-28 16:22:43 UTC	1252	IN	Data Raw: 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 Data Ascii: boto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2023-12-28 16:22:43 UTC	1252	IN	Data Raw: 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-sty
2023-12-28 16:22:43 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: to/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2023-12-28 16:22:43 UTC	1252	IN	Data Raw: 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d Data Ascii: * vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-
2023-12-28 16:22:43 UTC	1252	IN	Data Raw: 54 66 4b 37 51 58 57 2d 50 51 64 4c 4e 73 44 63 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 75 2d 78 63 71 33 50 4f 43 57 46 6c 43 72 33 78 38 5f 49 50 78 67 50 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 6f 36 52 4a 73 Data Ascii: TfK7QXW-PQdLNsDcw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js" nonce="o6RJs
2023-12-28 16:22:43 UTC	1252	IN	Data Raw: 5a 6e 52 5f 5f 36 45 70 45 6c 62 69 6d 67 7a 33 39 65 6b 33 69 31 47 67 51 6f 5f 35 61 51 43 47 4a 56 74 50 43 68 59 55 43 62 71 37 61 4a 78 30 67 48 56 53 30 79 41 4f 53 53 4e 53 33 44 73 69 77 61 71 4a 52 59 5f 78 7a 67 62 4a 65 31 39 52 59 50 7a 6b 65 76 34 4b 55 61 6e 4f 38 42 4c 47 63 58 50 70 73 4f 6f 41 4a 55 66 32 34 47 79 64 42 6b 6d 77 58 36 4a 6d 51 6a 77 52 75 66 76 4b 39 77 6d 79 6f 2d 66 48 54 30 38 75 46 7a 49 51 7a 49 7a 52 51 4d 4a 34 79 71 63 67 66 5f 41 51 31 61 47 51 6c 6d 45 4b 30 61 64 75 38 4e 64 65 72 6a 78 62 62 35 4f 56 38 4b 59 61 74 79 67 33 72 49 5f 43 67 54 31 37 50 4f 52 59 56 55 51 36 50 49 38 47 51 42 50 49 64 70 49 53 38 67 41 4c 53 39 61 6b 56 77 46 75 71 61 74 4b 31 50 49 72 75 61 4f 41 49 6c 55 4c 34 6d 6f 65 71 35 33 Data Ascii: ZnR__6EpElbimgz39ek3i1GgQo_5aQCGJVtPChYUCbq7aJx0gHVS0yAOSSNS3DsiwaqJRY_xzgbJe19RYPzkev4KUanO8BLGcXPpsOoAJUf24GydBkmwX6JmQjwRufvK9wmyo-fHT08uFzIQzIzRQMJ4yqcgf_AQ1aGQlmEK0adu8Nderjxbb5OV8KYatyg3rI_CgT17PORYVUQ6PI8GQBPIdpIS8gALS9akVwFuqatK1PIruaOAIlUL4moeq53
2023-12-28 16:22:43 UTC	1252	IN	Data Raw: 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 54 53 46 56 72 52 57 6c 77 61 46 46 31 57 6e 46 59 65 55 78 36 52 45 35 42 4d 55 78 6a 54 32 70 4a 57 54 56 51 4f 54 4e 76 55 32 4a 4a 4d 45 39 4c 54 55 74 73 64 46 6c 5a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 63 31 6c 35 57 55 59 72 56 55 63 33 61 32 68 52 55 56 5a 72 4b 31 6b 77 63 6b 4e 46 56 48 64 6c 55 6e 64 49 54 58 6c 79 4f 55 52 46 4d 7a 56 4e 64 31 59 72 63 46 68 42 4f 45 4a 32 5a 47 77 33 65 58 6c 48 54 53 74 76 56 6a 6b 35 4b 33 6c 34 4e 45 39 77 56 6a 4d 72 62 54 56 45 4c 32 63 30 62 7a 4a 74 4e 6a 51 31 55 47 6c 49 4d 47 64 46 55 30 39 78 53 6a 64 43 55 55 31 6f 61 48 52 4e 51 6d 73 34 4e 30 35 5a 4d 58 4a 51 51 33 Data Ascii: x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9TSFVrRWlwaFF1WnFYeUx6RE5BMUxjT2pJWTVQOTNvU2JJME9LTUtsdFlZLmpz\x22,\x22\x22,\x22c1l5WUYrVUc3a2hRUVZrK1kwckNFVHdlUndITXlyOURFMzVNd1YrcFhBOEJ2ZGw3eXlHTStvVjk5K3l4NE9wVjMrbTVEL2c0bzJtNjQ1UGlIMGdFU09xSjdCUU1oaHRNQms4N05ZMXJQQ3
2023-12-28 16:22:43 UTC	457	IN	Data Raw: 42 4f 46 42 71 61 6b 52 76 57 45 70 69 59 6c 4a 72 54 30 39 4d 56 55 78 78 55 45 52 30 54 6d 31 70 5a 6b 4a 4e 4d 33 4d 78 56 6c 68 6a 65 69 39 45 61 58 4e 68 62 46 42 77 56 6a 68 72 51 7a 56 54 4d 6d 4d 78 5a 6d 5a 59 54 30 64 34 4e 56 51 77 56 54 5a 70 62 6b 67 32 4e 32 5a 72 56 31 52 52 61 44 6c 69 55 58 46 46 61 30 4e 6d 55 30 49 72 61 45 70 45 61 47 46 35 4c 32 78 6a 5a 58 42 42 61 46 70 42 4e 55 52 49 64 79 39 55 51 6b 52 72 53 6c 6c 72 61 54 46 76 56 45 68 47 4e 33 52 4a 54 6a 4a 59 51 6b 70 68 5a 6d 78 6f 53 54 52 32 54 45 5a 73 53 6d 52 4d 52 33 63 72 61 31 46 50 62 6a 51 72 4c 7a 5a 51 64 44 56 4e 4e 55 56 56 4e 46 70 48 61 30 4e 4e 59 58 4a 55 59 54 5a 46 62 32 70 55 4d 55 70 50 57 45 46 51 54 6d 4a 35 51 79 39 46 4d 31 4a 36 4d 44 55 34 51 31 Data Ascii: BOFBqakRvWEpiYlJrT09MVUxxUER0Tm1pZkJNM3MxVlhjei9EaXNhbFBwVjhrQzVTMmMxZmZYT0d4NVQwVTZpbkg2N2ZrV1RRaDliUXFFa0NmU0IraEpEaGF5L2xjZXBBaFpBNURIdy9UQkRrSllraTFvVEhGN3RJTjJYQkphZmxoSTR2TEZsSmRMR3cra1FPbjQrLzZQdDVNNUVVNFpHa0NNYXJUYTZFb2pUMUpPWEFQTmJ5Qy9FM1J6MDU4Q1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50337	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:43 UTC	2685	OUT	GET /images/icons/svg_dark/loading_indeterminate.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
2023-12-28 16:22:43 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:43 GMT Content-Type: image/svg+xml Content-Length: 570 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-23a" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 7113 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24c90da8eab4-DFW
2023-12-28 16:22:43 UTC	570	IN	Data Raw: 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 6c 6f 61 64 65 72 2d 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0a 20 20 20 20 20 77 69 64 74 68 3d 22 34 30 70 78 22 20 68 65 69 67 68 74 3d 22 34 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 35 30 20 35 30 3b 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d Data Ascii: <svg version="1.1" id="loader-1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" width="40px" height="40px" viewBox="0 0 50 50" style="enable-background:new 0 0 50 50;" xml:space="preserve"> <path fill=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50338	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:43 UTC	2671	OUT	GET /images/icons/svg_dark/twitter.svg HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
2023-12-28 16:22:43 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:43 GMT Content-Type: image/svg+xml Content-Length: 952 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-3b8" Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 8173 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb24c91f1c4677-DFW
2023-12-28 16:22:43 UTC	952	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" width="24" height="24"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50339	142.250.138.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:43 UTC	1164	OUT	GET /recaptcha/api2/bframe?hl=en&v=u-xcq3POCWFlCr3x8_IPxgPu&k=6LeGuMUSAAAAACGl-wDE9NNLuUZygPg7iNvMGtXD HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZXPBnEhLgloLxIQvlvVnbYF6g_esAiJVVgMX2e5VMArwNUh90ArkuCPOkbpAwZtN2A360aHN1cdPBB9yzE; NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:44 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 28 Dec 2023 16:22:44 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-gFSnPr3DMtPdqIyeSRrkQw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:44 UTC	361	IN	Data Raw: 31 63 36 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1c68<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2023-12-28 16:22:44 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f Data Ascii: to/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//
2023-12-28 16:22:44 UTC	1252	IN	Data Raw: 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c Data Ascii: oboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2023-12-28 16:22:44 UTC	1252	IN	Data Raw: 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-st
2023-12-28 16:22:44 UTC	1252	IN	Data Raw: 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d Data Ascii: oto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2023-12-28 16:22:44 UTC	1252	IN	Data Raw: 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 Data Ascii: /* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168
2023-12-28 16:22:44 UTC	659	IN	Data Raw: 50 72 33 44 4d 74 50 64 71 49 79 65 53 52 72 6b 51 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 75 2d 78 63 71 33 50 4f 43 57 46 6c 43 72 33 78 38 5f 49 50 78 67 50 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 67 46 53 6e Data Ascii: Pr3DMtPdqIyeSRrkQw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/u-xcq3POCWFlCr3x8_IPxgPu/recaptcha__en.js" nonce="gFSn
2023-12-28 16:22:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50341	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:47 UTC	3083	OUT	GET /file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g36FastPopSessionRequestNumber=1; ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuidtime_484470=1703780521; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; active_template::484470=orig_site.1703780521; ezopvc_484470=1; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojo6ln.0.3.3; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780555.28.0.0; _ga=GA1.2.1411026819.1703780523; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0
2023-12-28 16:22:47 UTC	984	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb24e24e56463b-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0 Expires: 0 Set-Cookie: d5v3=1; expires=Sun, 31-Dec-2023 16:22:47 GMT; Max-Age=259200; path=/; domain=.mediafire.com; HttpOnly Strict-Transport-Security: max-age=0 Vary: Accept-Encoding Pragma: no-cache Set-Cookie: conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; expires=Sat, 27-Jan-2024 16:22:47 GMT; Max-Age=2592000; path=/; domain=.mediafire.com X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow Server: cloudflare
2023-12-28 16:22:47 UTC	385	IN	Data Raw: 31 65 39 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 Data Ascii: 1e9d<!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8"/> <meta http-equiv="x-ua-compatible" content="ie=edge"/> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/> <title>ClassicShellSetu
2023-12-28 16:22:47 UTC	1369	IN	Data Raw: 2c 20 73 68 61 72 65 20 46 69 6c 65 73 2c 20 70 68 6f 74 6f 20 62 61 63 6b 75 70 2c 20 70 68 6f 74 6f 20 73 68 61 72 69 6e 67 2c 20 66 74 70 20 72 65 70 6c 61 63 65 6d 65 6e 74 2c 20 63 72 6f 73 73 20 70 6c 61 74 66 6f 72 6d 2c 20 72 65 6d 6f 74 65 20 61 63 63 65 73 73 2c 20 6d 6f 62 69 6c 65 20 61 63 63 65 73 73 2c 20 73 65 6e 64 20 6c 61 72 67 65 20 66 69 6c 65 73 2c 20 72 65 63 6f 76 65 72 20 66 69 6c 65 73 2c 20 66 69 6c 65 20 76 65 72 73 69 6f 6e 69 6e 67 2c 20 75 6e 64 65 6c 65 74 65 2c 20 57 69 6e 64 6f 77 73 2c 20 50 43 2c 20 4d 61 63 2c 20 4f 53 20 58 2c 20 4c 69 6e 75 78 2c 20 69 50 68 6f 6e 65 2c 20 69 50 61 64 2c 20 41 6e 64 72 6f 69 64 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e Data Ascii: , share Files, photo backup, photo sharing, ftp replacement, cross platform, remote access, mobile access, send large files, recover files, file versioning, undelete, Windows, PC, Mac, OS X, Linux, iPhone, iPad, Android"/> <meta name="description" con
2023-12-28 16:22:47 UTC	1369	IN	Data Raw: 5f 69 6d 61 67 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 4d 65 64 69 61 46 69 72 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 2f 66 69 6c 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 Data Ascii: _image"/> <meta name="twitter:site" content="@MediaFire"/> <meta name="twitter:url" content="https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file"/> <meta name="twitter:title" content="ClassicShellSetup_4
2023-12-28 16:22:47 UTC	1369	IN	Data Raw: 37 3b 2d 2d 6d 66 2d 62 6c 61 63 6b 3a 23 30 45 31 31 31 36 3b 2d 2d 6d 66 2d 67 72 61 79 31 3a 23 31 41 31 45 32 38 3b 2d 2d 6d 66 2d 67 72 61 79 32 3a 23 32 32 32 38 33 35 3b 2d 2d 6d 66 2d 67 72 61 79 33 3a 23 33 44 34 32 34 45 3b 2d 2d 6d 66 2d 67 72 61 79 34 3a 23 35 37 35 42 36 35 3b 2d 2d 6d 66 2d 67 72 61 79 35 3a 23 37 32 37 36 37 45 3b 2d 2d 6d 66 2d 67 72 61 79 36 3a 23 38 43 38 46 39 36 3b 2d 2d 6d 66 2d 67 72 61 79 37 3a 23 41 37 41 39 41 45 3b 2d 2d 6d 66 2d 67 72 61 79 38 3a 23 43 31 43 33 43 37 3b 2d 2d 6d 66 2d 67 72 61 79 39 3a 23 44 41 44 45 45 30 3b 2d 2d 6d 66 2d 67 72 61 79 31 30 3a 23 45 39 45 41 45 42 3b 2d 2d 6d 66 2d 67 72 61 79 31 31 3a 23 46 34 46 34 46 35 3b 2d 2d 6d 66 2d 67 72 61 79 31 32 3a 23 46 36 46 36 46 37 3b 2d 2d 6d Data Ascii: 7;--mf-black:#0E1116;--mf-gray1:#1A1E28;--mf-gray2:#222835;--mf-gray3:#3D424E;--mf-gray4:#575B65;--mf-gray5:#72767E;--mf-gray6:#8C8F96;--mf-gray7:#A7A9AE;--mf-gray8:#C1C3C7;--mf-gray9:#DADEE0;--mf-gray10:#E9EAEB;--mf-gray11:#F4F4F5;--mf-gray12:#F6F6F7;--m
2023-12-28 16:22:47 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d Data Ascii: transform:none}[type=reset],[type=submit],button,html [type=button]{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]
2023-12-28 16:22:47 UTC	1369	IN	Data Raw: 67 68 74 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 77 65 69 67 68 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 21 69 6d 70 6f 72 74 61 6e 74 7d 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 30 30 37 30 46 30 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 66 2d 62 6c 75 65 34 29 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 32 33 36 39 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 66 2d 62 6c 75 65 32 29 7d 75 6c 2c 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 70 2c 66 6f 72 6d 7b 6d 61 72 67 69 6e 3a 30 7d 74 65 78 74 61 72 65 61 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a Data Ascii: ght:normal!important}.font-weight-bold{font-weight:bold!important}a{text-decoration:none;color:#0070F0;color:var(--mf-blue4)}a:hover{color:#002369;color:var(--mf-blue2)}ul,ol{list-style:none;padding:0}p,form{margin:0}textarea{line-height:1.6;border-width:
2023-12-28 16:22:47 UTC	615	IN	Data Raw: 30 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 Data Ascii: 05),rgba(0,0,0,.05));background-image:-moz-linear-gradient(top,rgba(0,0,0,.05),rgba(0,0,0,.05));background-image:-ms-linear-gradient(top,rgba(0,0,0,.05),rgba(0,0,0,.05));background-image:-o-linear-gradient(top,rgba(0,0,0,.05),rgba(0,0,0,.05));background-i
2023-12-28 16:22:47 UTC	1369	IN	Data Raw: 36 31 32 38 0d 0a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 30 38 29 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 30 38 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 30 38 29 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 30 38 29 29 7d 61 2e 67 2d 42 74 6e 2d 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 61 2e 67 2d 42 74 6e 2d 2d 74 65 72 74 69 61 72 79 3a 68 6f 76 65 72 2c 61 2e 67 2d 42 74 6e 2d 2d 61 6c 74 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 61 2e 67 2d 42 74 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 Data Ascii: 6128-linear-gradient(top,rgba(255,255,255,.08),rgba(255,255,255,.08));background-image:linear-gradient(top,rgba(255,255,255,.08),rgba(255,255,255,.08))}a.g-Btn--primary:hover,a.g-Btn--tertiary:hover,a.g-Btn--alt:hover{color:#fff}a.g-Btn--secondary:hover
2023-12-28 16:22:47 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 33 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 23 45 38 45 39 45 43 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 30 20 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 20 75 72 6c 28 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 73 76 67 5f 64 61 72 6b 2f 61 72 72 6f 77 5f 64 72 6f 70 64 6f 77 6e 2e 73 76 67 29 20 72 69 67 68 74 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 63 6f 6c 6f 72 3a 23 32 38 32 46 33 44 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 20 30 20 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 Data Ascii: height:30px;border-radius:0;border:0 solid #E8E9EC;border-width:0 0 1px;background:#fff url(/images/icons/svg_dark/arrow_dropdown.svg) right center no-repeat;color:#282F3D;margin:0;padding:0 20px 0 0;box-sizing:border-box;-webkit-appearance:none;-moz-appe
2023-12-28 16:22:47 UTC	1369	IN	Data Raw: 64 3a 23 66 66 66 3b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 2c 30 70 78 20 31 70 78 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 2c 69 6e 73 65 74 20 30 20 31 70 78 20 30 20 30 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 32 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 2c 30 70 78 20 31 70 78 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 2c 69 6e 73 65 74 20 30 20 31 70 78 Data Ascii: d:#fff;width:12px;height:12px;position:absolute;-moz-box-shadow:0px 0px 0px 1px rgba(0,0,0,.05),0px 1px 5px 0 rgba(0,0,0,0.2),inset 0 1px 0 0 rgba(255,255,255,.2);-webkit-box-shadow:0px 0px 0px 1px rgba(0,0,0,.05),0px 1px 5px 0 rgba(0,0,0,0.2),inset 0 1px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50345	104.22.75.216	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:47 UTC	649	OUT	GET /tag?o=5678961798414336&upapi=true HTTP/1.1 Host: btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"6beabecd088580e4d3efbe461e2527e2" If-Modified-Since: Thu, 28 Dec 2023 15:50:06 GMT
2023-12-28 16:22:48 UTC	389	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:22:48 GMT Connection: close Cache-Control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300 Etag: "6beabecd088580e4d3efbe461e2527e2" Last-Modified: Thu, 28 Dec 2023 15:50:06 GMT Vary: Origin Via: 1.1 google CF-Cache-Status: HIT Age: 1921 Server: cloudflare CF-RAY: 83cb24e72956477b-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50346	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:48 UTC	598	OUT	POST /saa.go HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 4427 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:48 UTC	4427	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 2f 66 69 6c 65 22 2c 22 77 63 22 3a 2d 31 2c 22 6e 70 76 22 3a 74 72 75 65 2c 22 61 73 6c 22 3a 7b 22 70 61 67 65 22 3a 66 61 6c 73 65 2c 22 64 69 73 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 76 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 6f 75 74 73 74 72 65 61 6d 22 3a 66 61 6c 73 65 2c 22 61 64 73 65 6e 73 65 22 3a 66 61 6c 73 65 7d 2c 22 6f 72 69 67 22 3a 74 72 75 65 2c 22 70 64 22 3a 7b 22 6d 65 74 61 73 22 3a 5b 7b 22 63 68 61 72 73 65 74 22 3a 22 75 74 66 2d 38 22 7d 2c 7b 22 68 74 74 70 2d 65 71 75 69 76 22 3a 22 Data Ascii: {"url":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file","wc":-1,"npv":true,"asl":{"page":false,"display":false,"video":false,"outstream":false,"adsense":false},"orig":true,"pd":{"metas":[{"charset":"utf-8"},{"http-equiv":"
2023-12-28 16:22:48 UTC	620	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS Access-Control-Allow-Origin: https://www.mediafire.com Access-Control-Max-Age: 1728000 Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Content-Type: text/javascript Date: Thu, 28 Dec 2023 16:22:48 GMT Expires: Wed, 27 Dec 2023 16:22:48 GMT Server: Apache/2.4.39 (Ubuntu) Vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers X-Robots-Tag: noindex Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:48 UTC	2372	IN	Data Raw: 32 62 63 32 0d 0a 76 61 72 20 65 7a 41 6e 61 6c 79 74 69 63 73 44 65 66 69 6e 65 20 3d 20 22 76 61 72 20 5f 65 7a 5f 73 61 20 3d 20 74 72 75 65 3b 76 61 72 20 5f 5f 65 7a 3d 5f 5f 65 7a 7c 7c 7b 7d 3b 5f 5f 65 7a 2e 73 74 6d 73 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 5f 5f 65 7a 2e 65 76 74 3d 7b 7d 3b 5f 5f 65 7a 2e 73 63 72 69 70 74 3d 7b 7d 3b 5f 5f 65 7a 2e 63 6b 3d 5f 5f 65 7a 2e 63 6b 7c 7c 7b 7d 3b 5f 5f 65 7a 2e 74 65 6d 70 6c 61 74 65 3d 7b 7d 3b 5f 5f 65 7a 2e 74 65 6d 70 6c 61 74 65 2e 69 73 4f 72 69 67 3d 74 72 75 65 3b 5f 5f 65 7a 2e 71 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 2c 69 3d 30 2c 74 3d 5b 5d 2c 6e 3d 21 31 2c 6f 3d 5b 5d 2c 72 3d 5b 5d 2c 73 3d 21 30 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6e 2c 6f Data Ascii: 2bc2var ezAnalyticsDefine = "var _ez_sa = true;var __ez=__ez\|\|{};__ez.stms=Date.now();__ez.evt={};__ez.script={};__ez.ck=__ez.ck\|\|{};__ez.template={};__ez.template.isOrig=true;__ez.queue=function(){var e=0,i=0,t=[],n=!1,o=[],r=[],s=!0,a=function(e,i,n,o
2023-12-28 16:22:48 UTC	1724	IN	Data Raw: 72 6f 72 3d 21 31 2c 74 68 69 73 2e 69 73 43 6f 6d 70 6c 65 74 65 3d 69 2c 74 68 69 73 2e 70 72 6f 63 65 65 64 49 66 45 72 72 6f 72 3d 21 31 2c 74 68 69 73 2e 69 73 54 69 6d 65 44 65 6c 61 79 3d 21 31 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 21 30 21 3d 3d 68 28 65 29 26 26 30 21 3d 73 26 26 65 2e 70 72 6f 63 65 73 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 30 3d 3d 3d 65 2e 69 73 54 69 6d 65 44 65 6c 61 79 26 26 21 31 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 66 28 65 2e 6e 61 6d 65 2b 5c 22 20 62 6c 6f 63 6b 65 64 20 3d 20 54 49 4d 45 20 44 45 4c 41 59 21 5c 22 29 2c 21 30 3b 69 66 28 70 28 65 2e 62 6c 6f 63 6b 65 64 42 79 29 29 66 6f 72 28 76 61 72 20 Data Ascii: ror=!1,this.isComplete=i,this.proceedIfError=!1,this.isTimeDelay=!1,this.process=function(){}};function c(e){!0!==h(e)&&0!=s&&e.process()}function h(e){if(!0===e.isTimeDelay&&!1===n)return f(e.name+\" blocked = TIME DELAY!\"),!0;if(p(e.blockedBy))for(var
2023-12-28 16:22:48 UTC	4744	IN	Data Raw: 67 74 68 29 7b 69 66 28 65 20 69 6e 20 74 29 7b 76 61 72 20 69 3d 74 5b 65 5d 3b 21 30 3d 3d 3d 69 2e 69 73 43 6f 6d 70 6c 65 74 65 3f 66 28 69 2e 6e 61 6d 65 2b 5c 22 20 5c 22 2b 65 2b 5c 22 3a 20 65 72 72 6f 72 20 6c 6f 61 64 65 64 20 64 75 70 6c 69 63 61 74 65 5c 22 29 3a 28 69 2e 69 73 43 6f 6d 70 6c 65 74 65 3d 21 30 2c 69 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 3d 21 30 29 7d 65 6c 73 65 20 74 5b 65 5d 3d 6e 65 77 20 64 28 65 2c 21 30 29 3b 66 28 5c 22 6d 61 72 6b 4c 6f 61 64 65 64 20 64 75 6d 6d 79 66 69 6c 65 3a 20 5c 22 2b 74 5b 65 5d 2e 6e 61 6d 65 29 7d 7d 2c 6c 6f 67 57 68 61 74 73 42 6c 6f 63 6b 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 74 29 21 31 21 3d 3d 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: gth){if(e in t){var i=t[e];!0===i.isComplete?f(i.name+\" \"+e+\": error loaded duplicate\"):(i.isComplete=!0,i.isInitialized=!0)}else t[e]=new d(e,!0);f(\"markLoaded dummyfile: \"+t[e].name)}},logWhatsBlocked:function(){for(var e in t)!1!==t.hasOwnPropert
2023-12-28 16:22:48 UTC	2368	IN	Data Raw: 69 6e 65 64 27 29 20 7b 20 09 09 49 4c 31 31 49 4c 49 4c 49 49 6c 4c 4c 4c 49 4c 49 4c 4c 4c 4c 49 49 4c 4c 4c 49 49 4c 31 31 31 31 31 4c 4c 49 4c 69 69 4c 49 6c 69 4c 6c 49 4c 6c 4c 69 69 4c 4c 49 69 49 4c 4c 2e 64 65 73 74 72 6f 79 28 29 3b 20 09 09 49 4c 31 31 49 4c 49 4c 49 49 6c 4c 4c 4c 49 4c 49 4c 4c 4c 4c 49 49 4c 4c 4c 49 49 4c 31 31 31 31 31 4c 4c 49 4c 69 69 4c 49 6c 69 4c 6c 49 4c 6c 4c 69 69 4c 4c 49 69 49 4c 4c 2e 69 6e 69 74 28 29 3b 20 09 7d 20 09 69 66 20 28 74 79 70 65 6f 66 20 65 7a 6f 69 63 5f 6d 61 73 68 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 20 09 09 65 7a 6f 69 63 5f 6d 61 73 68 2e 64 65 73 74 72 6f 79 28 29 3b 20 09 09 65 7a 6f 69 63 5f 6d 61 73 68 2e 69 6e 69 74 28 29 3b 20 09 7d 20 65 6c 73 65 20 69 66 20 28 74 Data Ascii: ined') { IL11ILILIIlLLLILILLLLIILLLIIL11111LLILiiLIliLlILlLiiLLIiILL.destroy(); IL11ILILIIlLLLILILLLLIILLLIIL11111LLILiiLIliLlILlLiiLLIiILL.init(); } if (typeof ezoic_mash !== 'undefined') { ezoic_mash.destroy(); ezoic_mash.init(); } else if (t
2023-12-28 16:22:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-12-28 16:22:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50347	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:48 UTC	341	OUT	GET /saa.go HTTP/1.1 Host: g.ezoic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	222	IN	HTTP/1.1 400 Bad Request Content-Length: 0 Content-Type: text/plain; charset=utf-8 Date: Thu, 28 Dec 2023 16:22:49 GMT Server: Apache/2.4.39 (Ubuntu) Vary: Accept-Encoding X-Robots-Tag: noindex Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50348	142.250.113.139	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:48 UTC	852	OUT	GET /translate_a/element.js?cb=googFooterTranslate HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:49 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 28 Dec 2023 16:22:49 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:49 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2023-12-28 16:22:49 UTC	1252	IN	Data Raw: 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e Data Ascii: (Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;},0)};_.ca=function(a){a&&"function"==typeof a.
2023-12-28 16:22:49 UTC	1252	IN	Data Raw: 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b 5f 2e 44 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 43 61 28 29 3f 21 31 3a 5f 2e 76 28 22 4f 70 65 72 61 22 29 7d 3b Data Ascii: \|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};_.Da=function(){return _.Ca()?!1:_.v("Opera")};
2023-12-28 16:22:49 UTC	1252	IN	Data Raw: 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 55 61 2e 61 70 70 6c 79 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 30 3d 3d 3d 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 5f 2e 56 61 28 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 61 5b 30 5d 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2b 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 64 5d 29 2b 61 5b 64 2b 31 5d 3b 72 65 74 75 72 6e 20 5f 2e 56 61 28 63 29 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 72 65 74 75 72 6e 28 61 3d 6e 75 6c 6c 3d 3d 28 63 3d 28 62 3d 61 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 Data Ascii: toLowerCase()===a+":"})};_.Wa=function(a){var b=_.Ua.apply(1,arguments);if(0===b.length)return _.Va(a[0]);for(var c=a[0],d=0;d<b.length;d++)c+=encodeURIComponent(b[d])+a[d+1];return _.Va(c)};_.Xa=function(a){var b,c;return(a=null==(c=(b=a.document).queryS
2023-12-28 16:22:49 UTC	1252	IN	Data Raw: 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 66 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 74 68 69 73 2e 67 3d 66 3b 66 62 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 Data Ascii: {var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&fb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;fb(this,"description",{configurable:!0,writable:!0,valu
2023-12-28 16:22:49 UTC	1252	IN	Data Raw: 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6d 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 6e 65 77 20 63 3b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 63 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 7d 69 66 28 22 75 6e 64 65 Data Ascii: h(b.value);a=c}return a};lb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.mb=function(){function a(){function c(){}new c;Reflect.construct(c,[],function(){});return new c instanceof c}if("unde
2023-12-28 16:22:49 UTC	1252	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 72 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 Data Ascii: ion(){return _.mb});w("Reflect.setPrototypeOf",function(a){return a?a:rb?function(b,c){try{return rb(b,c),!0}catch(d){return!1}}:null});w("Promise",function(a){function b(){this.g=null}function c(g){return g instanceof e?g:new e(function(h){h(g)})}if(a)
2023-12-28 16:22:49 UTC	1252	IN	Data Raw: 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 22 2b 74 68 69 73 2e 67 29 3b 74 68 69 73 2e 67 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 67 26 26 74 68 69 73 2e 4d 28 29 3b 74 68 69 73 2e 44 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 64 28 66 Data Ascii: this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`"+this.g);this.g=g;this.j=h;2===this.g&&this.M();this.D()};e.prototype.M=function(){var g=this;d(f
2023-12-28 16:22:49 UTC	1252	IN	Data Raw: 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 51 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 68 3f 66 2e 68 28 6c 29 3a 0a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: hen(void 0,g)};e.prototype.Qc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null==this.h?f.h(l):this.h.push(l);this.A=!0};e.resolve=c;e.reject=function(g){return new e(function(h
2023-12-28 16:22:49 UTC	1252	IN	Data Raw: 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 Data Ascii: bject[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50350	104.26.3.70	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:48 UTC	608	OUT	GET /px.gif?ch=1&e=0.9266796438054827 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	1145	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPpKlglQOdPyZUDPO1oAW9RWETqYFVLUuizmBq8a_vRgH5WRsp8WMKfIiVGwX0cEwtg0vvybs0Wy8g x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Tue, 28 Nov 2023 08:30:34 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 2623935 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GS0U%2B6XJnygiQRq579NB20wfgxPS%2BxpwuWBZXOv2GknIh7rL4owpnKxbS%2FvnPfVksHLJfKGhI5320sM24dyNUYpFkXWRxQlYArq1%2Fn21fzuzOCjFwfEu5A9yDyQ2KF2ZDA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb24ed1fd82c8a-DFW
2023-12-28 16:22:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50352	104.26.3.70	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:48 UTC	688	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3" If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
2023-12-28 16:22:49 UTC	1173	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:22:49 GMT Connection: close X-GUploader-UploadID: ABPtcPoSjFqkUe4_oBKXTMIYNDSaxTrYMuRkJqOy7gIZ-zDPseVKZ-sRao22-iW2-yfbTAyFCrgsuaR8Xg x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 06 Dec 2023 07:20:17 GMT Cache-Control: public, max-age=86400 Age: 1933474 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EJUDN%2FhMCSylinq8x7vJO0kTsdCAoZ11CFhpl8hsYtUeuTzCWUeoj2K7B0ikelhnLP3LrdsK4ZHSX5o%2BfAyaTpIHPBCrXevD%2F7FJwxadAbsxRBGeZEnKiuufi4Gu4BoWXQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb24ed1a9c6bac-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50351	130.211.23.194	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:48 UTC	568	OUT	GET /mw/state?bt_env=prod HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	203	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Vary: Origin Date: Thu, 28 Dec 2023 16:22:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50354	34.120.63.153	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:48 UTC	621	OUT	POST /rtb/prebid?cid=8CUO2689O HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 3309 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:48 UTC	3309	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 2f 66 69 6c 65 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 2f 66 69 6c 65 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 6f 67 5f 75 72 Data Ascii: {"site":{"domain":"www.mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file","ref":"","topMostLocation":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file","isTop":true,"og_ur
2023-12-28 16:22:49 UTC	665	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Thu, 28 Dec 2023 16:22:49 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.mediafire.com content-type: application/json;charset=utf-8 date: Thu, 28 Dec 2023 16:22:48 GMT x-envoy-upstream-service-time: 64 vary: Accept-Encoding server: envoy Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:49 UTC	1252	IN	Data Raw: 35 62 64 0d 0a 7b 22 69 64 22 3a 22 63 37 38 62 62 62 37 32 64 65 62 35 65 34 62 64 66 65 37 37 65 63 61 38 65 31 31 35 37 63 31 38 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 6d 65 64 69 61 6e 65 74 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 24 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 26 67 64 70 72 5f 70 64 3d 31 22 7d Data Ascii: 5bd{"id":"c78bbb72deb5e4bdfe77eca8e1157c18","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"image","url":"https://x.bidswitch.net/sync?ssp=medianet&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&gdpr_pd=1"}
2023-12-28 16:22:49 UTC	229	IN	Data Raw: 43 33 30 31 37 25 32 43 32 31 34 25 32 43 33 33 36 25 32 43 33 30 31 34 25 32 43 33 33 37 25 32 43 33 33 38 25 32 43 34 35 39 25 32 43 37 37 25 32 43 33 38 25 32 43 31 38 32 25 32 43 32 36 31 25 32 43 31 34 31 25 32 43 32 36 32 25 32 43 34 36 31 25 32 43 32 32 32 25 32 43 33 30 31 25 32 43 32 32 35 25 32 43 34 36 38 25 32 43 31 30 30 30 30 25 32 43 38 30 25 32 43 31 30 38 25 32 43 32 32 39 25 32 43 33 30 37 26 69 74 79 70 65 3d 50 52 45 42 49 44 26 70 75 72 70 6f 73 65 31 3d 31 26 67 64 70 72 63 6f 6e 73 65 6e 74 3d 31 26 67 64 70 72 3d 30 26 63 6f 70 70 61 3d 30 26 75 73 70 5f 73 74 61 74 75 73 3d 30 26 75 73 70 5f 63 6f 6e 73 65 6e 74 3d 31 22 7d 5d 7d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: C3017%2C214%2C336%2C3014%2C337%2C338%2C459%2C77%2C38%2C182%2C261%2C141%2C262%2C461%2C222%2C301%2C225%2C468%2C10000%2C80%2C108%2C229%2C307&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1"}]}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50353	104.36.115.111	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:48 UTC	2543	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2018 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; PugT=1703780543
2023-12-28 16:22:48 UTC	2018	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 30 33 37 38 30 35 36 38 30 34 32 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 32 65 33 63 39 30 32 36 65 33 61 61 31 63 22 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 46 69 72 65 5f 5a 6f 6e 65 31 22 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 35 38 33 39 34 33 39 37 34 32 30 31 2d 30 22 7d 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 31 7d 7d 2c 7b 22 69 64 22 3a 22 33 63 34 38 37 61 31 38 33 63 35 33 61 Data Ascii: {"id":"1703780568042","at":1,"cur":["USD"],"imp":[{"id":"2e3c9026e3aa1c","tagid":"MediaFire_Zone1","secure":1,"ext":{"data":{"pbadslot":"div-gpt-ad-1583943974201-0"}},"bidfloorcur":"USD","banner":{"w":728,"h":90,"pos":0,"topframe":1}},{"id":"3c487a183c53a
2023-12-28 16:22:49 UTC	231	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: no-cache, no-store, must-revalidate Date: Thu, 28 Dec 2023 16:22:48 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50358	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1024 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	1024	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 37 39 32 34 34 33 38 2d 64 33 61 37 2d 34 66 30 36 2d 61 32 37 31 2d 32 36 30 62 65 34 39 63 66 38 35 63 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 2f 66 69 6c 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 6f 6e 6c 69 6e 65 73 74 6f 72 61 67 65 2c 66 72 65 65 73 74 6f 72 61 67 65 2c 63 6c 6f 75 64 53 Data Ascii: {"id":"97924438-d3a7-4f06-a271-260be49cf85c","at":1,"cur":["USD"],"tmax":1000,"site":{"domain":"mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file","ref":null,"keywords":"onlinestorage,freestorage,cloudS
2023-12-28 16:22:49 UTC	513	IN	HTTP/1.1 200 OK vary: Origin set-cookie: stx_user_id=725c6f98-0fda-4d14-ab50-616dfac69ed5; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:49 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None content-type: application/json; charset=utf-8 cache-control: private, no-cache, no-store, must-revalidate content-length: 765 x-openrtb-version: 2.5 access-control-allow-origin: https://www.mediafire.com access-control-allow-credentials: true date: Thu, 28 Dec 2023 16:22:49 GMT connection: close
2023-12-28 16:22:49 UTC	765	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 72 69 3d 30 30 31 33 33 30 30 30 30 31 6b 51 6a 32 48 41 41 53 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 25 32 46 73 79 6e 63 25 32 46 76 31 25 33 46 73 6f 75 72 63 65 5f 69 64 25 33 44 6b 7a 46 79 7a 7a 71 58 45 71 75 6b 4d 44 75 6d 70 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://ssc-cms.33across.com/ps/?ri=0013300001kQj2HAAS&ru=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DkzFyzzqXEqukMDump

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50355	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1043 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	1043	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 37 39 32 34 34 33 38 2d 64 33 61 37 2d 34 66 30 36 2d 61 32 37 31 2d 32 36 30 62 65 34 39 63 66 38 35 63 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 2f 66 69 6c 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 6f 6e 6c 69 6e 65 73 74 6f 72 61 67 65 2c 66 72 65 65 73 74 6f 72 61 67 65 2c 63 6c 6f 75 64 53 Data Ascii: {"id":"97924438-d3a7-4f06-a271-260be49cf85c","at":1,"cur":["USD"],"tmax":1000,"site":{"domain":"mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file","ref":null,"keywords":"onlinestorage,freestorage,cloudS
2023-12-28 16:22:49 UTC	513	IN	HTTP/1.1 200 OK vary: Origin set-cookie: stx_user_id=c2d4f836-40c0-419a-adc0-05b8cfc86cff; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:49 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None content-type: application/json; charset=utf-8 cache-control: private, no-cache, no-store, must-revalidate content-length: 578 x-openrtb-version: 2.5 access-control-allow-origin: https://www.mediafire.com access-control-allow-credentials: true date: Thu, 28 Dec 2023 16:22:49 GMT connection: close
2023-12-28 16:22:49 UTC	578	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 63 6d 73 2e 71 75 61 6e 74 73 65 72 76 65 2e 63 6f 6d 2f 70 69 78 65 6c 2f 70 2d 5f 6a 51 30 33 37 70 53 6d 74 6a 68 4e 2e 67 69 66 3f 69 64 6d 61 74 63 68 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 2e 61 64 2e 73 6d 61 61 74 6f 2e 6e 65 74 2f 63 2f 3f 61 64 45 78 49 6e 69 74 3d 73 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://cms.quantserve.com/pixel/p-_jQ037pSmtjhN.gif?idmatch=1&gdpr=0&gdpr_consent=","https://s.ad.smaato.net/c/?adExInit=s&redir=https%3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50356	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1043 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	1043	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 37 39 32 34 34 33 38 2d 64 33 61 37 2d 34 66 30 36 2d 61 32 37 31 2d 32 36 30 62 65 34 39 63 66 38 35 63 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 2f 66 69 6c 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 6f 6e 6c 69 6e 65 73 74 6f 72 61 67 65 2c 66 72 65 65 73 74 6f 72 61 67 65 2c 63 6c 6f 75 64 53 Data Ascii: {"id":"97924438-d3a7-4f06-a271-260be49cf85c","at":1,"cur":["USD"],"tmax":1000,"site":{"domain":"mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file","ref":null,"keywords":"onlinestorage,freestorage,cloudS
2023-12-28 16:22:49 UTC	513	IN	HTTP/1.1 200 OK vary: Origin set-cookie: stx_user_id=8021117c-05c2-4358-836f-b4d440ea2d68; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:49 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None content-type: application/json; charset=utf-8 cache-control: private, no-cache, no-store, must-revalidate content-length: 676 x-openrtb-version: 2.5 access-control-allow-origin: https://www.mediafire.com access-control-allow-credentials: true date: Thu, 28 Dec 2023 16:22:48 GMT connection: close
2023-12-28 16:22:49 UTC	676	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 62 31 73 79 6e 63 2e 7a 65 6d 61 6e 74 61 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 73 68 61 72 65 74 68 72 6f 75 67 68 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 73 70 2e 64 69 73 71 75 73 2e 63 6f 6d 2f 72 65 64 69 72 65 63 74 75 73 65 72 3f 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://b1sync.zemanta.com/usersync/sharethrough?gdpr=0&gdpr_consent=","https://ssp.disqus.com/redirectuser?r=https%3A%2F%2Fmatch.sharethr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50357	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1024 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	1024	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 37 39 32 34 34 33 38 2d 64 33 61 37 2d 34 66 30 36 2d 61 32 37 31 2d 32 36 30 62 65 34 39 63 66 38 35 63 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 2f 66 69 6c 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 6f 6e 6c 69 6e 65 73 74 6f 72 61 67 65 2c 66 72 65 65 73 74 6f 72 61 67 65 2c 63 6c 6f 75 64 53 Data Ascii: {"id":"97924438-d3a7-4f06-a271-260be49cf85c","at":1,"cur":["USD"],"tmax":1000,"site":{"domain":"mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file","ref":null,"keywords":"onlinestorage,freestorage,cloudS
2023-12-28 16:22:49 UTC	513	IN	HTTP/1.1 200 OK vary: Origin set-cookie: stx_user_id=1f0cb06f-593b-4482-b8bf-00f88638d577; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:49 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None content-type: application/json; charset=utf-8 cache-control: private, no-cache, no-store, must-revalidate content-length: 717 x-openrtb-version: 2.5 access-control-allow-origin: https://www.mediafire.com access-control-allow-credentials: true date: Thu, 28 Dec 2023 16:22:49 GMT connection: close
2023-12-28 16:22:49 UTC	717	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 73 68 72 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 38 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 49 6d 67 53 79 6e 63 3f 70 3d 31 35 36 35 35 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://match.prod.bidr.io/cookie-sync/shr?gdpr=0&gdpr_consent=","https://image8.pubmatic.com/AdServer/ImgSync?p=156557&gdpr=0&gdpr_consen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50360	3.231.136.235	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	779	OUT	POST /header/auction?lib=prebid&v=8.10.0&referrer=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe%2Ffile&tmax=1000 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 2374 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:49 UTC	2374	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 46 69 72 65 5f 52 4f 53 5f 5a 6f 6e 65 5f 70 72 65 62 69 64 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 37 32 38 2c 22 68 22 3a 39 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 35 38 33 39 34 33 39 37 34 32 30 31 2d 30 22 7d 7d 7d 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 64 69 76 2d 67 70 74 2d 61 64 2d 31 35 38 33 39 34 33 39 37 34 32 30 31 2d 30 22 7d 7d 7d 2c 7b 22 69 64 22 3a 31 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 46 69 72 65 5f 52 4f 53 5f 5a 6f 6e 65 5f 70 Data Ascii: {"imp":[{"id":0,"tagid":"MediaFire_ROS_Zone_prebid","banner":{"format":[{"w":728,"h":90}]},"fpd":{"context":{"data":{"pbadslot":"div-gpt-ad-1583943974201-0"}}},"ext":{"data":{"pbadslot":"div-gpt-ad-1583943974201-0"}}},{"id":1,"tagid":"MediaFire_ROS_Zone_p
2023-12-28 16:22:49 UTC	712	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:49 GMT Content-Type: application/json; charset=utf-8 Content-Length: 19 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 15 Oct 1992 20:10:00 GMT Pragma: no-cache X-XSS-Protection: 0 P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Access-Control-Allow-Origin: https://www.mediafire.com Access-Control-Allow-Credentials: true x-auction-status: 29 x-auction-status: 29 x-auction-status: 29 Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:49 GMT; Secure; SameSite=None
2023-12-28 16:22:49 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50359	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	633	OUT	POST /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive Content-Length: 1024 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	1024	OUT	Data Raw: 7b 22 69 64 22 3a 22 39 37 39 32 34 34 33 38 2d 64 33 61 37 2d 34 66 30 36 2d 61 32 37 31 2d 32 36 30 62 65 34 39 63 66 38 35 63 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 74 6d 61 78 22 3a 31 30 30 30 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 2f 66 69 6c 65 22 2c 22 72 65 66 22 3a 6e 75 6c 6c 2c 22 6b 65 79 77 6f 72 64 73 22 3a 22 6f 6e 6c 69 6e 65 73 74 6f 72 61 67 65 2c 66 72 65 65 73 74 6f 72 61 67 65 2c 63 6c 6f 75 64 53 Data Ascii: {"id":"97924438-d3a7-4f06-a271-260be49cf85c","at":1,"cur":["USD"],"tmax":1000,"site":{"domain":"mediafire.com","page":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file","ref":null,"keywords":"onlinestorage,freestorage,cloudS
2023-12-28 16:22:49 UTC	513	IN	HTTP/1.1 200 OK vary: Origin set-cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:49 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None content-type: application/json; charset=utf-8 cache-control: private, no-cache, no-store, must-revalidate content-length: 829 x-openrtb-version: 2.5 access-control-allow-origin: https://www.mediafire.com access-control-allow-credentials: true date: Thu, 28 Dec 2023 16:22:49 GMT connection: close
2023-12-28 16:22:49 UTC	829	IN	Data Raw: 7b 22 63 6f 6f 6b 69 65 53 79 6e 63 55 72 6c 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 68 61 72 65 74 68 72 6f 75 67 68 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 70 72 2d 62 68 2e 79 62 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 79 6e 63 2f 73 68 61 72 65 74 68 72 6f 75 67 68 2f 64 62 39 63 35 66 62 34 2d 34 30 37 32 2d 34 32 35 62 2d 62 39 30 63 2d 33 38 33 33 32 63 62 65 64 38 36 30 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2c 22 68 74 74 70 73 3a 2f 2f 63 73 2e 61 64 6d 61 6e 6d 65 64 69 61 2e 63 6f 6d 2f 63 30 31 64 30 32 Data Ascii: {"cookieSyncUrls":["https://match.adsrvr.org/track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent=","https://pr-bh.ybp.yahoo.com/sync/sharethrough/db9c5fb4-4072-425b-b90c-38332cbed860?gdpr=0&gdpr_consent=","https://cs.admanmedia.com/c01d02

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50362	104.19.215.37	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	1564	OUT	GET /Tag.engine?time=-60&id=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0&rand=36846&ver=async&referrerUrl=&fingerPrint=123&abr=false&stdTime=60&fpe=1&bw=1280&bh=907&res=1280x1024&curl=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe%2Ffile&kw=online%20storage%2Cfree%20storage%2Ccloud%20storage%2Ccollaboration%2Cbackup%20file%20sharing%2Cshare%20files%2Cphoto%20backup%2Cphoto%20sharing%2Cftp%20replacement%2Ccross%20platform%2Cremote%20access%2Cmobile%20access%2Csend%20large%20files%2Crecover%20files%2Cfile%20versioning%2Cundelete%2Cwindows%2Cpc%2Cmac%2Cos%20x%2Clinux%2Ciphone HTTP/1.1 Host: otnolatrnup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IKSR={}; INF_DFL8=false; IUID=e52c68bd-2ec0-41bc-8bb4-23ef3441546f; ISSH=704416; VMI=; CHN=#[]; MSSH=#{}; MSRH=#{}; ILP={"Profile":{"Audiences":{"Audience":[],"ThirdPartyAudience":[]}},"CreatedDate":"2023-12-28T16:22:03.9451729Z"}; ILPLU=#12/28/2023 4:22:03 PM; ILEALC=#12/28/2023 4:22:03 PM; ILMPF=#True; IPMPLU=#1/1/0001 12:00:00 AM; IPMUID=#; BSWUID=#; IBL=#[]; ISH=#{"101":[{"SId":"704416","D":"23/12/28T8:22:3"}]}; ISH_Q=#[101]
2023-12-28 16:22:49 UTC	1311	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:49 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Vary: Accept-Encoding Cache-Control: private, no-transform P3P: CP="CAO PSA OUR IND" Access-Control-Allow-Origin: * Set-Cookie: IKSR={}; path=/; SameSite=None; secure Set-Cookie: __INF_CC=; expires=Mon, 18-Dec-2023 16:22:49 GMT; path=/ Set-Cookie: INF_DFL8=false; path=/; SameSite=None; secure Set-Cookie: IUID=e52c68bd-2ec0-41bc-8bb4-23ef3441546f; expires=Wed, 28-Dec-2033 16:22:49 GMT; path=/; SameSite=None; secure Set-Cookie: ISSH=704416; path=/; SameSite=None; secure Set-Cookie: VMI=; path=/; SameSite=None; secure Set-Cookie: CHN=#[]; expires=Wed, 28-Dec-2033 16:22:49 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: MSSH=#{}; expires=Wed, 28-Dec-2033 16:22:49 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: MSRH=#{}; expires=Wed, 28-Dec-2033 16:22:49 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: ILP={"Profile":{"Audiences":{"Audience":[],"ThirdPartyAudience":[]}},"CreatedDate":"2023-12-28T16:22:03.9451729Z"}; expires=Wed, 28-Dec-2033 16:22:49 GMT; path=/; SameSite=None; secure
2023-12-28 16:22:49 UTC	1234	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 50 4c 55 3d 23 31 32 2f 32 38 2f 32 30 32 33 20 34 3a 32 32 3a 34 39 20 50 4d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 38 2d 44 65 63 2d 32 30 33 33 20 31 36 3a 32 32 3a 34 39 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 4c 45 41 4c 43 3d 23 31 32 2f 32 38 2f 32 30 32 33 20 34 3a 32 32 3a 30 33 20 50 4d 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 38 2d 44 65 63 2d 32 30 33 33 20 31 36 3a 32 32 3a 34 39 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 Data Ascii: Set-Cookie: ILPLU=#12/28/2023 4:22:49 PM; expires=Wed, 28-Dec-2033 16:22:49 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie: ILEALC=#12/28/2023 4:22:03 PM; expires=Wed, 28-Dec-2033 16:22:49 GMT; path=/; SameSite=None; secure; HttpOnlySet-Cookie
2023-12-28 16:22:49 UTC	1369	IN	Data Raw: 61 31 38 0d 0a 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 4d 65 64 69 61 20 3d 20 7b 22 49 74 65 6d 73 22 3a 5b 5d 2c 22 43 6c 69 65 6e 74 53 69 64 65 46 69 6c 74 65 72 73 22 3a 6e 75 6c 6c 2c 22 44 65 63 69 73 69 6f 6e 50 72 6f 66 69 6c 65 49 64 22 3a 22 38 63 61 66 36 39 37 36 2d 61 66 65 63 2d 34 64 38 63 2d 39 35 34 63 2d 66 38 35 62 35 62 34 36 36 62 37 36 22 2c 22 44 65 63 69 73 69 6f 6e 50 72 6f 66 69 6c 65 22 3a 6e 75 6c 6c 2c 22 53 65 72 76 65 72 22 3a 22 49 4e 46 49 4e 49 54 59 57 45 42 31 22 7d 3b 20 67 33 36 37 43 42 32 36 38 42 31 30 39 34 30 30 34 41 33 36 38 39 37 35 31 45 37 41 43 35 36 38 46 2e 4d 61 70 70 69 6e 67 50 69 78 65 6c 20 3d 20 7b 20 55 73 65 72 49 64 20 3a 20 27 65 Data Ascii: a18 g367CB268B1094004A3689751E7AC568F.Media = {"Items":[],"ClientSideFilters":null,"DecisionProfileId":"8caf6976-afec-4d8c-954c-f85b5b466b76","DecisionProfile":null,"Server":"INFINITYWEB1"}; g367CB268B1094004A3689751E7AC568F.MappingPixel = { UserId : 'e
2023-12-28 16:22:49 UTC	1222	IN	Data Raw: 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 2c 22 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 22 3a 22 68 74 74 70 73 22 2c 22 43 46 2d 56 69 73 69 74 6f 72 22 3a 22 7b 5c 22 73 63 68 65 6d 65 5c 22 3a 5c 22 68 74 74 70 73 5c 22 7d 22 2c 22 43 46 2d 43 6f 6e 6e 65 63 74 69 6e 67 2d 49 50 22 3a 22 32 31 32 2e 31 30 32 2e 34 31 2e 32 22 2c 22 73 65 63 2d 63 68 2d 75 61 2d 6d 6f 62 69 6c 65 22 3a 22 3f 30 22 2c 22 53 65 63 2d 46 65 74 63 68 2d 44 65 73 74 22 3a 22 73 63 72 69 70 74 22 2c 22 43 46 2d 52 41 59 22 3a 22 38 33 63 62 32 34 65 64 38 38 32 63 65 39 37 61 2d 44 46 57 22 2c 22 58 2d 43 6c 75 73 74 Data Ascii: me\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\"","X-Forwarded-Proto":"https","CF-Visitor":"{\"scheme\":\"https\"}","CF-Connecting-IP":"212.102.41.2","sec-ch-ua-mobile":"?0","Sec-Fetch-Dest":"script","CF-RAY":"83cb24ed882ce97a-DFW","X-Clust
2023-12-28 16:22:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50349	34.218.121.115	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	636	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1065 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	1065	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 39 65 32 35 63 36 64 33 61 33 65 34 30 37 63 62 30 62 30 32 65 32 64 31 38 36 64 64 35 61 64 32 26 63 6c 69 65 6e 74 3d 32 38 39 31 36 62 36 63 64 36 30 63 37 39 63 30 34 34 37 62 33 63 32 33 61 64 36 39 38 63 39 38 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 59 73 30 72 52 68 43 6a 43 2d 72 68 55 70 6d 46 69 69 62 37 73 73 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 30 33 37 38 30 35 36 37 39 35 38 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 34 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 30 33 37 38 30 35 32 32 35 39 39 25 32 43 25 32 32 Data Ascii: checksum=9e25c6d3a3e407cb0b02e2d186dd5ad2&client=28916b6cd60c79c0447b3c23ad698c98&e=%5B%7B%22device_id%22%3A%22Ys0rRhCjC-rhUpmFiib7ss%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1703780567958%2C%22event_id%22%3A4%2C%22session_id%22%3A1703780522599%2C%22
2023-12-28 16:22:49 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:49 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0d9-20bbabb259a68a8d5f11eb7d Strict-Transport-Security: max-age=15768000
2023-12-28 16:22:49 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50363	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	627	OUT	POST /detroitchicago/imp.gif?ez_orig=1 HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 1226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	1226	OUT	Data Raw: 7b 22 61 62 5f 74 65 73 74 5f 69 64 22 3a 22 6d 6f 64 31 2d 63 22 2c 22 61 64 5f 63 61 63 68 65 5f 6c 65 76 65 6c 22 3a 30 2c 22 61 64 5f 63 6f 75 6e 74 5f 61 64 6a 75 73 74 6d 65 6e 74 22 3a 30 2c 22 61 64 5f 6c 61 7a 79 6c 6f 61 64 5f 76 65 72 73 69 6f 6e 22 3a 30 2c 22 61 64 5f 6c 6f 61 64 5f 76 65 72 73 69 6f 6e 22 3a 31 2c 22 61 64 5f 6c 6f 63 61 74 69 6f 6e 5f 69 64 73 22 3a 22 22 2c 22 61 64 78 5f 61 64 5f 63 6f 75 6e 74 22 3a 30 2c 22 61 69 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 63 61 63 68 65 5f 6c 65 76 65 6c 22 3a 30 2c 22 61 69 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 70 6c 61 63 65 6d 65 6e 74 5f 63 6e 74 22 3a 2d 31 2c 22 62 69 64 64 65 72 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 62 69 64 64 65 72 5f 76 65 72 73 69 6f 6e 22 3a 33 2c 22 63 69 74 79 Data Ascii: {"ab_test_id":"mod1-c","ad_cache_level":0,"ad_count_adjustment":0,"ad_lazyload_version":0,"ad_load_version":1,"ad_location_ids":"","adx_ad_count":0,"ai_placeholder_cache_level":0,"ai_placeholder_placement_cnt":-1,"bidder_method":0,"bidder_version":3,"city
2023-12-28 16:22:49 UTC	479	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: HEAD, PUT, POST, GET, OPTIONS Access-Control-Allow-Origin: https://www.mediafire.com Access-Control-Max-Age: 1728000 Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Content-Length: 43 Content-Type: image/gif Date: Thu, 28 Dec 2023 16:22:49 GMT Expires: Wed, 27 Dec 2023 16:22:49 GMT Vary: Accept-Encoding X-Middleton-Display: imp_sol Connection: close
2023-12-28 16:22:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50367	104.26.2.70	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	371	OUT	GET /px.gif?ch=1&e=0.9266796438054827 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	1230	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-GUploader-UploadID: ABPtcPoSjFqkUe4_oBKXTMIYNDSaxTrYMuRkJqOy7gIZ-zDPseVKZ-sRao22-iW2-yfbTAyFCrgsuaR8Xg x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 06 Dec 2023 07:20:17 GMT Cache-Control: public, max-age=86400 Age: 1933474 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B85n0zCcmOGhXtiV9EuFSHbArh2fzqf5AI0akrweNZqo%2FWs0P5FWlyzFUh3SoVk9LxMy5tCto3FePsegHbrDwQEP6hxW4pA%2B9zPd5XHfr5bougXugE7tgwUtao03gZ%2F1mg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb24f09d206b2f-DFW
2023-12-28 16:22:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50366	104.26.2.70	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	451	OUT	GET /px.gif?ch=2 HTTP/1.1 Host: ad-delivery.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "ad4b0f606e0f8465bc4c4c170b37e1a3" If-Modified-Since: Wed, 05 May 2021 19:25:32 GMT
2023-12-28 16:22:49 UTC	1094	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:22:49 GMT Connection: close X-GUploader-UploadID: ABPtcPpKlglQOdPyZUDPO1oAW9RWETqYFVLUuizmBq8a_vRgH5WRsp8WMKfIiVGwX0cEwtg0vvybs0Wy8g x-goog-generation: 1620242732037093 x-goog-metageneration: 5 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 43 x-goog-hash: crc32c=cpEfJQ== x-goog-hash: md5=rUsPYG4PhGW8TEwXCzfhow== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Expires: Tue, 28 Nov 2023 08:30:34 GMT Cache-Control: public, max-age=86400 Last-Modified: Wed, 05 May 2021 19:25:32 GMT ETag: "ad4b0f606e0f8465bc4c4c170b37e1a3" Age: 2623935 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qlpIXdA7Q4wCh0sFfgAww8T8%2FCoCekMdUtZ3ASE%2Fdo43HhVnZR8bvh0y%2FOefBRovd8qR8wJzhNlhXGZMJR3b%2FP%2Bnom0y%2FsiRpQgG4GeNf4yOWsqTW9S7sR3QQG%2FcDJTAOQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83cb24f0989d2c87-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50365	130.211.23.194	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	781	OUT	GET /pv?tid=bB0JkhQhg&w=5115845767331840&o=5678961798414336&cv=2.1.26&widget=false&r=false&vr=1280x907&pageURL=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe%2Ffile&sid=ANttMDS4s&pm=false&upapi=true HTTP/1.1 Host: api.btloader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	255	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Vary: Origin Date: Thu, 28 Dec 2023 16:22:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50369	34.120.63.153	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	364	OUT	GET /rtb/prebid?cid=8CUO2689O HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:49 UTC	390	IN	HTTP/1.1 405 Method Not Allowed content-type: text/html;charset=utf-8 content-language: en Content-Length: 449 date: Thu, 28 Dec 2023 16:22:49 GMT x-envoy-upstream-service-time: 1 vary: Accept-Encoding server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:49 UTC	449	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 35 20 e2 80 93 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 405 Method Not Allowed</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50371	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=725c6f98-0fda-4d14-ab50-616dfac69ed5
2023-12-28 16:22:50 UTC	101	IN	HTTP/1.1 404 Not Found content-length: 0 date: Thu, 28 Dec 2023 16:22:49 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50373	3.210.180.48	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	522	OUT	GET /header/auction?lib=prebid&v=8.10.0&referrer=https%3A%2F%2Fwww.mediafire.com%2Ffile%2Fd5llbbm8wu92jg8%2FClassicShellSetup_4_3_1.exe%2Ffile&tmax=1000 HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:50 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:50 GMT Content-Type: application/json; charset=utf-8 Content-Length: 19 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 15 Oct 1992 20:10:00 GMT Pragma: no-cache X-XSS-Protection: 0 Accept-CH: sec-ch-ua-mobile,sec-ch-rtt,sec-ch-ua-arch,sec-ch-ua-full-version,sec-ch-ua,sec-ch-ua-bitness,sec-ch-device-memory,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ect,sec-ch-save-data,sec-ch-viewport-height,sec-ch-width,user-agent,sec-ch-dpr,sec-ch-ua-platform,sec-ch-prefers-color-scheme,sec-ch-ua-full-version-list,sec-ch-downlink,sec-ch-viewport-width P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" x-auction-status: 5 Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:50 GMT; Secure; SameSite=None
2023-12-28 16:22:50 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50372	35.166.142.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:49 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:50 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Dec 2023 16:22:50 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0da-27770d2c2a1fa18d24a3884d Strict-Transport-Security: max-age=15768000
2023-12-28 16:22:50 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50378	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:50 UTC	1921	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=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 HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:50 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:22:50 GMT Expires: Wed, 27 Dec 2023 16:22:50 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50379	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:50 UTC	817	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJmNmEzYjNjYi0zNzVhLTRjNjgtNTkyNy1mYmE3ZTg1ZDI5ZWEiLCJkb21haW5faWQiOiI0ODQ0NzAiLCJ0X2Vwb2NoIjoxNzAzNzgwNTY4LCJkYXRhIjpbeyJuYW1lIjoiZmlkX3ZhbHVlIiwidmFsIjoiMTI0In1dfV0= HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:50 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:22:51 GMT Expires: Wed, 27 Dec 2023 16:22:51 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50381	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:50 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=1f0cb06f-593b-4482-b8bf-00f88638d577
2023-12-28 16:22:50 UTC	101	IN	HTTP/1.1 404 Not Found content-length: 0 date: Thu, 28 Dec 2023 16:22:50 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50340	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:50 UTC	3044	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.mediafire.com Connection: keep-alive Content-Length: 19793 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; FCNEC=%5B%5B%22AKsRol9nM1Goc-YvoCsiwGeaXchiQly9ZXXJg-t5jZWrr6mHFkJ1MX_sILrboG0jthoJ2JZuGAG3PELuAKjDB3ayBRCkXAW_cJjnSc4IvDjsIeTRanXPMhk7MypPWs0AcuUk52juQ_DVk0ZCAYmlpab0GqNQj-nVAQ%3D%3D%22%5D%5D; ezux_et_484470=1; ezux_tos_484470=18; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780568.15.0.0; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470
2023-12-28 16:22:50 UTC	16384	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 34 30 38 30 34 36 38 39 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 30 33 32 36 34 30 39 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 74 68 65 2e 67 61 74 65 6b 65 65 70 65 72 63 6f 6e 73 65 6e 74 2e 63 6f 6d 2f 63 6d 70 2e 6d 69 6e 2e 6a 73 22 2c 22 73 22 3a 37 35 36 2e 39 2c 22 64 22 3a 31 2e 34 2c 22 69 22 3a 22 73 63 72 69 70 74 22 2c 22 70 22 3a 22 22 2c 22 72 73 22 3a 30 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 37 35 36 2e 39 2c 22 64 73 22 3a 30 2c 22 64 65 22 3a 30 2c 22 63 73 22 3a 30 2c 22 63 65 22 3a 30 2c 22 71 73 22 3a Data Ascii: {"memory":{"totalJSHeapSize":40804689,"usedJSHeapSize":20326409,"jsHeapSizeLimit":2172649472},"resources":[{"n":"https://the.gatekeeperconsent.com/cmp.min.js","s":756.9,"d":1.4,"i":"script","p":"","rs":0,"re":0,"fs":756.9,"ds":0,"de":0,"cs":0,"ce":0,"qs":
2023-12-28 16:22:50 UTC	3409	OUT	Data Raw: 2c 22 72 65 22 3a 30 2c 22 66 73 22 3a 33 30 34 36 2e 38 2c 22 64 73 22 3a 30 2c 22 64 65 22 3a 30 2c 22 63 73 22 3a 30 2c 22 63 65 22 3a 30 2c 22 71 73 22 3a 30 2c 22 70 73 22 3a 30 2c 22 70 65 22 3a 33 31 37 34 2e 36 2c 22 77 73 22 3a 30 2c 22 73 73 22 3a 30 2c 22 74 73 22 3a 30 2c 22 65 63 22 3a 30 2c 22 64 63 22 3a 30 7d 2c 7b 22 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 30 30 33 36 37 31 66 63 31 30 30 64 31 30 33 38 36 33 66 30 64 34 35 30 64 63 34 32 66 64 37 64 2e 73 61 66 65 66 72 61 6d 65 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 73 61 66 65 66 72 61 6d 65 2f 31 2d 30 2d 34 30 2f 68 74 6d 6c 2f 63 6f 6e 74 61 69 6e 65 72 2e 68 74 6d 6c 22 2c 22 73 22 3a 33 31 30 39 2e 37 2c 22 64 22 3a 36 39 32 2e 31 2c 22 69 22 3a 22 69 66 Data Ascii: ,"re":0,"fs":3046.8,"ds":0,"de":0,"cs":0,"ce":0,"qs":0,"ps":0,"pe":3174.6,"ws":0,"ss":0,"ts":0,"ec":0,"dc":0},{"n":"https://003671fc100d103863f0d450dc42fd7d.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html","s":3109.7,"d":692.1,"i":"if
2023-12-28 16:22:51 UTC	374	IN	HTTP/1.1 204 No Content Date: Thu, 28 Dec 2023 16:22:50 GMT Connection: close access-control-allow-origin: https://www.mediafire.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 83cb24f7eaab6b06-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50384	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:51 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=c2d4f836-40c0-419a-adc0-05b8cfc86cff
2023-12-28 16:22:51 UTC	101	IN	HTTP/1.1 404 Not Found content-length: 0 date: Thu, 28 Dec 2023 16:22:51 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50385	174.129.88.64	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:51 UTC	1101	OUT	GET /5/c=4545/rand=308843400/pv=y/int=%23OpR%2341329%23mediafire.com%20%3A%20Total%20Site%20Traffic/int=%23OpR%2341330%23mediafire.com%20%3A%20Site%20Section%20%3A%20file/adv=%23OpR%2342598%23Referral%20Site%20%3A%20/rt=ifr HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gXrQTQUAABvIwvU"; _cc_aud="ABR4XmNgYGBI7V2wHkhBAQAbxgJC"
2023-12-28 16:22:51 UTC	1038	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:51 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1688 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.49.227 Set-Cookie: _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee;Path=/;Domain=crwdcntrl.net;Expires=Mon, 23-Sep-2024 16:09:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Mon, 23-Sep-2024 16:09:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Mon, 23-Sep-2024 16:09:00 GMT;Max-Age=23328000;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:51 UTC	1688	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 20 6c 65 66 74 6d 61 72 67 69 6e 3d 27 30 27 20 74 6f 70 6d 61 72 67 69 6e 3d 27 30 27 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 27 30 27 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 27 30 27 20 73 74 79 6c 65 3d 27 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 27 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 64 69 76 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 6c 6f 74 61 6d 65 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 22 20 77 69 64 74 68 Data Ascii: <html><body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0' style='background-color:transparent; width: 100%; text-align: center;'><html><body><div><img src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0" width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50344	142.251.116.104	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:51 UTC	983	OUT	GET /ads/measurement/l?ebcid=ALh7CaQlBdQ-GF1eFG84nrDs-z5-IwCUzXJ9US3BB-KVKSFbGq-gQpx-3CrRzPBMOnIl350gfOdV1KmNrlmT0vdx-XLr8eN-yA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:51 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 28 Dec 2023 16:22:51 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50389	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=c2d4f836-40c0-419a-adc0-05b8cfc86cff
2023-12-28 16:22:52 UTC	101	IN	HTTP/1.1 404 Not Found content-length: 0 date: Thu, 28 Dec 2023 16:22:52 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50395	142.250.138.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	1108	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZXPBnEhLgloLxIQvlvVnbYF6g_esAiJVVgMX2e5VMArwNUh90ArkuCPOkbpAwZtN2A360aHN1cdPBB9yzE; NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:52 UTC	847	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Thu, 28 Dec 2023 16:22:52 GMT Date: Thu, 28 Dec 2023 16:22:52 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-Tnr3TCYl2-zMN1GH6zLjng' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:22:52 UTC	405	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 54 6e 72 33 54 43 59 6c 32 2d 7a 4d 4e 31 47 48 36 7a 4c 6a 6e 67 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="Tnr3TCYl2-zMN1GH6zLjng">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2023-12-28 16:22:52 UTC	431	IN	Data Raw: 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 61 22 29 3f 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 62 22 29 3a 22 22 29 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 72 63 3a 3a 65 22 2c 70 61 72 73 65 49 6e 74 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 Data Ascii: .data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorag
2023-12-28 16:22:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50399	34.111.113.62	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	884	OUT	GET /idsync/ex/receive?partner_id=LOTAME&partner_device_id=5e221b1ba2e4bf116c56aecdaf8716ee&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=1!8704
2023-12-28 16:22:52 UTC	1430	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:52 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1703780532515;Expires=Mon, 26 Feb 2024 16:22:52 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b;Expires=Mon, 26 Feb 2024 16:22:52 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!8704;Expires=Mon, 26 Feb 2024 16:22:52 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3D526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%252Chttps%25253A%25252F%25252Fsync.crwdcntrl.net%25252Fmap%25252Fc%25253D10158%25252Ftp%25253DTPAD%25252Ftpid%25253D526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%252C Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50397	207.198.113.204	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	714	OUT	GET /connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:52 UTC	253	IN	HTTP/1.1 204 cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" date: Thu, 28 Dec 2023 16:22:52 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50403	142.251.116.104	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	983	OUT	GET /ads/measurement/l?ebcid=ALh7CaQskELhipCbrHN4jgY9MxSwY0WJsa__hwPi2jfrlKmAsyqyR22BRKqqJaU61NC5kpzMDzU-7o0IOmO8_kXqGsfX1FADeQ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:22:52 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 28 Dec 2023 16:22:52 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50405	104.17.219.204	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	678	OUT	GET /f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP HTTP/1.1 Host: dmp.truoptik.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:52 UTC	922	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:52 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: to_master_s=f8f1b6bf15ba02282f17d3498a0e1f55; Expires=Fri, 27-Dec-24 16:22:52 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None Set-Cookie: to_version_s=b2; Expires=Fri, 27-Dec-24 16:22:52 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None Location: https://sync.crwdcntrl.net/map/c=10832/tp=TRUP/tpid=f8f1b6bf15ba02282f17d3498a0e1f55 TO-DMP-Sync: s3b-dmp-use1-aws.truoptik.com User-Agent: Tru Optik DMP 1.3.1 Cache-Control: no-store Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 83cb2501ce5c2e77-DFW
2023-12-28 16:22:52 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50396	3.33.220.150	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	793	OUT	GET /track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRgBIAEoAjILCLbChLX88sM8EAU4AVoFdGFwYWRgAg..
2023-12-28 16:22:52 UTC	600	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:52 GMT Content-Length: 249 Connection: close server: Kestrel location: https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=3c35df97-b65a-42b9-abca-61d06d8e5fc4/gdpr=0/gdpr_consent= set-cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; expires=Sat, 28 Dec 2024 16:22:52 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRgBIAEoAjILCLSe_Yv_8sM8EAU4AVoGbG90YW1lYAI.; expires=Sat, 28 Dec 2024 16:22:52 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-28 16:22:52 UTC	249	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 6d 61 70 2f 63 3d 31 30 36 32 30 2f 74 70 3d 54 52 41 44 2f 74 70 69 64 3d 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 2f 67 64 70 72 3d 30 2f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 6d 61 70 2f 63 3d 31 30 36 32 30 2f 74 70 3d 54 52 41 44 2f 74 70 69 64 3d 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 2f 67 64 70 72 3d 30 2f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=3c35df97-b65a-42b9-abca-61d06d8e5fc4/gdpr=0/gdpr_consent=">https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=3c35df97-b65a-42b9-abca-61d06d8e5fc4/gdpr=0/gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50404	104.254.148.251	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	1021	OUT	GET /getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%3D%24UID%2Fgdpr%3D0%2Frand=531851505 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3643551440069563451; anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!A#FZ.CK$wNl!cB/Crbn=CgO/cxv2ai-YVycyiWulxoV)gm40?D0BDGG^3rPQEVk`!26hU20$^Q; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=
2023-12-28 16:22:52 UTC	1030	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Dec 2023 16:22:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.crwdcntrl.net/map/c=281/tp=ANXS/tpid=3643551440069563451/gdpr=0/rand=531851505 AN-X-Request-Uuid: 30c3b225-f1de-4ef3-ae8e-2779671f4987 Set-Cookie: uuid2=3643551440069563451; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:52 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 212.102.41.2; 212.102.41.2; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50406	54.196.33.224	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	606	OUT	GET /sync?nid=lotame&gdpr=0 HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:52 UTC	1349	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 28 Dec 2023 16:22:52 GMT Location: https://sync.crwdcntrl.net/qmap?c=6569&tp=STKA&tpid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&gdpr=0&gdpr_consent= Set-Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 166 Connection: Close
2023-12-28 16:22:52 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 71 6d 61 70 3f 63 3d 36 35 36 39 26 61 6d 70 3b 74 70 3d 53 54 4b 41 26 61 6d 70 3b 74 70 69 64 3d 30 2d 35 38 34 61 63 66 31 30 2d 31 64 36 63 2d 35 38 61 39 2d 37 34 31 62 2d 37 65 33 30 63 65 33 62 38 63 39 61 24 69 70 24 32 31 32 2e 31 30 32 2e 34 31 2e 32 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sync.crwdcntrl.net/qmap?c=6569&tp=STKA&tpid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50408	34.200.65.202	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	736	OUT	GET /cms?partner_id=LOTME&gdpr=0 HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc; IDSYNC=18z8~2fv4
2023-12-28 16:22:52 UTC	506	IN	HTTP/1.1 302 Redirect Date: Thu, 28 Dec 2023 16:22:52 GMT Connection: close Server: ATS/9.1.10.94 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58736/cms?partner_id=LOTME&gdpr=0 Content-Type: text/html Content-Language: en Set-Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc; Expires=Fri, 27 Dec 2024 22:22:52 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Content-Length: 351
2023-12-28 16:22:52 UTC	351	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50418	34.237.83.209	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	434	OUT	GET /universal/v1?supply_id=WYu2BXv1 HTTP/1.1 Host: btlr.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
2023-12-28 16:22:53 UTC	101	IN	HTTP/1.1 404 Not Found content-length: 0 date: Thu, 28 Dec 2023 16:22:52 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50422	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	903	OUT	GET /sync? HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync=CgoIoQEQkfjuicsxCgoIkQIQkfjuicsxCgoItAIQkfjuicsxCgoI5gEQkfjuicsxCgoIhwIQkfjuicsxCgoItwIQkfjuicsxCgkIOhCR-O6JyzEKCgiMAhCR-O6JyzEKCQhfEJH47onLMQoJCB8Qkfjuicsx; tluid=2505721175073375676369
2023-12-28 16:22:53 UTC	911	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1079 Connection: close P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: sync=CgoIgAIQwL_xicsxCgoIoQEQkfjuicsxCgoIgQIQwL_xicsxCgoI4gEQwL_xicsxCgoI5gEQkfjuicsxCgoIhwIQkfjuicsxCgkISRDAv_GJyzEKCgiMAhCR-O6JyzEKCgisAhDAv_GJyzEKCgitAhDAv_GJyzEKCgiRAhCR-O6JyzEKCgiSAhDAv_GJyzEKCgi0AhCR-O6JyzEKCgiUAhDAv_GJyzEKCgi3AhCR-O6JyzEKCQg6EJH47onLMQoJCBsQwL_xicsxCgoI3gEQwL_xicsxCgkIXxCR-O6JyzEKCQgfEJH47onLMQ==; Path=/sync; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:53 GMT; Secure; SameSite=None Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:53 GMT; Secure; SameSite=None
2023-12-28 16:22:53 UTC	1079	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 69 64 3d 32 37 34 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 70 72 65 62 69 64 2f 73 65 74 75 69 64 3f 62 69 64 64 65 72 3d 74 72 69 70 6c 65 6c 69 66 74 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 69 64 3d 32 35 30 35 37 32 31 31 37 35 30 37 33 33 37 35 36 37 36 33 36 39 22 3e 0a 3c 69 6d 67 20 69 64 3d 32 37 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 2f 73 79 6e 63 3f 6e 69 64 3d 31 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 37 33 20 73 72 63 3d 22 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><body><img id=274 src="https://ib.adnxs.com/prebid/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&uid=2505721175073375676369"><img id=27 src="https://sync.srv.stackadapt.com/sync?nid=13&gdpr=0&gdpr_consent="><img id=73 src="https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50421	104.254.148.251	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	1225	OUT	GET /getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3D526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%252Chttps%25253A%25252F%25252Fsync.crwdcntrl.net%25252Fmap%25252Fc%25253D10158%25252Ftp%25253DTPAD%25252Ftpid%25253D526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%252C HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3643551440069563451; anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!A#FZ.CK$wNl!cB/Crbn=CgO/cxv2ai-YVycyiWulxoV)gm40?D0BDGG^3rPQEVk`!26hU20$^Q; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=
2023-12-28 16:22:53 UTC	1212	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://pixel.tapad.com/idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=3643551440069563451&pt=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2Chttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D10158%252Ftp%253DTPAD%252Ftpid%253D526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2C AN-X-Request-Uuid: 4edd1563-a34a-41c0-b8c6-f8cea0b35a4b Set-Cookie: uuid2=3643551440069563451; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:53 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 212.102.41.2; 212.102.41.2; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50423	96.7.168.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:52 UTC	1200	OUT	GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUO2689O&prvid=2034%2C2033%2C2030%2C273%2C2028%2C2027%2C2025%2C237%2C117%2C359%2C97%2C55%2C99%2C3012%2C3011%2C3010%2C201%2C3007%2C246%2C4%2C203%2C446%2C9%2C2011%2C3022%2C3020%2C173%2C294%2C251%2C175%2C450%2C2009%2C178%2C255%2C3018%2C3017%2C214%2C336%2C3014%2C337%2C338%2C459%2C77%2C38%2C182%2C261%2C141%2C262%2C461%2C222%2C301%2C225%2C468%2C10000%2C80%2C108%2C229%2C307&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=0&usp_consent=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:59 UTC	507	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 36266 Content-Type: text/html; charset=UTF-8 Set-Cookie: visitor-id=3467821796496295000V10; Expires=Fri, 27 Dec 2024 16:22:59 GMT; domain=.media.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Cache-Control: max-age=172800 Expires: Sat, 30 Dec 2023 16:22:59 GMT Date: Thu, 28 Dec 2023 16:22:59 GMT Connection: close
2023-12-28 16:22:59 UTC	1	IN	Data Raw: 20 Data Ascii:
2023-12-28 16:22:59 UTC	16384	IN	Data Raw: 20 20 20 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 31 34 31 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 33 31 35 33 36 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 63 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 38 22 2c 22 Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":141,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":"c","coc":"NA"},"cs":"8","
2023-12-28 16:22:59 UTC	8192	IN	Data Raw: 65 74 43 6f 6e 66 69 67 53 65 74 74 69 6e 67 73 28 29 7c 7c 7b 7d 29 2c 6f 7d 29 3b 5f 63 44 28 22 65 6d 22 2c 5b 77 69 6e 64 6f 77 2e 5f 6d 4e 43 6b 2e 75 74 69 6c 2c 22 63 6f 6e 66 69 67 22 2c 22 63 6b 73 79 6e 63 22 2c 22 72 65 73 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 6e 5b 6e 5d 29 72 65 74 75 72 6e 20 6e 6e 5b 6e 5d 3b 74 72 79 7b 6e 6e 5b 6e 5d 3d 77 69 6e 64 6f 77 2e 5f 63 52 28 5b 6e 5d 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 6e 6e 5b 6e 5d 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 6e 5b 6e 5d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 6e 3d 78 28 29 3b 72 65 74 75 72 6e 20 6e 2e 63 63 7d 66 Data Ascii: etConfigSettings()\|\|{}),o});_cD("em",[window._mNCk.util,"config","cksync","res"],function(n,t,e,r){"use strict";function o(n){if(void 0!==nn[n])return nn[n];try{nn[n]=window._cR([n])[0]}catch(t){nn[n]=null}return nn[n]}function i(){var n=x();return n.cc}f
2023-12-28 16:22:59 UTC	11689	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 6d 4e 43 6b 2e 75 74 69 6c 2c 22 6c 6f 67 64 69 73 70 61 74 63 68 65 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 6e 2e 64 69 73 70 61 74 63 68 65 72 3d 6e 2e 64 69 73 70 61 74 63 68 65 72 7c 7c 6e 65 77 20 74 2c 74 68 69 73 2e 6d 6f 64 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 68 69 73 2e 66 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 6e 2e 64 69 73 70 61 74 63 68 65 72 2e 66 69 72 65 28 69 29 7d 2c 74 68 69 73 2e 61 64 64 4e 65 77 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 74 2c 6e 29 7b 7d 2c 74 68 69 73 2e 61 64 64 41 72 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 2e 65 61 63 Data Ascii: window._mNCk.util,"logdispatcher"],function(i,t){"use strict";function n(){var n=this;n.dispatcher=n.dispatcher\|\|new t,this.model=function(){},this.fire=function(i){n.dispatcher.fire(i)},this.addNew=function(i,t,n){},this.addArray=function(t){return i.eac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50425	67.202.105.24	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	729	OUT	GET /ps/?ri=0013300001kQj2HAAS&ru=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3DkzFyzzqXEqukMDumpVLB6Eq3%26source_user_id%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:53 UTC	638	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212398610672017%3As1%3D1703780573215%3Ats%3D1703780573215; Domain=.33across.com; Expires=Fri, 27-Dec-2024 16:22:53 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 100000000008200000C server: 33XP009 location: https://match.sharethrough.com/sync/v1?source_id=kzFyzzqXEqukMDumpVLB6Eq3&source_user_id=212398610672017 content-length: 0 date: Thu, 28 Dec 2023 16:22:52 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50432	34.200.65.202	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	746	OUT	GET /ups/58736/cms?partner_id=LOTME&gdpr=0 HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc; IDSYNC=18z8~2fv4
2023-12-28 16:22:53 UTC	761	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2fv4:19bk~2fv4";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 27-Dec-2024 16:22:53 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://sync.crwdcntrl.net/qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-.VeQ_.lE2pxGNWHOUYiZwwbLGk0IQ_iw1So-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBLSgjWUCECN9wVTE8k_qZ5peqGl0Qr8FEgEBAQHyjmWXZdxS0iMA_eMAAA&S=AQAAAkLw_ta-wGtGCeKDsBCx6mc; Expires=Fri, 27 Dec 2024 22:22:53 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50431	44.208.253.113	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	1010	OUT	GET /map/c=10832/tp=TRUP/tpid=f8f1b6bf15ba02282f17d3498a0e1f55 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:53 UTC	314	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.55.53 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:53 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50424	104.254.148.252	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	1031	OUT	GET /getuid?https://match.sharethrough.com/sync/v1?source_id=0e8893f90b606c9c5d33f1be&gdpr=0&gdpr_consent=&source_user_id=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3643551440069563451; anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!A#FZ.CK$wNl!cB/Crbn=CgO/cxv2ai-YVycyiWulxoV)gm40?D0BDGG^3rPQEVk`!26hU20$^Q; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=
2023-12-28 16:22:53 UTC	1068	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://match.sharethrough.com/sync/v1?source_id=0e8893f90b606c9c5d33f1be&gdpr=0&gdpr_consent=&source_user_id=3643551440069563451 AN-X-Request-Uuid: 028766b4-82da-4c14-8a25-2b4128224e18 Set-Cookie: uuid2=3643551440069563451; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:53 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 212.102.41.2; 212.102.41.2; 894.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50429	44.208.253.113	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	1035	OUT	GET /map/c=10620/tp=TRAD/tpid=3c35df97-b65a-42b9-abca-61d06d8e5fc4/gdpr=0/gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:53 UTC	315	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.12.101 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:53 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50430	44.208.253.113	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	1017	OUT	GET /map/c=281/tp=ANXS/tpid=3643551440069563451/gdpr=0/rand=531851505 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:53 UTC	314	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.2.116 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:53 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50428	52.223.40.198	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	813	OUT	GET /track/cmf/generic?ttd_pid=sharethrough&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRgBIAEoAjILCLbChLX88sM8EAU4AVoFdGFwYWRgAg..
2023-12-28 16:22:53 UTC	685	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Length: 323 Connection: close server: Kestrel location: https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent= set-cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; expires=Sat, 28 Dec 2024 16:22:53 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRIbCgxzaGFyZXRocm91Z2gSCwjCuJfp6PLDPBAFGAEgASgCMgsIpq6alv_ywzwQBTgBWgxzaGFyZXRocm91Z2hgAg..; expires=Sat, 28 Dec 2024 16:22:53 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-28 16:22:53 UTC	323	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 35 62 32 38 36 31 39 30 33 33 38 35 31 33 61 66 37 33 66 30 39 63 32 38 26 73 6f 75 72 63 65 5f 75 73 65 72 5f 69 64 3d 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 73 68 61 72 65 74 68 72 6f 75 67 68 2e 63 6f 6d 2f 73 79 6e 63 2f 76 31 3f 73 6f 75 72 63 65 5f 69 64 3d 35 62 32 38 36 31 39 30 33 33 38 35 31 33 61 66 37 33 66 30 39 63 32 38 26 73 6f 75 72 63 65 5f 75 Data Ascii: Redirecting to: <a href="https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_user_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent=">https://match.sharethrough.com/sync/v1?source_id=5b286190338513af73f09c28&source_u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50426	54.236.175.55	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	724	OUT	GET /redirectuser?r=https%3A%2F%2Fmatch.sharethrough.com%2Fsync%2Fv1%3Fsource_id%3D7rkJAhPCWXbw9Lq5dZxc6TvN%26source_user_id%3D%24UID&partner=sharethrough HTTP/1.1 Host: ssp.disqus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:53 UTC	761	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Length: 0 Connection: close cache-control: no-store pragma: no-cache expires: 0 location: https://sync.1rx.io/usersync2/rmpssp?sub=zeta&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB set-cookie: zeta-ssp-user-id=ua-c3022ff3-a52d-3262-99be-6a51a23046c2; Max-Age=31536000; Expires=Fri, 27 Dec 2024 16:22:53 GMT; Path=/; Domain=disqus.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50433	44.208.253.113	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	1053	OUT	GET /qmap?c=6569&tp=STKA&tpid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:53 UTC	314	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.59.55 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:53 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50447	104.36.113.112	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	2582	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=69452871&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; chkChromeAb67Sec=2; pi=158936:4; DPSync3=1704931200%3A263_262_261_260_259_201%7C1703808000%3A248%7C1704326400%3A265; SyncRTB3=1704931200%3A13_46_8_165_48_54_71_166_21_250_3_22_5_104_220_231_55%7C1704326400%3A223_2_15; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; PugT=1703780543
2023-12-28 16:22:53 UTC	1058	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=158936:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 28 Dec 2023 16:22:52 GMT Transfer-Encoding: chunked Connection: close
2023-12-28 16:22:53 UTC	2377	IN	Data Raw: 39 33 64 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 34 32 45 35 44 31 30 32 2d 46 43 43 37 2d 34 30 37 39 2d 41 45 42 32 2d 43 41 45 44 39 34 46 31 46 36 34 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e Data Ascii: 93dPubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50444	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XetNvCDs+12R5fE&MD=h7gNdP2A HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-12-28 16:22:54 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 63dbe5c8-f3d1-460d-ac63-f438fafd85cb MS-RequestId: 710710f5-ebe9-4423-bd77-8fbe1b859fe3 MS-CV: rJBEbvRBpEqb3ool.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 28 Dec 2023 16:22:52 GMT Connection: close Content-Length: 25457
2023-12-28 16:22:54 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2023-12-28 16:22:54 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50449	54.196.33.224	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	1292	OUT	GET /sync?nid=13&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc
2023-12-28 16:22:54 UTC	258	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 28 Dec 2023 16:22:53 GMT Location: https://eb2.3lift.com/xuid?mid=2319&xuid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&dongle=4430 Content-Length: 138 Connection: Close
2023-12-28 16:22:54 UTC	138	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 32 33 31 39 26 61 6d 70 3b 78 75 69 64 3d 30 2d 35 38 34 61 63 66 31 30 2d 31 64 36 63 2d 35 38 61 39 2d 37 34 31 62 2d 37 65 33 30 63 65 33 62 38 63 39 61 24 69 70 24 32 31 32 2e 31 30 32 2e 34 31 2e 32 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 34 34 33 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://eb2.3lift.com/xuid?mid=2319&xuid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&dongle=4430">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50453	54.160.195.52	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	665	OUT	GET /cookie-sync/trl?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AADkEU7LG0EAABaftLpXow; bitoIsSecure=ok
2023-12-28 16:22:54 UTC	403	IN	HTTP/1.1 303 See Other Date: Thu, 28 Dec 2023 16:22:53 GMT location: https://eb2.3lift.com/xuid?mid=7255&xuid=AADkEU7LG0EAABaftLpXow&dongle=bzwx&gdpr=0 Server: gunicorn set-cookie: bito=AADkEU7LG0EAABaftLpXow; Domain=bidr.io; expires=Sun, 26 Jan 2025 11:22:53 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50454	207.198.113.204	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	622	OUT	GET /dmp/pixelSync?nid=83&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:54 UTC	253	IN	HTTP/1.1 204 cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" date: Thu, 28 Dec 2023 16:22:53 GMT server: A connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50456	52.46.128.147	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	701	OUT	GET /x/757c0557066e95cfd4c7?gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; ad-privacy=0
2023-12-28 16:22:54 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 291 Connection: close x-amz-rid: HVDH5GGENBGMH732TG3D Set-Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 16:22:53 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2029 16:22:53 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-28 16:22:54 UTC	291	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 33 6c 69 66 74 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr_consent=&gdpr=0" sandbox="allow-same-origin all

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50451	54.196.33.224	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	1292	OUT	GET /sync?nid=20&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc
2023-12-28 16:22:54 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 28 Dec 2023 16:22:53 GMT Content-Length: 43 Connection: Close
2023-12-28 16:22:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50455	34.111.113.62	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:53 UTC	930	OUT	GET /idsync/ex/receive?partner_id=APPNEXUS&partner_device_id=3643551440069563451&pt=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2Chttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D10158%252Ftp%253DTPAD%252Ftpid%253D526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=1!8704
2023-12-28 16:22:54 UTC	1185	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:53 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1703780532515;Expires=Mon, 26 Feb 2024 16:22:53 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b;Expires=Mon, 26 Feb 2024 16:22:53 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!8704-2!8704;Expires=Mon, 26 Feb 2024 16:22:53 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://sync.crwdcntrl.net/map/c=10158/tp=TPAD/tpid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50452	54.196.33.224	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	1293	OUT	GET /sync?nid=114&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc
2023-12-28 16:22:54 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Length: 43 Connection: Close
2023-12-28 16:22:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50448	104.254.148.251	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	981	OUT	GET /prebid/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3643551440069563451; anj=dTM7k!M4/YDunaTF']wIg2ImIq3Wu%!A#FZ.CK$wNl!cB/Crbn=CgO/cxv2ai-YVycyiWulxoV)gm40?D0BDGG^3rPQEVk`!26hU20$^Q; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn19LCJiaXJ0aGRheSI6IjIwMjMtMTItMjhUMTY6MjI6MTJaIn0=
2023-12-28 16:22:54 UTC	1506	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 040a2e56-5f0c-4c48-abbb-ff59cb237afb Set-Cookie: anj=dTM7k!M40]D>6NRF']wIg2ImIq3Wu%!A#FHgx7AC.gGp2Oi3jrNT781jE3WmfS(?mjE3pqkaK!$lx#Iu?MNaH2:hP8hYoV[7I75@U'dQ!!C_+cgYh; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:54 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn0sInRyaXBsZWxpZnQiOnsidWlkIjoiMjUwNTcyMTE3NTA3MzM3NTY3NjM2OSIsImV4cGlyZXMiOiIyMDI0LTAzLTI3VDE2OjIyOjU0WiJ9fSwiYmlydGhkYXkiOiIyMDIzLTEyLTI4VDE2OjIyOjEyWiJ9; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:54 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=3643551440069563451; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:54 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 212.102.41.2; 212.102.41.2; 893.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2023-12-28 16:22:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50463	44.208.253.113	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	1041	OUT	GET /qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-.VeQ_.lE2pxGNWHOUYiZwwbLGk0IQ_iw1So-~A&gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:54 UTC	315	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.48.167 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:54 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50475	35.211.178.172	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	815	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; c=1703780532; tuuid_lu=1703780535
2023-12-28 16:22:54 UTC	333	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //rtb.mfadsrvr.com/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_user_id=d541ebb4-9aad-4c87-b8e0-e665e8aef738&gdpr=0&gdpr_consent=&us_privacy=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50471	34.231.181.97	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	714	OUT	GET /sync/v1?source_id=kzFyzzqXEqukMDumpVLB6Eq3&source_user_id=212398610672017 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
2023-12-28 16:22:54 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:54 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2023-12-28 16:22:54 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50450	52.45.111.235	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	752	OUT	GET /d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=bb8b2075-04f6-4e39-a178-835d11d8840f\|1703780533557
2023-12-28 16:22:54 UTC	489	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 28 Dec 2023 16:22:54 GMT Location: https://eb2.3lift.com/xuid?mid=3702&xuid=bb8b2075-04f6-4e39-a178-835d11d8840f&dongle=d54f&gdpr=0&gdpr_consent= Set-Cookie: cu=bb8b2075-04f6-4e39-a178-835d11d8840f\|1703780533557; Path=/; Domain=ipredictive.com; Expires=Fri, 27 Dec 2024 16:22:54 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: dad7a86a-d981-4c4d-868d-752d11743210 Content-Length: 149 Connection: Close
2023-12-28 16:22:54 UTC	149	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 37 30 32 26 61 6d 70 3b 78 75 69 64 3d 62 62 38 62 32 30 37 35 2d 30 34 66 36 2d 34 65 33 39 2d 61 31 37 38 2d 38 33 35 64 31 31 64 38 38 34 30 66 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 64 35 34 66 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://eb2.3lift.com/xuid?mid=3702&xuid=bb8b2075-04f6-4e39-a178-835d11d8840f&dongle=d54f&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50472	3.208.124.249	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	798	OUT	GET /map/c=10620/tp=TRAD/tpid=3c35df97-b65a-42b9-abca-61d06d8e5fc4/gdpr=0/gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:54 UTC	313	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.8.41 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:54 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50462	34.231.181.97	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	669	OUT	GET /sync/v1?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
2023-12-28 16:22:54 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:54 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2023-12-28 16:22:54 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50473	3.208.124.249	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	816	OUT	GET /qmap?c=6569&tp=STKA&tpid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:54 UTC	314	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.62.41 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:54 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50469	34.231.181.97	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	756	OUT	GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
2023-12-28 16:22:54 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:54 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2023-12-28 16:22:54 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50461	34.231.181.97	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	739	OUT	GET /sync/v1?source_id=0e8893f90b606c9c5d33f1be&gdpr=0&gdpr_consent=&source_user_id=3643551440069563451 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
2023-12-28 16:22:54 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:54 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2023-12-28 16:22:54 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50474	69.194.240.13	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	972	OUT	GET /usersync2/rmpssp?sub=zeta&gdpr=&gdpr_consent=&us_privacy=&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:54 UTC	1345	IN	HTTP/1.1 302 Found date: Thu, 28 Dec 2023 16:22:54 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%2C%22zdxidn%22%3A%222069.92%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB%22%7D; path=/; expires=Fri, 27 Dec 2024 16:22:54 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmpssp?sub=zeta&zcc=1&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB&cb=1703780574782 etag: RX798d506ec7f447e6bc6b13a43f6099f8005 connection: close
2023-12-28 16:22:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50489	174.129.88.64	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	1033	OUT	GET /map/c=14701/tp=MTAI/tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:54 UTC	314	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.1.231 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:54 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50478	104.18.24.173	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:55 UTC	935	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 2445 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=adnoeUuyTYTBErvc0sqGmZdOCed2tuYhrXN5RZbL5D; path=/; domain=.tribalfusion.com; expires=Wed, 27-Mar-2024 16:22:54 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=adnoeUuyTYTBErvc0sqGmZdOCed2tuYhrXN5RZbL5D; path=/; domain=.tribalfusion.com; expires=Wed, 27-Mar-2024 16:22:54 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 83cb25113c3d3178-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:55 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2023-12-28 16:22:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50482	74.119.118.138	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	874	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:54 UTC	441	IN	HTTP/1.1 200 OK content-type: image/gif date: Thu, 28 Dec 2023 16:22:53 GMT server: Kestrel cache-control: no-cache expires: Thu, 28 Dec 2023 00:00:00 GMT pragma: no-cache transfer-encoding: chunked x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 388500 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-28 16:22:54 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50492	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	693	OUT	GET /xuid?mid=2319&xuid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&dongle=4430 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:55 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:54 GMT; Secure; SameSite=None
2023-12-28 16:22:55 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50491	34.111.113.62	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	796	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=1!8704-2!8704
2023-12-28 16:22:55 UTC	1108	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:54 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1703780532515;Expires=Mon, 26 Feb 2024 16:22:54 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b;Expires=Mon, 26 Feb 2024 16:22:54 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!8704-2!8704;Expires=Mon, 26 Feb 2024 16:22:54 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:55 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50493	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	696	OUT	GET /xuid?mid=3702&xuid=bb8b2075-04f6-4e39-a178-835d11d8840f&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:55 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:54 GMT; Secure; SameSite=None
2023-12-28 16:22:55 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50484	69.90.254.78	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	695	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:54 UTC	674	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=870242004881; Domain=.acuityplatform.com; Expires=Fri, 27-Dec-2024 16:22:54 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqANvqNdXNlck1hdGNoaW5nSWTMkWxhc3REcm9wVGltZU1pbGxpcyUBRiwnRjSGmGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMlAUYsJ0Y0ho90aGlyZFBhcnR5VXNlcklkIfv7hnZlcnNpb27C+w=="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Fri, 27-Dec-2024 16:22:54 GMT; Path=/; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=870242004881

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50496	35.244.154.8	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	656	OUT	GET /712188.gif?partner_uid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:55 UTC	735	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CPy7KxIwCiwIARCFpQoaJDQyRTVEMTAyLUZDQzctNDA3OS1BRUIyLUNBRUQ5NEYxRjY0MhAAGg0I3sG2rAYSBQjoBxAAQgBKAA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=5yNrS8IeODvXM9HVz4e0sW/GiP88QrBYc0CZivMVzRE=; Path=/; Domain=rlcdn.com; Expires=Fri, 27 Dec 2024 16:22:54 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 26 Feb 2024 16:22:54 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50487	44.199.51.202	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	967	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=e71ba19d-7bbb-496d-b970-b82e9389cf8b; ss=GOE7Odo1Mk01wQYQp7kx1pGh0Zq23PhqCib60VYtgHWEmYXT%2BatsrVw%2FUB5j4rtieZA2H8tWvBc55uIeFX2IYA%3D%3D
2023-12-28 16:22:55 UTC	337	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=e71ba19d-7bbb-496d-b970-b82e9389cf8b&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50490	216.200.232.253	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	872	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:54 UTC	709	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1237 600843f master ord ord-pixel-x54 config_version:"2320" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=7302658d-a0df-4300-ad87-7949433877d3; domain=.mathtag.com; path=/; expires=Fri, 24-Jan-2025 16:22:55 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:7302658d-a0df-4300-ad87-7949433877d3&gdpr=0&gdpr_consent= Expires: Thu, 28 Dec 2023 16:22:53 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50488	44.208.253.113	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	1014	OUT	GET /map/c=10158/tp=TPAD/tpid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:55 UTC	313	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.2.93 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:55 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50495	18.245.124.65	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:54 UTC	718	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:55 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 69ce747ee6236461353b50a1cc6dd176.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW57-P9 X-Amz-Cf-Id: 1qn7MgopyURd0a-FE63m8CBoXNYiqqtjN-3WWto-V33Pjs3H5LSjEg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50501	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	668	OUT	GET /xuid?mid=7255&xuid=AADkEU7LG0EAABaftLpXow&dongle=bzwx&gdpr=0 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:55 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:55 GMT; Secure; SameSite=None
2023-12-28 16:22:55 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50500	35.207.24.140	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	805	OUT	GET /sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_user_id=d541ebb4-9aad-4c87-b8e0-e665e8aef738&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:55 UTC	795	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 28 Dec 2023 16:22:55 GMT Location: https://rtb.mfadsrvr.com/ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_user_id=d541ebb4-9aad-4c87-b8e0-e665e8aef738&gdpr=0&gdpr_consent=&us_privacy= Set-Cookie: tuuid=993f14d4-7b99-4748-8f99-8687578ad473; path=/; expires=Sat, 27-Dec-2025 16:22:55 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1703780575; path=/; expires=Sat, 27-Dec-2025 16:22:55 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1703780575; path=/; expires=Sat, 27-Dec-2025 16:22:55 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50503	3.208.124.249	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	773	OUT	GET /map/c=10832/tp=TRUP/tpid=f8f1b6bf15ba02282f17d3498a0e1f55 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:55 UTC	314	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.8.208 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:55 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50504	3.208.124.249	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	780	OUT	GET /map/c=281/tp=ANXS/tpid=3643551440069563451/gdpr=0/rand=531851505 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:55 UTC	314	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.57.51 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:55 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50505	209.54.182.161	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	468	OUT	GET /x/757c0557066e95cfd4c7?gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; ad-privacy=0
2023-12-28 16:22:55 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 291 Connection: close x-amz-rid: X7PT103WW00R7MK8BN5K Set-Cookie: ad-id=A4bafHfYDE2_nui6wfHY4Ac; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jul-2024 16:22:55 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Jan-2029 16:22:55 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2023-12-28 16:22:55 UTC	291	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 33 6c 69 66 74 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=3lift&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr_consent=&gdpr=0" sandbox="allow-same-origin all

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50486	82.145.213.8	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	709	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:55 UTC	807	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU871ee6e2ab5f45e68fcb357155d21285 Pragma: no-cache Set-Cookie: UID=OPU871ee6e2ab5f45e68fcb357155d21285; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2023-12-28 16:22:55 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 38 37 31 65 65 36 65 32 61 62 35 66 34 35 65 36 38 66 63 62 33 35 37 31 35 35 64 32 31 32 38 35 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU871ee6e2ab5f45e68fcb357155d21285">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50507	3.208.124.249	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	804	OUT	GET /qmap?c=5437&tp=DTAX&tpidqp=tpidqa&tpidqa=y-.VeQ_.lE2pxGNWHOUYiZwwbLGk0IQ_iw1So-~A&gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:55 UTC	315	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.53.165 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:55 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50512	104.254.151.36	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	862	OUT	GET /prebid/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&uid=2505721175073375676369 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3643551440069563451; anj=dTM7k!M40]D>6NRF']wIg2ImIq3Wu%!A#FHgx7AC.gGp2Oi3jrNT781jE3WmfS(?mjE3pqkaK!$lx#Iu?MNaH2:hP8hYoV[7I75@U'dQ!!C_+cgYh; uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn0sInRyaXBsZWxpZnQiOnsidWlkIjoiMjUwNTcyMTE3NTA3MzM3NTY3NjM2OSIsImV4cGlyZXMiOiIyMDI0LTAzLTI3VDE2OjIyOjU0WiJ9fSwiYmlydGhkYXkiOiIyMDIzLTEyLTI4VDE2OjIyOjEyWiJ9
2023-12-28 16:22:55 UTC	1506	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 57d60656-a9e7-4252-a923-ca07393b1689 Set-Cookie: anj=dTM7k!M40]D>6NRF']wIg2ImIq3Wu%!A#G2gx7AC.gGp2Oi3jrNT781jE3WmfS(?mjE3pqkaK!$lx#Iu?MNaH2:hP8hYoV[7IP>@U'dQ!!Er+d*lk; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:55 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIyNTA1NzIxMTc1MDczMzc1Njc2MzY5IiwiZXhwaXJlcyI6IjIwMjQtMDMtMjdUMTY6MjI6MTdaIn0sInRyaXBsZWxpZnQiOnsidWlkIjoiMjUwNTcyMTE3NTA3MzM3NTY3NjM2OSIsImV4cGlyZXMiOiIyMDI0LTAzLTI3VDE2OjIyOjU1WiJ9fSwiYmlydGhkYXkiOiIyMDIzLTEyLTI4VDE2OjIyOjEyWiJ9; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:55 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=3643551440069563451; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 27-Mar-2024 16:22:55 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 212.102.41.2; 212.102.41.2; 897.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com
2023-12-28 16:22:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50510	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	2791	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=870242004881 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; PugT=1703780543; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35
2023-12-28 16:22:55 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:54 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:54 GMT; path=/ Set-Cookie: PugT=1703780574; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:54 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50516	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	2841	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:7302658d-a0df-4300-ad87-7949433877d3&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; PugT=1703780543; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35
2023-12-28 16:22:55 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 11:28:10 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 11:28:10 GMT; path=/ Set-Cookie: PugT=1703762890; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 11:28:10 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50519	35.244.154.8	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	759	OUT	GET /1000.gif?memo=CPy7KxIwCiwIARCFpQoaJDQyRTVEMTAyLUZDQzctNDA3OS1BRUIyLUNBRUQ5NEYxRjY0MhAAGg0I3sG2rAYSBQjoBxAAQgBKAA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=5yNrS8IeODvXM9HVz4e0sW/GiP88QrBYc0CZivMVzRE=; pxrc=CAA=
2023-12-28 16:22:55 UTC	751	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=a5fa778a26e958f6f6090c388c5ec22e5ec1ef42b62e0e41b91ef41f7f9235ab791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=svdQY64OjrDXM9HVz4e0sW/GiP88QrBYc0CZivMVzRE=; Path=/; Domain=rlcdn.com; Expires=Fri, 27 Dec 2024 16:22:55 GMT; Secure; SameSite=None Set-Cookie: pxrc=CN/BtqwGEgUI6AcQABIFCOhHEAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 26 Feb 2024 16:22:55 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50506	69.194.240.13	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	1443	OUT	GET /usersync2/rmpssp?sub=zeta&zcc=1&redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB&cb=1703780574782 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%2C%22zdxidn%22%3A%222069.92%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB%22%7D
2023-12-28 16:22:55 UTC	982	IN	HTTP/1.1 302 Found date: Thu, 28 Dec 2023 16:22:55 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%2C%22zdxidn%22%3A%222069.92%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB%22%7D; path=/; expires=Fri, 27 Dec 2024 16:22:55 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=7719966715 etag: RX798d506ec7f447e6bc6b13a43f6099f8005 connection: close
2023-12-28 16:22:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50524	104.18.25.173	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	919	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=adnoeUuyTYTBErvc0sqGmZdOCed2tuYhrXN5RZbL5D
2023-12-28 16:22:55 UTC	813	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aPnt6ZawZcF1foXarpebwFWE9kEmZbEJYw2ZcAGPq5SZdeEOGMmXonJ1TnZaOgFPXoIRlP9jO1DwbrvG4GUxUGKP7qogXrp9eo; path=/; domain=.tribalfusion.com; expires=Wed, 27-Mar-2024 16:22:55 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aPnt6ZawZcF1foXarpebwFWE9kEmZbEJYw2ZcAGPq5SZdeEOGMmXonJ1TnZaOgFPXoIRlP9jO1DwbrvG4GUxUGKP7qogXrp9eo; path=/; domain=.tribalfusion.com; expires=Wed, 27-Mar-2024 16:22:55 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 83cb2515bc2b0c1b-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:22:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50520	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	2885	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=e71ba19d-7bbb-496d-b970-b82e9389cf8b&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; PugT=1703780543; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35
2023-12-28 16:22:55 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Dec 2023 16:22:54 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:22:54 GMT; path=/ Set-Cookie: PugT=1703780574; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:54 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=42E5D102-FCC7-4079-AEB2-CAED94F1F642 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50518	52.70.20.227	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	477	OUT	GET /sync/v1?source_id=kzFyzzqXEqukMDumpVLB6Eq3&source_user_id=212398610672017 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
2023-12-28 16:22:55 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:55 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2023-12-28 16:22:55 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50513	54.163.253.130	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	1059	OUT	GET /sync?nid=20&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc
2023-12-28 16:22:55 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Length: 43 Connection: Close
2023-12-28 16:22:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50523	52.70.20.227	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	519	OUT	GET /sync/v1?source_id=5b286190338513af73f09c28&source_user_id=3c35df97-b65a-42b9-abca-61d06d8e5fc4&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
2023-12-28 16:22:55 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:55 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2023-12-28 16:22:55 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50521	52.70.20.227	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	432	OUT	GET /sync/v1?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
2023-12-28 16:22:55 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:55 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2023-12-28 16:22:55 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50514	54.163.253.130	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	1060	OUT	GET /sync?nid=114&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc
2023-12-28 16:22:55 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Length: 43 Connection: Close
2023-12-28 16:22:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50522	52.70.20.227	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	502	OUT	GET /sync/v1?source_id=0e8893f90b606c9c5d33f1be&gdpr=0&gdpr_consent=&source_user_id=3643551440069563451 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
2023-12-28 16:22:55 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:22:55 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2023-12-28 16:22:55 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50525	35.207.24.140	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:55 UTC	898	OUT	GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic&bsw_user_id=d541ebb4-9aad-4c87-b8e0-e665e8aef738&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=993f14d4-7b99-4748-8f99-8687578ad473; c=1703780575; tuuid_lu=1703780575
2023-12-28 16:22:56 UTC	760	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 28 Dec 2023 16:22:55 GMT Location: //x.bidswitch.net/sync?dsp_id=250&expires=14&user_id=993f14d4-7b99-4748-8f99-8687578ad473&ssp=pubmatic&gdpr=0 Set-Cookie: tuuid=993f14d4-7b99-4748-8f99-8687578ad473; path=/; expires=Sat, 27-Dec-2025 16:22:55 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1703780575; path=/; expires=Sat, 27-Dec-2025 16:22:55 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!bidswitch,1703780575; path=/; expires=Sat, 27-Dec-2025 16:22:55 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50526	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:56 UTC	2813	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU871ee6e2ab5f45e68fcb357155d21285 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; PugT=1703780543; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35
2023-12-28 16:22:56 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:55 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 11-Jan-2024 16:22:55 GMT; path=/ Set-Cookie: PugT=1703780575; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:55 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50527	44.199.51.202	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:56 UTC	893	OUT	GET /pbmtc.gif?puid=42E5D102-FCC7-4079-AEB2-CAED94F1F642 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=e71ba19d-7bbb-496d-b970-b82e9389cf8b; ss=GOE7Odo1Mk01wQYQp7kx1pGh0Zq23PhqCib60VYtgHWEmYXT%2BatsrVw%2FUB5j4rtieZA2H8tWvBc55uIeFX2IYA%3D%3D
2023-12-28 16:22:56 UTC	468	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:56 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=e71ba19d-7bbb-496d-b970-b82e9389cf8b; expires=Sat, 28 Dec 2024 16:22:56 GMT; path=/; secure; samesite=none Set-Cookie: ss=AxkDM%2BrMdXlNpIREx1vPnscuHR5ZyzwfxwbS7yGZpFqyTwsBv9eU6JinP7e%2Fkki8Rg8H%2FMpfkBb6X%2BVnKk8z6pSVrh0exW%2Bvo8e8a9JdKTk%3D; expires=Sat, 28 Dec 2024 16:22:56 GMT; path=/; secure; samesite=none
2023-12-28 16:22:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50529	35.211.178.172	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:56 UTC	856	OUT	GET /sync?dsp_id=250&expires=14&user_id=993f14d4-7b99-4748-8f99-8687578ad473&ssp=pubmatic&gdpr=0 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; c=1703780532; tuuid_lu=1703780535
2023-12-28 16:22:56 UTC	615	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Dec 2023 16:22:56 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=d541ebb4-9aad-4c87-b8e0-e665e8aef738&gdpr=0&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50533	107.178.254.65	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:56 UTC	680	OUT	GET /api/sync?pid=5324&it=1&iv=a5fa778a26e958f6f6090c388c5ec22e5ec1ef42b62e0e41b91ef41f7f9235ab791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:57 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=a5fa778a26e958f6f6090c388c5ec22e5ec1ef42b62e0e41b91ef41f7f9235ab791426b5417dce21&rand=03828795 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=sdNol3Mw37GM2Jqt; Path=/; Domain=pippio.com; Expires=Fri, 27 Dec 2024 16:22:57 GMT; Secure; SameSite=None Set-Cookie: didts=1703780577; Path=/; Domain=pippio.com; Expires=Fri, 27 Dec 2024 16:22:57 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Mon, 26 Feb 2024 16:22:57 GMT; Secure; SameSite=None Set-Cookie: pxrc=COHBtqwGEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Mon, 26 Feb 2024 16:22:57 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 28 Dec 2023 16:22:57 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50534	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:56 UTC	723	OUT	GET /xuid?mid=6732&dongle=38F&xuid=AAAKUMId6Is5iAM4d-CYAAAAAAA&expiration=1703866975&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:57 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:57 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:57 GMT; Secure; SameSite=None
2023-12-28 16:22:57 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50536	8.28.7.84	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:56 UTC	3035	OUT	GET /AdServer/SPug?partnerID=158936&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; PugT=1703780575
2023-12-28 16:22:57 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:57 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1703780577; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:57 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50539	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:57 UTC	3294	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=d541ebb4-9aad-4c87-b8e0-e665e8aef738&gdpr=0&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; SPugT=1703743557; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; PugT=1703780575
2023-12-28 16:22:57 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 11:28:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-d541ebb4-9aad-4c87-b8e0-e665e8aef738; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 11:28:12 GMT; path=/ Set-Cookie: PugT=1703762892; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 11:28:12 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:57 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50540	69.194.240.13	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:57 UTC	1126	OUT	GET /usersync/turn/4357227210337848260?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%2C%22zdxidn%22%3A%222069.92%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3D%5BRX_UUID%5D%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB%22%7D
2023-12-28 16:22:57 UTC	959	IN	HTTP/1.1 302 Found date: Thu, 28 Dec 2023 16:22:57 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%7D; path=/; expires=Fri, 27 Dec 2024 16:22:57 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005?redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3DRX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB connection: close
2023-12-28 16:22:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50542	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:57 UTC	3204	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=1889789607327243659 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; SPugT=1703780577; KRTBCOOKIE_466=16530-d541ebb4-9aad-4c87-b8e0-e665e8aef738; PugT=1703762892
2023-12-28 16:22:58 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:57 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-1889789607327243659&KRTB&23263-1889789607327243659&KRTB&23481-1889789607327243659; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:57 GMT; path=/ Set-Cookie: PugT=1703780577; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:57 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50545	34.111.113.62	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	560	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1703780532515; TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b; TapAd_3WAY_SYNCS=1!8704-2!8704
2023-12-28 16:22:58 UTC	1108	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:58 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1703780532515;Expires=Mon, 26 Feb 2024 16:22:58 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b;Expires=Mon, 26 Feb 2024 16:22:58 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!8704-2!8704;Expires=Mon, 26 Feb 2024 16:22:58 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:22:58 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50547	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	460	OUT	GET /xuid?mid=2319&xuid=0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a$ip$212.102.41.2&dongle=4430 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:58 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:58 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:58 GMT; Secure; SameSite=None
2023-12-28 16:22:58 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50546	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	463	OUT	GET /xuid?mid=3702&xuid=bb8b2075-04f6-4e39-a178-835d11d8840f&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:58 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:58 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:58 GMT; Secure; SameSite=None
2023-12-28 16:22:58 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50544	44.220.113.151	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	797	OUT	GET /map/c=14701/tp=MTAI/tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:58 UTC	314	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:58 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.57.59 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:58 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50549	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	435	OUT	GET /xuid?mid=7255&xuid=AADkEU7LG0EAABaftLpXow&dongle=bzwx&gdpr=0 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:58 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:58 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:58 GMT; Secure; SameSite=None
2023-12-28 16:22:58 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50548	3.208.124.249	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	777	OUT	GET /map/c=10158/tp=TPAD/tpid=526ba56d-c57d-4b2d-ab02-fd4b1c4d2a2b HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:22:58 UTC	315	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:58 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.50.133 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:22:58 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50550	199.91.155.174	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	3159	OUT	GET /v3uprzavds1gTsgvz0Vs63vR_SAR7d1rThtPthVaxjTB2buoHsy7alQfEutMTX3-frd-kbs7SXZ5meBxQYVQGEn31qvpZ5bBPnQcN5tTntdcRaTc8JmobBiTyt_Y12Qn08wU7xchIXp_Xv9ZPA6L96dWj6WXjScPLo8FnCuh9vS-/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe HTTP/1.1 Host: download2433.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga=GA1.1.1411026819.1703780523; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D
2023-12-28 16:22:58 UTC	309	IN	HTTP/1.1 200 OK server: bd-0.1.27 content-type: application/x-dosexec accept-ranges: bytes connection: close cache-control: no-store x-robots-tag: noindex, nofollow content-disposition: attachment; filename="ClassicShellSetup_4_3_1.exe" content-length: 7187816 date: Thu, 28 Dec 2023 16:22:58 GMT
2023-12-28 16:22:58 UTC	16384	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a4 70 b8 e4 e0 11 d6 b7 e0 11 d6 b7 e0 11 d6 b7 e9 69 43 b7 f1 11 d6 b7 e9 69 55 b7 8a 11 d6 b7 e9 69 45 b7 ed 11 d6 b7 e0 11 d7 b7 94 11 d6 b7 e9 69 52 b7 d3 11 d6 b7 fe 43 42 b7 e1 11 d6 b7 e9 69 47 b7 e1 11 d6 b7 52 69 63 68 e0 11 d6 b7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ab 4b 5b 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 09 00 00 c4 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$piCiUiEiRCBiGRichPEL\|K[
2023-12-28 16:22:58 UTC	16384	IN	Data Raw: c8 00 00 00 43 c6 86 4b 01 00 00 43 c7 46 68 90 22 41 00 6a 0d e8 6a 3f 00 00 59 83 65 fc 00 ff 76 68 ff 15 cc e0 40 00 c7 45 fc fe ff ff ff e8 3e 00 00 00 6a 0c e8 49 3f 00 00 59 89 7d fc 8b 45 0c 89 46 6c 85 c0 75 08 a1 98 28 41 00 89 46 6c ff 76 6c e8 bf 1a 00 00 59 c7 45 fc fe ff ff ff e8 15 00 00 00 e8 46 2c 00 00 c3 33 ff 47 8b 75 08 6a 0d e8 31 3e 00 00 59 c3 6a 0c e8 28 3e 00 00 59 c3 8b ff 56 57 ff 15 8c e0 40 00 ff 35 60 22 41 00 8b f8 e8 91 fe ff ff ff d0 8b f0 85 f6 75 4e 68 14 02 00 00 6a 01 e8 65 4b 00 00 8b f0 59 59 85 f6 74 3a 56 ff 35 60 22 41 00 ff 35 5c 33 41 00 e8 e8 fd ff ff 59 ff d0 85 c0 74 18 6a 00 56 e8 c5 fe ff ff 59 59 ff 15 d4 e0 40 00 83 4e 04 ff 89 06 eb 09 56 e8 a8 fa ff ff 59 33 f6 57 ff 15 d0 e0 40 00 5f 8b c6 5e c3 8b ff Data Ascii: CKCFh"Ajj?Yevh@E>jI?Y}EFlu(AFlvlYEF,3Guj1>Yj(>YVW@5`"AuNhjeKYYt:V5`"A5\3AYtjVYY@NVY3W@_^
2023-12-28 16:22:58 UTC	16384	IN	Data Raw: c6 fc c1 ef 0f 8b cf 69 c9 04 02 00 00 8d 8c 01 44 01 00 00 89 4d f0 8b 0e 49 89 4d fc f6 c1 01 0f 85 d3 02 00 00 53 8d 1c 31 8b 13 89 55 f4 8b 56 fc 89 55 f8 8b 55 f4 89 5d 0c f6 c2 01 75 74 c1 fa 04 4a 83 fa 3f 76 03 6a 3f 5a 8b 4b 04 3b 4b 08 75 42 bb 00 00 00 80 83 fa 20 73 19 8b ca d3 eb 8d 4c 02 04 f7 d3 21 5c b8 44 fe 09 75 23 8b 4d 08 21 19 eb 1c 8d 4a e0 d3 eb 8d 4c 02 04 f7 d3 21 9c b8 c4 00 00 00 fe 09 75 06 8b 4d 08 21 59 04 8b 5d 0c 8b 53 08 8b 5b 04 8b 4d fc 03 4d f4 89 5a 04 8b 55 0c 8b 5a 04 8b 52 08 89 53 08 89 4d fc 8b d1 c1 fa 04 4a 83 fa 3f 76 03 6a 3f 5a 8b 5d f8 83 e3 01 89 5d f4 0f 85 8f 00 00 00 2b 75 f8 8b 5d f8 c1 fb 04 6a 3f 89 75 0c 4b 5e 3b de 76 02 8b de 03 4d f8 8b d1 c1 fa 04 4a 89 4d fc 3b d6 76 02 8b d6 3b da 74 5e 8b 4d Data Ascii: iDMIMS1UVUU]utJ?vj?ZK;KuB sL!\Du#M!JL!uM!Y]S[MMZUZRSMJ?vj?Z]]+u]j?uK^;vMJM;v;t^M
2023-12-28 16:22:58 UTC	16384	IN	Data Raw: 6a 02 88 45 f8 88 5d f9 c6 45 fa 00 59 eb 0a 33 c9 88 5d f8 c6 45 f9 00 41 8b 45 e8 6a 01 ff 70 14 ff 70 04 8d 45 fc 50 51 8d 45 f8 50 8d 45 e8 6a 01 50 e8 3f d5 ff ff 83 c4 20 85 c0 75 10 38 45 f4 74 07 8b 45 f0 83 60 70 fd 33 c0 eb 14 0f b7 45 fc 23 45 0c 80 7d f4 00 74 07 8b 4d f0 83 61 70 fd 5b c9 c3 8b ff 55 8b ec 51 56 8b 75 0c 56 e8 b2 ec ff ff 89 45 0c 8b 46 0c 59 a8 82 75 19 e8 e0 75 ff ff c7 00 09 00 00 00 83 4e 0c 20 b8 ff ff 00 00 e9 3d 01 00 00 a8 40 74 0d e8 c3 75 ff ff c7 00 22 00 00 00 eb e1 a8 01 74 17 83 66 04 00 a8 10 0f 84 8d 00 00 00 8b 4e 08 83 e0 fe 89 0e 89 46 0c 8b 46 0c 83 66 04 00 83 65 fc 00 53 6a 02 83 e0 ef 5b 0b c3 89 46 0c a9 0c 01 00 00 75 2c e8 8a ea ff ff 83 c0 20 3b f0 74 0c e8 7e ea ff ff 83 c0 40 3b f0 75 0d ff 75 0c Data Ascii: jE]EY3]EAEjppEPQEPEjP? u8EtE`p3E#E}tMap[UQVuVEFYuuN =@tu"tfNFFfeSj[Fu, ;t~@;uu
2023-12-28 16:22:58 UTC	16384	IN	Data Raw: 73 74 75 76 77 78 79 7a 00 00 00 00 00 00 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii: stuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
2023-12-28 16:22:58 UTC	16384	IN	Data Raw: e5 ff ff ff e4 ff ff ff e3 ff ff ff e2 ff ff ff e1 ff ff ff e0 ff ff ff df ff ff ff de ff ff ff dd ff ff ff dc ff ff ff db ff ff ff 01 00 00 00 d9 ff ff ff d8 ff ff ff d7 ff ff ff d6 ff ff ff d5 ff ff ff d4 ff ff ff d3 ff ff ff d2 ff ff ff d1 ff ff ff d0 ff ff ff cf ff ff ff ce ff ff ff cd ff ff ff cc ff ff ff cb ff ff ff ca ff ff ff c9 ff ff ff 01 00 00 00 c7 ff ff ff c6 ff ff ff c5 ff ff ff c4 ff ff ff c3 ff ff ff c2 ff ff ff c1 ff ff ff c0 ff ff ff bf ff ff ff be ff ff ff bd ff ff ff bc ff ff ff bb ff ff ff ba ff ff ff b9 ff ff ff b8 ff ff ff b7 ff ff ff 01 00 00 00 b5 ff ff ff b4 ff ff ff b3 ff ff ff b2 ff ff ff b1 ff ff ff b0 ff ff ff af ff ff ff ae ff ff ff ad ff ff ff ac ff ff ff ab ff ff ff 01 00 00 00 a9 ff ff ff a8 ff ff ff a7 ff ff ff a6 ff ff Data Ascii:
2023-12-28 16:22:58 UTC	16384	IN	Data Raw: 79 b1 ea 83 ab 2b 06 df e8 a0 12 52 ec 48 a5 45 40 f2 38 a3 58 23 b4 50 a6 2c e2 7d 74 07 e1 5c 31 d7 41 4b 13 17 4d b7 85 55 ac 88 50 76 08 d3 79 c5 ba 62 cc cb f9 86 9f a3 fc 5e dc e4 54 e3 95 74 e9 dd 2d fd 32 58 ba 4e 68 66 f1 c9 3a 9c e9 17 31 5f 5e a4 e7 03 4f 53 d1 bb cb 79 cb d6 65 ba 19 96 ed 05 d5 ab 84 48 46 84 50 12 e5 1a 69 4d f1 dc 29 29 5b 18 dc 07 ac 14 48 ae 99 77 2c 59 e2 7b 6d 49 a9 da f6 e1 49 af 83 18 1b af 9d be 87 89 58 72 98 9c 22 89 91 1e 7b 16 30 96 d8 85 1a e0 75 b7 c3 12 88 76 ab fc 62 dd 5b 4b 48 e9 37 ed 4a 79 0c 26 b7 85 13 a8 14 2c a1 65 a1 92 e0 fc 6a c1 e7 7c a6 a8 1a 81 d1 24 c7 5b 91 dc f1 9d 4a 2a d3 0b de b5 98 7a 3a 99 5e 94 55 63 cb 84 78 b7 d4 da ff 87 06 42 2a 98 4a b8 cf 16 7f e8 f7 2b 1a 96 74 19 5f d9 45 57 a0 Data Ascii: y+RHE@8X#P,}t\1AKMUPvyb^Tt-2XNhf:1_^OSyeHFPiM))[Hw,Y{mIIXr"{0uvb[KH7Jy&,ej\|$[Jz:^UcxBJ+t_EW
2023-12-28 16:22:58 UTC	16384	IN	Data Raw: 4b 9d 75 71 0c 56 54 e9 ba f5 40 02 8f 2d 4d b3 bb 53 60 29 f7 26 61 81 de ed b6 db 2d fb e7 d5 9e 8f 95 5a f4 49 66 c3 a7 65 8e 5a f3 7a 9a d9 ee 34 bc c1 ca 50 3a 78 72 87 7d 78 a0 e1 cf fb 95 d2 73 4a 51 62 96 f0 5b ee 0e 1d 50 b0 3a d0 bf b8 d3 b0 a5 fc e2 e2 76 f5 a3 ea bc e1 23 4f a0 5b ca 85 1f 54 cd b3 7b 47 bd 4e 74 d1 8a 21 6a ce 4f 8d 0c 88 67 47 b8 2e 88 7a 73 06 16 da b7 9a ce b5 4d 55 4e f3 92 e5 95 e5 ca 33 77 e8 3a 4c 79 4e 95 57 a1 1b 8a 79 e7 47 b4 ff 70 58 79 60 ab 3c 94 e9 f7 dc 41 b1 53 b2 a8 8f d2 17 1b 35 8e b2 c0 47 af cf 6b 8c 1a 56 c2 0d e0 a8 6c 77 2a 17 bb ab 3c 4f f4 39 47 ad 6c 6c 6e 3c cc 15 e7 8b 17 81 c3 5e 4a a3 7a 68 e1 e9 6e cf 01 22 cd d2 7a f8 60 6d ae dd 00 3d 83 dc b6 25 d6 3c 73 e3 75 28 52 9a 5d 07 e7 87 85 13 6d Data Ascii: KuqVT@-MS`)&a-ZIfeZz4P:xr}xsJQb[P:v#O[T{GNt!jOgG.zsMUN3w:LyNWyGpXy`<AS5GkVlw*<O9Glln<^Jzhn"z`m=%<su(R]m
2023-12-28 16:22:58 UTC	16384	IN	Data Raw: 4f c1 08 8e 9a fd e6 2f a4 79 a7 db 51 ba 2e 35 6f cb 91 8d a2 0d 85 0e ce 46 6c 37 7e c5 98 c1 fe 8a ae af 90 36 f9 20 d5 92 4a b5 41 8d b5 6b 3a c1 a7 73 0d c9 38 ba ca c9 5b 32 bc 4a bd 4d 99 2f 18 2a b6 6f 2f 66 c1 7d e7 ff 8c c7 45 fd ea 1e 3d e8 a0 bd 8a 0c a2 b9 3f 81 0e 4e 4f 6d 76 75 5f f2 11 02 e7 29 f5 52 b3 ac 55 b5 f0 f6 a3 8d 47 85 67 2d 7b 2a 51 3b 93 fa ae 88 35 49 67 47 5b 50 8a 54 0d 4f 0a b5 83 8c ae 21 6e 5e e8 1e 1f 8d 07 1f 16 58 4b 15 80 eb d4 31 03 ff ba 65 a4 7c 56 88 7f ec e7 f7 0d e9 0f 75 9b 7d 22 30 00 1d df 6a 14 c8 89 4f 26 f3 27 02 b3 88 17 9c 55 5f ac fc 2c 87 54 99 84 6d c7 30 08 02 a8 d8 a1 79 dc 53 73 c8 09 1f db 21 9c fd 0c dc 50 42 f4 d1 79 fd 23 90 56 e0 67 4d e9 1f c2 c6 a9 c8 3f 34 d5 e5 c4 c4 ac 4b ff 9b 05 b4 2c Data Ascii: O/yQ.5oFl7~6 JAk:s8[2JM/o/f}E=?NOmvu_)RUGg-{Q;5IgG[PTO!n^XK1e\|Vu}"0jO&'U_,Tm0ySs!PBy#VgM?4K,
2023-12-28 16:22:58 UTC	16384	IN	Data Raw: 7f 08 99 e3 e1 89 7e f7 6f cc 99 62 aa 5e 78 f8 ee a3 cd f9 4f a5 54 ec 67 f7 e9 10 d6 24 44 df 33 50 89 4c 06 bb 18 01 f6 37 58 d9 6a 59 ed 18 48 7f 85 95 a9 b3 75 65 8c d6 9c 7f 6e 80 4f 87 47 2c 01 09 95 c7 cd aa 77 4f 7b e3 5a 8a b7 ca d4 1e 8f e3 07 85 6b 55 23 35 7e 37 da 37 b7 8d 2c 40 ed 9b 2c 45 74 53 63 6f bf 0d 0a 60 20 52 ed f3 91 05 f2 bb 8a 96 4a d5 1d d3 7c 16 7e f7 a0 41 02 c2 2b b4 69 dd 1e 7d c0 79 10 d8 9d 79 56 b6 d5 05 93 33 50 b3 54 f5 56 c9 ac 1a 40 d9 78 97 d8 f0 cb bc e5 54 b2 ab 78 4d 76 dd 87 d3 85 f6 ca be 95 bd 79 2e cf 0f 43 69 ba 55 5b ab 62 7e 56 f6 0f cc 2b c8 e6 57 57 7b 2e e1 9c ec 40 a9 2e a9 8b 3c 97 5f 0d cb bb 13 9a 3c 72 00 74 3c e4 80 aa 2f db 5b 39 64 b5 44 57 d0 08 5c 2e a3 68 da 07 53 ec a8 ec f0 a2 81 0e eb 1d Data Ascii: ~ob^xOTg$D3PL7XjYHuenOG,wO{ZkU#5~77,@,EtSco` RJ\|~A+i}yyV3PTV@xTxMvy.CiU[b~V+WW{.@.<_<rt</[9dDW\.hS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50552	99.86.102.53	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	482	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:58 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Thu, 28 Dec 2023 16:22:58 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 20abf8fa53791926cff6732fe1dbea5c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-C3 X-Amz-Cf-Id: j-AAjHoRMUtVl2UeeFBp1c1qYLrjhbPSRe93qR8xt3wcygRzjv4dfg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50553	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	2089	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=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 HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:58 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:22:58 GMT Expires: Wed, 27 Dec 2023 16:22:58 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50554	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	1257	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=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 HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:58 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:22:59 GMT Expires: Wed, 27 Dec 2023 16:22:59 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50555	35.71.139.29	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	490	OUT	GET /xuid?mid=6732&dongle=38F&xuid=AAAKUMId6Is5iAM4d-CYAAAAAAA&expiration=1703866975&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=2505721175073375676369
2023-12-28 16:22:58 UTC	449	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:58 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluid=2505721175073375676369; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 27 Mar 2024 16:22:58 GMT; Secure; SameSite=None
2023-12-28 16:22:58 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50557	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	817	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJmNmEzYjNjYi0zNzVhLTRjNjgtNTkyNy1mYmE3ZTg1ZDI5ZWEiLCJkb21haW5faWQiOiI0ODQ0NzAiLCJ0X2Vwb2NoIjoxNzAzNzgwNTY4LCJkYXRhIjpbeyJuYW1lIjoiaW5wX3ZhbHVlIiwidmFsIjoiMTI4In1dfV0= HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:58 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:22:59 GMT Expires: Wed, 27 Dec 2023 16:22:59 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50556	18.213.98.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	841	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJmNmEzYjNjYi0zNzVhLTRjNjgtNTkyNy1mYmE3ZTg1ZDI5ZWEiLCJkb21haW5faWQiOiI0ODQ0NzAiLCJ0X2Vwb2NoIjoxNzAzNzgwNTY4LCJkYXRhIjpbeyJuYW1lIjoiY2xzX3ZhbHVlIiwidmFsIjoiMC4wMDA2NzcyMzYwNTA2NTg4OTI2In1dfV0= HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:58 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:22:58 GMT Expires: Wed, 27 Dec 2023 16:22:58 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50558	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	3059	OUT	GET /about/https://www.mediafire.com/about/jobs.php HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; ezux_tos_484470=26
2023-12-28 16:22:58 UTC	526	IN	HTTP/1.1 404 Not Found Date: Thu, 28 Dec 2023 16:22:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb252849ef4796-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0 Expires: 0 Strict-Transport-Security: max-age=0 Vary: Accept-Encoding Content-Security-Policy: frame-ancestors *.mediafire.com Pragma: no-cache X-Frame-Options: SAMEORIGIN Server: cloudflare
2023-12-28 16:22:58 UTC	843	IN	Data Raw: 37 32 30 32 0d 0a 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 73 68 61 72 69 6e 67 20 61 6e 64 20 73 74 6f 72 61 67 65 20 6d 61 64 65 20 73 69 6d 70 6c 65 3c 2f 74 69 74 Data Ascii: 7202 <!DOCTYPE html> <html lang="en-US" xmlns:fb="http://www.facebook.com/2008/fbml" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /><title>File sharing and storage made simple</tit
2023-12-28 16:22:58 UTC	1369	IN	Data Raw: 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 4d 45 54 41 20 4e 41 4d 45 3d 22 47 4f 4f 47 4c 45 42 4f 54 22 20 43 4f 4e 54 45 4e 54 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 4d 45 54 41 20 4e 41 4d 45 3d 22 53 4c 55 52 50 22 20 43 4f 4e 54 45 4e 54 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 74 72 61 6e 73 6c 61 74 65 2d 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 35 35 38 37 63 31 62 30 61 39 35 38 62 66 30 37 2d 36 32 61 38 65 33 30 39 64 65 36 38 36 65 38 37 2d 67 63 39 32 66 36 31 32 37 39 61 32 63 38 35 32 34 2d 31 31 22 3e 3c 2f 6d 65 74 61 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 43 6f 6e 74 Data Ascii: NDEX,FOLLOW" /><META NAME="GOOGLEBOT" CONTENT="INDEX,FOLLOW" /><META NAME="SLURP" CONTENT="INDEX,FOLLOW" /><meta name="google-translate-customization" content="5587c1b0a958bf07-62a8e309de686e87-gc92f61279a2c8524-11"></meta><meta http-equiv="Cache-Cont
2023-12-28 16:22:58 UTC	1369	IN	Data Raw: 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 66 62 3a 61 70 70 5f 69 64 22 20 63 6f 6e 74 65 6e 74 3d 22 31 32 34 35 37 38 38 38 37 35 38 33 35 37 35 22 20 2f 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 35 35 35 36 34 36 31 39 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 Data Ascii: :url" content="https://www.mediafire.com" /><meta property="fb:app_id" content="124578887583575" /><meta name="apple-itunes-app" content="app-id=555646196" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta name="msapplica
2023-12-28 16:22:58 UTC	1369	IN	Data Raw: 22 27 2b 65 2e 6d 65 73 73 61 67 65 2b 27 22 20 20 27 3b 7d 4b 75 28 35 2c 76 55 29 3b 7d 3b 76 61 72 20 49 75 3d 27 46 69 6c 65 20 73 68 61 72 69 6e 67 20 61 6e 64 20 73 74 6f 72 61 67 65 20 6d 61 64 65 20 73 69 6d 70 6c 65 27 3b 20 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 31 2e 37 2e 32 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 20 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 4a 61 76 61 53 63 72 69 70 74 22 3e 74 Data Ascii: "'+e.message+'" ';}Ku(5,vU);};var Iu='File sharing and storage made simple'; </script> <script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js"> </script> <script language="JavaScript" type="text/JavaScript">t
2023-12-28 16:22:58 UTC	1369	IN	Data Raw: 6d 2f 6c 69 62 73 2f 61 6d 70 6c 69 74 75 64 65 2d 38 2e 35 2e 30 2d 6d 69 6e 2e 67 7a 2e 6a 73 22 0a 20 20 20 20 3b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 2e 61 6d 70 6c 69 74 75 64 65 2e 72 75 6e 51 75 65 75 65 64 46 75 6e 63 74 69 6f 6e 73 29 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 5b 41 6d 70 6c 69 74 75 64 65 5d 20 45 72 72 6f 72 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 53 44 4b 22 29 7d 7d 0a 20 20 20 20 3b 76 61 72 20 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 69 29 0a 20 20 20 20 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 65 Data Ascii: m/libs/amplitude-8.5.0-min.gz.js" ;r.onload=function(){if(!e.amplitude.runQueuedFunctions){ console.log("[Amplitude] Error: could not load SDK")}} ;var i=t.getElementsByTagName("script")[0];i.parentNode.insertBefore(r,i) ;function s(e,t){e
2023-12-28 16:22:58 UTC	1369	IN	Data Raw: 73 65 28 29 0a 20 20 20 20 3b 69 66 28 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2e 5f 69 71 2c 65 29 29 7b 6e 2e 5f 69 71 5b 65 5d 3d 7b 5f 71 3a 5b 5d 7d 3b 76 28 6e 2e 5f 69 71 5b 65 5d 29 0a 20 20 20 20 7d 72 65 74 75 72 6e 20 6e 2e 5f 69 71 5b 65 5d 7d 3b 65 2e 61 6d 70 6c 69 74 75 64 65 3d 6e 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3b 0a 0a 20 20 20 20 76 61 72 20 61 6d 70 20 3d 20 61 6d 70 6c 69 74 75 64 65 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 3b 0a 20 20 20 20 61 6d 70 2e 69 6e 69 74 28 27 32 38 39 31 36 62 36 63 64 36 30 63 37 39 63 30 34 34 37 62 33 63 32 33 61 64 36 39 38 63 39 38 27 29 3b 0a 20 20 20 20 69 66 20 28 27 27 29 20 61 6d 70 2e 73 65 74 Data Ascii: se() ;if(!Object.prototype.hasOwnProperty.call(n._iq,e)){n._iq[e]={_q:[]};v(n._iq[e]) }return n._iq[e]};e.amplitude=n})(window,document); var amp = amplitude.getInstance(); amp.init('28916b6cd60c79c0447b3c23ad698c98'); if ('') amp.set
2023-12-28 16:22:58 UTC	1369	IN	Data Raw: 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 20 66 72 65 65 41 63 63 6f 75 6e 74 20 64 61 72 6b 54 68 65 6d 65 22 20 6f 6e 74 6f 75 63 68 73 74 61 72 74 3e 20 0a 3c 6e 6f 73 63 72 69 70 74 3e 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 6e 73 2e 68 74 6d 6c 3f 69 64 3d 47 54 4d 2d 35 33 4c 50 34 54 22 0a 68 65 69 67 68 74 3d 22 30 22 20 77 69 64 74 68 3d 22 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 20 3c 64 69 76 20 69 64 3d 22 73 74 61 74 75 73 6d 65 73 73 61 67 65 22 20 6e 61 6d 65 3d 22 73 74 61 74 Data Ascii: </head> <body class=" freeAccount darkTheme" ontouchstart> <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-53LP4T"height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> <div id="statusmessage" name="stat
2023-12-28 16:22:58 UTC	1369	IN	Data Raw: 61 6d 65 3d 22 75 70 6c 6f 61 64 65 72 5f 6d 73 67 5f 69 66 72 61 6d 65 22 20 69 64 3d 22 75 70 6c 6f 61 64 65 72 5f 6d 73 67 5f 69 66 72 61 6d 65 22 20 73 72 63 3d 22 2f 62 6c 61 6e 6b 2e 68 74 6d 6c 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 3e 3c 2f 69 66 72 61 6d 65 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 69 64 3d 22 6e 6f 74 69 66 79 5f 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 6d 73 67 5f 64 65 66 61 75 6c 74 20 6d 73 67 5f 73 69 7a 65 31 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 6f 6e 63 6c 69 63 6b 3d 22 51 76 28 65 76 65 6e 74 29 3b 22 20 6f 6e 6d 6f 75 73 65 6f 76 65 72 3d 22 69 66 28 21 4e 48 26 26 20 21 4e 42 29 4f 49 28 34 29 3b 4e 48 3d 74 Data Ascii: ame="uploader_msg_iframe" id="uploader_msg_iframe" src="/blank.html" scrolling="no" frameborder="0"></iframe> </div> </div> <div id="notify_main" class="msg_default msg_size1" style="display:none;" onclick="Qv(event);" onmouseover="if(!NH&& !NB)OI(4);NH=t
2023-12-28 16:22:58 UTC	1369	IN	Data Raw: 65 72 22 20 63 6c 61 73 73 3d 22 20 20 20 22 3e 20 3c 64 69 76 20 69 64 3d 22 68 65 6c 70 43 6f 6e 74 61 69 6e 65 72 22 20 63 6c 61 73 73 3d 22 66 6c 6f 61 74 69 6e 67 54 61 62 73 42 6f 78 22 3e 20 3c 66 6f 72 6d 20 69 64 20 63 6c 61 73 73 3d 22 68 65 6c 70 46 6f 72 6d 20 6f 70 65 6e 22 20 61 63 74 69 6f 6e 20 73 74 79 6c 65 3e 20 3c 70 3e 20 51 75 65 73 74 69 6f 6e 73 3f 20 3c 61 20 68 72 65 66 3d 22 2f 68 65 6c 70 2f 73 75 62 6d 69 74 5f 61 5f 74 69 63 6b 65 74 2e 70 68 70 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 53 75 62 6d 69 74 20 61 20 74 69 63 6b 65 74 3c 2f 61 3e 20 6f 72 20 3c 61 20 68 72 65 66 3d 22 2f 68 65 6c 70 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 76 69 73 69 74 20 6f 75 72 20 48 65 6c 70 20 43 65 6e 74 65 72 Data Ascii: er" class=" "> <div id="helpContainer" class="floatingTabsBox"> <form id class="helpForm open" action style> <p> Questions? <a href="/help/submit_a_ticket.php" target="_blank">Submit a ticket</a> or <a href="/help/" target="_blank">visit our Help Center
2023-12-28 16:22:58 UTC	1369	IN	Data Raw: 65 72 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 65 78 70 61 6e 64 48 65 6c 70 27 29 3b 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 22 3e 20 3c 69 20 63 6c 61 73 73 3d 22 42 74 6e 2d 69 63 6f 6e 20 42 74 6e 2d 69 63 6f 6e 2d 2d 77 68 69 74 65 20 42 74 6e 2d 69 63 6f 6e 2d 2d 68 65 6c 70 22 3e 3c 2f 69 3e 20 3c 73 70 61 6e 3e 48 65 6c 70 3c 2f 73 70 61 6e 3e 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 69 64 3d 22 6c 6f 67 67 65 64 5f 69 6e 5f 69 6e 66 6f 22 20 63 6c 61 73 73 3d 22 6c 6f 67 69 6e 5f 69 6e 70 72 6f 67 72 65 73 73 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 64 72 6f 70 64 6f 77 6e 4f 6e 43 6c 69 63 6b 20 64 64 52 69 67 68 74 20 63 66 22 3e 20 3c 61 Data Ascii: er').toggleClass('expandHelp');" style="margin-right:10px;"> <i class="Btn-icon Btn-icon--white Btn-icon--help"></i> <span>Help</span> </button> </div> <div id="logged_in_info" class="login_inprogress"> <div class="dropdown dropdownOnClick ddRight cf"> <a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50561	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	3043	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.mediafire.com Connection: keep-alive Content-Length: 1670 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; ezux_tos_484470=26
2023-12-28 16:22:58 UTC	1670	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 6a 73 22 3a 22 32 30 32 33 2e 31 30 2e 30 22 2c 22 66 6c 22 3a 22 32 30 32 33 2e 31 30 2e 30 22 7d 2c 22 70 61 67 65 6c 6f 61 64 49 64 22 3a 22 33 63 61 62 39 36 39 65 2d 39 35 31 37 2d 34 65 38 37 2d 62 37 33 65 2d 37 64 33 62 62 30 39 32 32 37 61 33 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a 67 38 2f 43 6c 61 73 73 69 63 53 68 65 6c 6c 53 65 74 75 70 5f 34 5f 33 5f 31 2e 65 78 65 2f 66 69 6c 65 22 2c 22 6c 61 6e 64 69 6e 67 50 61 74 68 22 3a 22 2f 66 69 6c 65 2f 64 35 6c 6c 62 62 6d 38 77 75 39 32 6a Data Ascii: {"referrer":"","eventType":3,"versions":{"js":"2023.10.0","fl":"2023.10.0"},"pageloadId":"3cab969e-9517-4e87-b73e-7d3bb09227a3","location":"https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe/file","landingPath":"/file/d5llbbm8wu92j
2023-12-28 16:22:58 UTC	374	IN	HTTP/1.1 204 No Content Date: Thu, 28 Dec 2023 16:22:58 GMT Connection: close access-control-allow-origin: https://www.mediafire.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 83cb25298baa6b61-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50560	69.194.240.13	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:58 UTC	1013	OUT	GET /csync/RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005?redir=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D37%26buyeruid%3DRX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:22:59 UTC	826	IN	HTTP/1.1 302 Found date: Thu, 28 Dec 2023 16:22:59 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%7D; path=/; expires=Fri, 27 Dec 2024 16:22:59 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ssp.disqus.com/match?bidder=37&buyeruid=RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005&r=Cid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB etag: RX798d506ec7f447e6bc6b13a43f6099f8005 connection: close
2023-12-28 16:22:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50564	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:59 UTC	3072	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=1889789607327243659 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; chkChromeAb67Sec=3; pi=158936:3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; SPugT=1703780577; KRTBCOOKIE_466=16530-d541ebb4-9aad-4c87-b8e0-e665e8aef738; KRTBCOOKIE_391=22924-1889789607327243659&KRTB&23263-1889789607327243659&KRTB&23481-1889789607327243659; PugT=1703780577
2023-12-28 16:22:59 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:22:59 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-1889789607327243659&KRTB&23263-1889789607327243659&KRTB&23481-1889789607327243659; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:59 GMT; path=/ Set-Cookie: PugT=1703780579; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:22:59 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:22:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50566	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:59 UTC	3161	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/about/https://www.mediafire.com/about/jobs.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; ezux_tos_484470=26 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:22:59 UTC	416	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:22:59 GMT Connection: close CF-Ray: 83cb252fadbd2ccc-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 607876 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:22:59 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50565	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:59 UTC	3137	OUT	GET /templates/upgrade/upgrade_button.php HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/about/https://www.mediafire.com/about/jobs.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; ezux_tos_484470=26
2023-12-28 16:22:59 UTC	307	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:22:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb252fa91a46e9-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, nofollow Server: cloudflare
2023-12-28 16:22:59 UTC	1369	IN	Data Raw: 31 36 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 Data Ascii: 16c0<!DOCTYPE html><html><head><style> html, body, a { margin: 0; padding: 0; border: 0; outline: 0; } html { font-size: 14px;
2023-12-28 16:22:59 UTC	1369	IN	Data Raw: 6e 2d 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 32 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: n-height: 36px; line-height: 1.5; margin: 0; padding: 6px 12px; border: 0; outline: 0; text-transform: uppercase; text-align: center;
2023-12-28 16:22:59 UTC	1369	IN	Data Raw: 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 73 76 67 5f 64 61 72 6b 2f 69 63 6f 6e 73 5f 73 70 72 69 74 65 2e 73 76 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 Data Ascii: inline-flex; flex-shrink: 0; height: 24px; width: 24px; background-image: url(//static.mediafire.com/images/icons/svg_dark/icons_sprite.svg); background-repeat: no-repeat;
2023-12-28 16:22:59 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 42 74 6e 2d 69 63 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 61 20 69 64 3d 22 75 70 67 72 61 64 65 5f 61 63 63 74 22 20 63 6c 61 73 73 3d 22 75 70 67 72 61 64 65 5f 61 63 63 74 20 42 74 6e 20 42 74 6e 2d 2d 67 72 65 65 6e 55 70 67 72 61 64 65 22 20 68 72 65 66 3d 22 2f 75 70 67 72 61 64 65 22 20 74 69 74 6c 65 3d 22 55 70 67 72 61 64 65 20 6e 6f 77 21 22 20 74 61 72 67 65 74 3d 22 5f 74 6f 70 22 Data Ascii: } .Btn-icon { margin-right: 0; } } </style></head><body><a id="upgrade_acct" class="upgrade_acct Btn Btn--greenUpgrade" href="/upgrade" title="Upgrade now!" target="_top"
2023-12-28 16:22:59 UTC	356	IN	Data Raw: 79 43 6f 64 65 20 3d 3d 3d 20 39 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 73 68 6f 77 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 73 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 73 68 6f 77 Data Ascii: yCode === 9) { document.body.classList.add('show-focus-outlines'); } }); document.addEventListener('click', function(e) { document.body.classList.remove('show
2023-12-28 16:22:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50568	142.250.113.139	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:22:59 UTC	859	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:23:00 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 28 Dec 2023 16:23:00 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:23:00 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2023-12-28 16:23:00 UTC	1252	IN	Data Raw: 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e Data Ascii: (Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;},0)};_.ca=function(a){a&&"function"==typeof a.
2023-12-28 16:23:00 UTC	1252	IN	Data Raw: 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b 5f 2e 44 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 43 61 28 29 3f 21 31 3a 5f 2e 76 28 22 4f 70 65 72 61 22 29 7d 3b Data Ascii: \|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};_.Da=function(){return _.Ca()?!1:_.v("Opera")};
2023-12-28 16:23:00 UTC	1252	IN	Data Raw: 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 55 61 2e 61 70 70 6c 79 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 30 3d 3d 3d 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 5f 2e 56 61 28 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 61 5b 30 5d 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2b 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 64 5d 29 2b 61 5b 64 2b 31 5d 3b 72 65 74 75 72 6e 20 5f 2e 56 61 28 63 29 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 72 65 74 75 72 6e 28 61 3d 6e 75 6c 6c 3d 3d 28 63 3d 28 62 3d 61 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 Data Ascii: toLowerCase()===a+":"})};_.Wa=function(a){var b=_.Ua.apply(1,arguments);if(0===b.length)return _.Va(a[0]);for(var c=a[0],d=0;d<b.length;d++)c+=encodeURIComponent(b[d])+a[d+1];return _.Va(c)};_.Xa=function(a){var b,c;return(a=null==(c=(b=a.document).queryS
2023-12-28 16:23:00 UTC	1252	IN	Data Raw: 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 66 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 74 68 69 73 2e 67 3d 66 3b 66 62 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 Data Ascii: {var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&fb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;fb(this,"description",{configurable:!0,writable:!0,valu
2023-12-28 16:23:00 UTC	1252	IN	Data Raw: 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6d 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 6e 65 77 20 63 3b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 63 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 7d 69 66 28 22 75 6e 64 65 Data Ascii: h(b.value);a=c}return a};lb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.mb=function(){function a(){function c(){}new c;Reflect.construct(c,[],function(){});return new c instanceof c}if("unde
2023-12-28 16:23:00 UTC	1252	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 72 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 Data Ascii: ion(){return _.mb});w("Reflect.setPrototypeOf",function(a){return a?a:rb?function(b,c){try{return rb(b,c),!0}catch(d){return!1}}:null});w("Promise",function(a){function b(){this.g=null}function c(g){return g instanceof e?g:new e(function(h){h(g)})}if(a)
2023-12-28 16:23:00 UTC	1252	IN	Data Raw: 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 22 2b 74 68 69 73 2e 67 29 3b 74 68 69 73 2e 67 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 67 26 26 74 68 69 73 2e 4d 28 29 3b 74 68 69 73 2e 44 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 64 28 66 Data Ascii: this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`"+this.g);this.g=g;this.j=h;2===this.g&&this.M();this.D()};e.prototype.M=function(){var g=this;d(f
2023-12-28 16:23:00 UTC	1252	IN	Data Raw: 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 51 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 68 3f 66 2e 68 28 6c 29 3a 0a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: hen(void 0,g)};e.prototype.Qc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null==this.h?f.h(l):this.h.push(l);this.A=!0};e.resolve=c;e.reject=function(g){return new e(function(h
2023-12-28 16:23:00 UTC	1252	IN	Data Raw: 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 Data Ascii: bject[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50567	34.218.121.115	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:00 UTC	636	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1065 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:00 UTC	1065	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 36 66 35 32 35 65 39 65 61 37 37 66 66 63 61 35 36 63 38 63 32 35 61 65 61 34 32 39 38 61 32 30 26 63 6c 69 65 6e 74 3d 32 38 39 31 36 62 36 63 64 36 30 63 37 39 63 30 34 34 37 62 33 63 32 33 61 64 36 39 38 63 39 38 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 59 73 30 72 52 68 43 6a 43 2d 72 68 55 70 6d 46 69 69 62 37 73 73 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 30 33 37 38 30 35 37 38 38 31 36 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 35 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 30 33 37 38 30 35 32 32 35 39 39 25 32 43 25 32 32 Data Ascii: checksum=6f525e9ea77ffca56c8c25aea4298a20&client=28916b6cd60c79c0447b3c23ad698c98&e=%5B%7B%22device_id%22%3A%22Ys0rRhCjC-rhUpmFiib7ss%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1703780578816%2C%22event_id%22%3A5%2C%22session_id%22%3A1703780522599%2C%22
2023-12-28 16:23:00 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:00 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0e4-382e674836d971ea50d0bb7e Strict-Transport-Security: max-age=15768000
2023-12-28 16:23:00 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50569	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:00 UTC	3161	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/about/https://www.mediafire.com/about/jobs.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojoism.0.4.4; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; ezux_tos_484470=26 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:23:00 UTC	417	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:23:00 GMT Connection: close CF-Ray: 83cb25331d68486d-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 2431400 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:23:00 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50571	54.236.175.55	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:00 UTC	964	OUT	GET /match?bidder=37&buyeruid=RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005&r=Cid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgB HTTP/1.1 Host: ssp.disqus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zeta-ssp-user-id=ua-c3022ff3-a52d-3262-99be-6a51a23046c2
2023-12-28 16:23:00 UTC	607	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:23:00 GMT Content-Length: 0 Connection: close cache-control: no-store pragma: no-cache expires: 0 location: https://bh.contextweb.com/bh/rtset?pid=562894&ev=1&gdpr=&gdpr_consent=${GDPR_CONSENT}&us_privacy=&rurl=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D29%26buyeruid%3D%25%25VGUID%25%25%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50570	104.36.113.112	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:00 UTC	3272	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=10086349&p=158936&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; chkChromeAb67Sec=3; DPSync3=1704758400%3A257%7C1704326400%3A265%7C1704931200%3A260_258_256_263_261_259_201_262%7C1703808000%3A248_255; SyncRTB3=1704931200%3A13_104_56_220_231_54_21_250_22_5_264_166_249_254_240_46_48_3_7_165_71_55_8_176%7C1704326400%3A223_2_15%7C1706313600%3A224%7C1704585600%3A63%7C1705017600%3A35; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; SPugT=1703780577; KRTBCOOKIE_466=16530-d541ebb4-9aad-4c87-b8e0-e665e8aef738; KRTBCOOKIE_391=22924-1889789607327243659&KRTB&23263-1889789607327243659&KRTB&23481-1889789607327243659; PugT=1703780579
2023-12-28 16:23:00 UTC	1107	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=158936:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1704326400%3A252_265_253%7C1704758400%3A257%7C1704931200%3A201_245_261_259_236_260_256_262_258_263%7C1703808000%3A248_255; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1705017600%3A35%7C1708905600%3A69%7C1706313600%3A224%7C1704931200%3A165_55_104_166_7_264_249_8_5_3_22_240_13_56_231_96_176_48_234_54_21_254_178_71_99_233_220_250_46%7C1704326400%3A38_223_2_15%7C1704585600%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 28 Dec 2023 16:22:59 GMT Content-Length: 1507 Connection: close
2023-12-28 16:23:00 UTC	1507	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 62 70 69 2e 72 74 61 63 74 69 76 61 74 65 2e 63 6f 6d 2f 74 61 67 2f 3f 69 64 3d 32 30 39 30 39 26 75 73 65 72 5f 69 64 3d 34 32 45 35 44 31 30 32 2d 46 43 43 37 2d 34 30 37 39 2d 41 45 42 32 2d 43 41 45 44 39 34 46 31 46 36 34 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 37 35 31 34 35 3f 62 69 64 64 65 72 5f 69 64 3d 31 39 35 37 35 35 26 62 69 64 64 65 72 5f 75 75 69 64 3d 34 32 45 35 44 31 30 32 2d 46 43 43 37 2d 34 30 37 39 2d 41 45 42 32 2d 43 41 45 44 39 Data Ascii: PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=42E5D102-FCC7-4079-AEB2-CAED9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50572	74.119.118.149	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:00 UTC	604	OUT	GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=&j=window.advBidxc.mnetRtusId HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:00 UTC	317	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 date: Thu, 28 Dec 2023 16:23:00 GMT server: Kestrel cache-control: private, max-age=3600 expires: 60 transfer-encoding: chunked server-processing-duration-in-ticks: 391759 strict-transport-security: max-age=31536000; preload; connection: close
2023-12-28 16:23:00 UTC	72	IN	Data Raw: 33 44 0d 0a 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 6d 6e 65 74 52 74 75 73 49 64 28 7b 22 73 74 61 74 75 73 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 75 73 65 72 69 64 22 3a 22 22 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 3Dwindow.advBidxc.mnetRtusId({"status":"Unknown","userid":""});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50574	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:00 UTC	3161	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/about/https://www.mediafire.com/about/jobs.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; ezux_tos_484470=26; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojotg0.0.5.5 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:23:00 UTC	417	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:23:00 GMT Connection: close CF-Ray: 83cb25367ac1e5a5-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 2607531 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:23:00 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50578	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:01 UTC	3161	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/about/https://www.mediafire.com/about/jobs.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; _gat_gtag_UA_829541_1=1; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; _ga=GA1.1.1411026819.1703780523; ezux_lpl_484470; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780571.12.0.0; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; ezux_tos_484470=26; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojotg0.0.5.5 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:23:01 UTC	417	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:23:01 GMT Connection: close CF-Ray: 83cb253a4bb04677-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 2431401 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:23:01 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50580	35.244.159.8	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:01 UTC	1008	OUT	GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3467821796496295000V10%26type%3Dopx%26refUrl%3D%26vid%3D37805797753467821796496295000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; pd=v2\|1703780533\|vMgavPkWgy; univ_id=537072971\|3c35df97-b65a-42b9-abca-61d06d8e5fc4\|1703780541654279
2023-12-28 16:23:02 UTC	653	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=c21b9516-ce3b-481b-a6d6-a336f6e2751e\|1703780531; Version=1; Expires=Fri, 27-Dec-2024 16:23:02 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://contextual.media.net/cksync.html?cs=8&vsid=3467821796496295000V10&type=opx&refUrl=&vid=37805797753467821796496295000V10&axid_e=&ovsid=d99bc3d0-ccbc-4d0c-9f4f-15b0202ad43f Date: Thu, 28 Dec 2023 16:23:02 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50583	74.119.118.138	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:02 UTC	781	OUT	GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:02 UTC	696	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 28 Dec 2023 16:23:01 GMT server: Kestrel cache-control: no-cache expires: Thu, 28 Dec 2023 00:00:00 GMT location: https://contextual.media.net/cksync.php?cs=1&type=crt&ovsid=b4a3613d-6031-4326-ba6a-2ee801b2f4d5&gdpr=0&gdpr_consent=&us_privacy= pragma: no-cache set-cookie: uid=b4a3613d-6031-4326-ba6a-2ee801b2f4d5; expires=Tue, 21 Jan 2025 16:23:01 GMT; domain=.criteo.com; path=/; secure; samesite=none x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1381419 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50585	35.207.24.140	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:02 UTC	746	OUT	GET /sync?ssp=medianet&ssp_user_id=3467821796496295000V10 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=993f14d4-7b99-4748-8f99-8687578ad473; c=1703780575; tuuid_lu=1703780575; ssh=!bidswitch,1703780575
2023-12-28 16:23:02 UTC	487	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 28 Dec 2023 16:23:02 GMT Location: //contextual.media.net/cksync.php?type=mf&ovsid=993f14d4-7b99-4748-8f99-8687578ad473&cs=1 Set-Cookie: ssh=!medianet,1703780582!bidswitch,1703780575; path=/; expires=Sat, 27-Dec-2025 16:23:02 GMT; domain=.mfadsrvr.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50587	38.91.45.7	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:02 UTC	884	OUT	GET /usersync/131?redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3467821796496295000V10%26type%3Ddi%26refUrl%3D%26vid%3D37805797753467821796496295000V10%26axid_e%3D%26ovsid%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_3c93ec9c5d044eca9dba8; CDIPARTNERS=%7B%221%22%3A%2220231228%22%7D
2023-12-28 16:23:02 UTC	740	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://contextual.media.net/cksync.php?cs=8&vsid=3467821796496295000V10&type=di&refUrl=&vid=37805797753467821796496295000V10&axid_e=&ovsid=di_3c93ec9c5d044eca9dba8 set-cookie: CDIUSER=di_3c93ec9c5d044eca9dba8; Max-Age=47260800; SameSite=None; Expires=Fri, 27 Jun 2025 16:23:02 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220231228%22%2C%22131%22%3A%2220231228%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 27 Jun 2025 16:23:02 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 28 Dec 2023 16:23:01 GMT server: b connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50584	35.211.178.172	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:02 UTC	714	OUT	GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; c=1703780532; tuuid_lu=1703780535
2023-12-28 16:23:02 UTC	440	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Dec 2023 16:23:02 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ads.betweendigital.com/match?bidder_id=43092&gdpr=0&consent=&callback_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D429%26user_id%3D%24%7BUSER_ID%7D%26ssp%3Dmedianet%26expires%3D30%26user_group%3D%24%7BUSER_GROUP%7D%26gdpr%3D0%26gdpr_consent%3D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50586	3.33.220.150	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:02 UTC	859	OUT	GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRIbCgxzaGFyZXRocm91Z2gSCwjCuJfp6PLDPBAFGAEgASgCMgsIpq6alv_ywzwQBTgBWgxzaGFyZXRocm91Z2hgAg..
2023-12-28 16:23:02 UTC	615	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:23:02 GMT Content-Length: 199 Connection: close server: Kestrel location: https://cs.media.net/cksync?cs=1&type=ttd&ovsid=3c35df97-b65a-42b9-abca-61d06d8e5fc4 set-cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; expires=Sat, 28 Dec 2024 16:23:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRIbCgxzaGFyZXRocm91Z2gSCwjCuJfp6PLDPBAFGAEgASgCMgsIsOHo6v_ywzwQBTgBWgc4bTMzems0YAI.; expires=Sat, 28 Dec 2024 16:23:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-28 16:23:02 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 22 3e 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://cs.media.net/cksync?cs=1&type=ttd&ovsid=3c35df97-b65a-42b9-abca-61d06d8e5fc4">https://cs.media.net/cksync?cs=1&type=ttd&ovsid=3c35df97-b65a-42b9-abca-61d06d8e5fc4</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50590	198.148.27.131	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:02 UTC	1098	OUT	GET /bh/rtset?pid=562894&ev=1&gdpr=&gdpr_consent=${GDPR_CONSENT}&us_privacy=&rurl=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D29%26buyeruid%3D%25%25VGUID%25%25%26r%3DCid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgC HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=kViit6MQmQ8v; pb_rtb_ev=3-1osz\|7dN.0.AADkEU7LG0EAABaftLpXow; INGRESSCOOKIE=cb46d1714d9491de
2023-12-28 16:23:02 UTC	1032	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-db744d8c7-556fc Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=kViit6MQmQ8v;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 22-Dec-2024 16:23:02 GMT;Max-Age=31104000;SameSite=None Location: https://ssp.disqus.com/match?bidder=29&buyeruid=kViit6MQmQ8v&r=Cid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgC&ev=1&us_privacy=&pid=562894&gdpr_consent=${GDPR_CONSENT}&gdpr= Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50582	54.147.24.55	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:02 UTC	849	OUT	GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3467821796496295000V10%26type%3Ddxu%26refUrl%3D%26vid%3D37805797753467821796496295000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=gkU8EdmD1RiT9h5; matchpubmatic=5
2023-12-28 16:23:02 UTC	784	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 28 Dec 2023 16:23:01 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=8&vsid=3467821796496295000V10&type=dxu&refUrl=&vid=37805797753467821796496295000V10&axid_e=&ovsid=gkU8EdmD1RiT9h5 Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-07acfe1844a059670@us-east-1d@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=gkU8EdmD1RiT9h5; Domain=.w55c.net; Expires=Tue, 28-Jan-2025 16:23:02 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchmedianet=5; Domain=.w55c.net; Expires=Sat, 27-Jan-2024 16:23:02 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50591	70.42.32.31	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:02 UTC	705	OUT	GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:02 UTC	583	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 165 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=qcwviWe8CNPv6HUiCsR5; Path=/; Domain=zemanta.com; Expires=Fri, 27 Dec 2024 16:23:02 GMT; Max-Age=31536000; Secure; SameSite=None Date: Thu, 28 Dec 2023 16:23:02 GMT
2023-12-28 16:23:02 UTC	165	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 6d 65 64 69 61 6e 65 74 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 25 32 46 63 6b 73 79 6e 63 2e 70 68 70 25 33 46 63 73 25 33 44 31 25 32 36 74 79 70 65 25 33 44 7a 65 6d 25 32 36 6f 76 73 69 64 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 70 75 69 64 3d 25 32 34 25 37 42 56 53 49 44 25 37 44 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50592	96.7.168.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:02 UTC	862	OUT	GET /cksync.html?cs=8&vsid=3467821796496295000V10&type=rkt&refUrl=&vid=37805797753467821796496295000V10&axid_e=&ovsid=1813050727983315911 HTTP/1.1 Host: contextual.media.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3467821796496295000V10
2023-12-28 16:23:05 UTC	613	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-rk=1813050727983315911~~8;Expires=Thu, 26 Dec 2024 16:23:04 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 x-mnet-hl2: E Expires: Thu, 28 Dec 2023 16:23:05 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 28 Dec 2023 16:23:05 GMT Connection: close
2023-12-28 16:23:05 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2023-12-28 16:23:05 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50593	34.170.123.2	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:02 UTC	873	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=53579F87497840889870425CB87FCFFF
2023-12-28 16:23:03 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 28 Dec 2023 16:23:03 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:53579F87497840889870425CB87FCFFF&gdpr=0&gdpr_consent= Expires: Wed, 27 Dec 2023 16:23:03 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2023-12-28 16:23:03 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50594	54.196.33.224	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:02 UTC	1398	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id=s%3A0-584acf10-1d6c-58a9-741b-7e30ce3b8c9a.ntkbrnJW2LSht1w5A3szaW3nsSgltT5nPIRbd23AyG8; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v2=s%3AWErPEB1sWKl0G34wzjuMmtRmKQI.FpBZmwqvDhyap1OQcxTpynniussT7pz1DWzEukUU22E; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc; sa-user-id-v3=s%3AAQAKIL5O_WeoT3b4aCm3zkrk8OLAkcd40uKvnWo7xOpqt9OWEHwYBCDcwbasBjABOgT87-jmQgR7JqDq.n5%2FpDEfbfyOeYTUqZDY46q3uUIu7L3G62op5AI7MESc
2023-12-28 16:23:03 UTC	304	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 28 Dec 2023 16:23:03 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=WErPEB1sWKl0G34wzjuMmtRmKQI&gdpr=0&gdpr_consent= Content-Length: 188 Connection: Close
2023-12-28 16:23:03 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 57 45 72 50 45 42 31 73 57 4b 6c 30 47 33 34 77 7a 6a 75 4d 6d 74 52 6d 4b 51 49 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=WErPEB1sWKl0G34wzjuMmtRmKQI&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50596	35.166.142.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:03 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:03 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Dec 2023 16:23:03 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0e7-5472189c484d65332df4b48b Strict-Transport-Security: max-age=15768000
2023-12-28 16:23:03 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50598	69.194.240.13	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:03 UTC	802	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%7D
2023-12-28 16:23:03 UTC	683	IN	HTTP/1.1 302 Found date: Thu, 28 Dec 2023 16:23:03 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Fri, 27 Dec 2024 16:23:03 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=1993784802 etag: RX798d506ec7f447e6bc6b13a43f6099f8005 connection: close
2023-12-28 16:23:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50601	44.210.41.244	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:03 UTC	657	OUT	GET /tag/?id=20909&user_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:03 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Thu, 28 Dec 2023 16:23:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2023-12-28 16:23:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50602	52.22.32.84	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:03 UTC	644	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:03 UTC	490	IN	HTTP/1.1 303 See Other Date: Thu, 28 Dec 2023 16:23:03 GMT Content-Length: 0 Connection: close Location: /s/75145?bidder_id=195755&bidder_uuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&_li_chk=true&previous_uuid=13bc47c7c97c416fa238cb8d2bc718e6 Set-Cookie: lidid=13bc47c7-c97c-416f-a238-cb8d2bc718e6; Max-Age=63072000; Expires=Sat, 27 Dec 2025 16:23:03 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50597	35.214.228.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:03 UTC	819	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token} HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50600	172.104.105.5	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:03 UTC	688	OUT	GET /pubmatic HTTP/1.1 Host: gocm.c.appier.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:03 UTC	627	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 28 Dec 2023 16:23:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 153 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=Wiwdw7U-A5Ouzuec56CNZQ P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=Wiwdw7U-A5Ouzuec56CNZQ; Path=/; Domain=c.appier.net; Expires=Sat, 28 Dec 2024 16:23:03 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None
2023-12-28 16:23:03 UTC	153	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 79 4d 44 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 57 69 77 64 77 37 55 2d 41 35 4f 75 7a 75 65 63 35 36 43 4e 5a 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=Wiwdw7U-A5Ouzuec56CNZQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50604	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:04 UTC	3447	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=Wiwdw7U-A5Ouzuec56CNZQ HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; SPugT=1703780577; KRTBCOOKIE_466=16530-d541ebb4-9aad-4c87-b8e0-e665e8aef738; KRTBCOOKIE_391=22924-1889789607327243659&KRTB&23263-1889789607327243659&KRTB&23481-1889789607327243659; PugT=1703780579; chkChromeAb67Sec=4; pi=158936:4; DPSync3=1704326400%3A252_265_253%7C1704758400%3A257%7C1704931200%3A201_245_261_259_236_260_256_262_258_263%7C1703808000%3A248_255; SyncRTB3=1705017600%3A35%7C1708905600%3A69%7C1706313600%3A224%7C1704931200%3A165_55_104_166_7_264_249_8_5_3_22_240_13_56_231_96_176_48_234_54_21_254_178_71_99_233_220_250_46%7C1704326400%3A38_223_2_15%7C1704585600%3A63
2023-12-28 16:23:04 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:23:04 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=16787-Wiwdw7U-A5Ouzuec56CNZQ; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:23:04 GMT; path=/ Set-Cookie: PugT=1703780584; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:23:04 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:23:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50603	3.33.220.150	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:04 UTC	950	OUT	GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=1993784802 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRIbCgxzaGFyZXRocm91Z2gSCwjCuJfp6PLDPBAFGAEgASgCMgsIsOHo6v_ywzwQBTgBWgc4bTMzems0YAI.
2023-12-28 16:23:04 UTC	610	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:23:04 GMT Content-Length: 181 Connection: close server: Kestrel location: https://sync.1rx.io/usersync/tradedesk/3c35df97-b65a-42b9-abca-61d06d8e5fc4 set-cookie: TDID=3c35df97-b65a-42b9-abca-61d06d8e5fc4; expires=Sat, 28 Dec 2024 16:23:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjk0teB5vLDPBAFEhQKBXRhcGFkEgsIlsyBiObywzwQBRIbCgxzaGFyZXRocm91Z2gSCwjCuJfp6PLDPBAFGAEgASgCMgsIqp-cg4DzwzwQBTgBWgthZGNvbmR1Y3RvcmAC; expires=Sat, 28 Dec 2024 16:23:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2023-12-28 16:23:04 UTC	181	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 33 63 33 35 64 66 39 37 2d 62 36 35 61 2d 34 32 62 39 2d 61 62 63 61 2d 36 31 64 30 36 64 38 65 35 66 63 34 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.1rx.io/usersync/tradedesk/3c35df97-b65a-42b9-abca-61d06d8e5fc4">https://sync.1rx.io/usersync/tradedesk/3c35df97-b65a-42b9-abca-61d06d8e5fc4</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50606	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:04 UTC	3474	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=WErPEB1sWKl0G34wzjuMmtRmKQI&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; SPugT=1703780577; KRTBCOOKIE_466=16530-d541ebb4-9aad-4c87-b8e0-e665e8aef738; KRTBCOOKIE_391=22924-1889789607327243659&KRTB&23263-1889789607327243659&KRTB&23481-1889789607327243659; PugT=1703780579; chkChromeAb67Sec=4; pi=158936:4; DPSync3=1704326400%3A252_265_253%7C1704758400%3A257%7C1704931200%3A201_245_261_259_236_260_256_262_258_263%7C1703808000%3A248_255; SyncRTB3=1705017600%3A35%7C1708905600%3A69%7C1706313600%3A224%7C1704931200%3A165_55_104_166_7_264_249_8_5_3_22_240_13_56_231_96_176_48_234_54_21_254_178_71_99_233_220_250_46%7C1704326400%3A38_223_2_15%7C1704585600%3A63
2023-12-28 16:23:05 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:23:05 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-WErPEB1sWKl0G34wzjuMmtRmKQI&KRTB&23334-WErPEB1sWKl0G34wzjuMmtRmKQI&KRTB&23417-WErPEB1sWKl0G34wzjuMmtRmKQI&KRTB&23426-WErPEB1sWKl0G34wzjuMmtRmKQI; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:23:05 GMT; path=/ Set-Cookie: PugT=1703780585; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:23:05 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:23:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50605	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:04 UTC	3491	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:53579F87497840889870425CB87FCFFF&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; SPugT=1703780577; KRTBCOOKIE_466=16530-d541ebb4-9aad-4c87-b8e0-e665e8aef738; KRTBCOOKIE_391=22924-1889789607327243659&KRTB&23263-1889789607327243659&KRTB&23481-1889789607327243659; PugT=1703780579; chkChromeAb67Sec=4; pi=158936:4; DPSync3=1704326400%3A252_265_253%7C1704758400%3A257%7C1704931200%3A201_245_261_259_236_260_256_262_258_263%7C1703808000%3A248_255; SyncRTB3=1705017600%3A35%7C1708905600%3A69%7C1706313600%3A224%7C1704931200%3A165_55_104_166_7_264_249_8_5_3_22_240_13_56_231_96_176_48_234_54_21_254_178_71_99_233_220_250_46%7C1704326400%3A38_223_2_15%7C1704585600%3A63
2023-12-28 16:23:05 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:23:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:23:05 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50609	54.236.175.55	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	996	OUT	GET /match?bidder=29&buyeruid=kViit6MQmQ8v&r=Cid1YS1jMzAyMmZmMy1hNTJkLTMyNjItOTliZS02YTUxYTIzMDQ2YzIQ____________ASqAAWh0dHBzOi8vbWF0Y2guc2hhcmV0aHJvdWdoLmNvbS9zeW5jL3YxP3NvdXJjZV9pZD03cmtKQWhQQ1dYYnc5THE1ZFp4YzZUdk4mc291cmNlX3VzZXJfaWQ9dWEtYzMwMjJmZjMtYTUyZC0zMjYyLTk5YmUtNmE1MWEyMzA0NmMyMgIlHTgC&ev=1&us_privacy=&pid=562894&gdpr_consent=${GDPR_CONSENT}&gdpr= HTTP/1.1 Host: ssp.disqus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zeta-ssp-user-id=ua-c3022ff3-a52d-3262-99be-6a51a23046c2
2023-12-28 16:23:05 UTC	292	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:23:05 GMT Content-Length: 0 Connection: close cache-control: no-store pragma: no-cache expires: 0 location: https://match.sharethrough.com/sync/v1?source_id=7rkJAhPCWXbw9Lq5dZxc6TvN&source_user_id=ua-c3022ff3-a52d-3262-99be-6a51a23046c2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50610	52.22.32.84	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	756	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&_li_chk=true&previous_uuid=13bc47c7c97c416fa238cb8d2bc718e6 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=13bc47c7-c97c-416f-a238-cb8d2bc718e6
2023-12-28 16:23:05 UTC	633	IN	HTTP/1.1 303 See Other Date: Thu, 28 Dec 2023 16:23:05 GMT Content-Length: 0 Connection: close Location: https://dis.criteo.com/dis/usersync.aspx?r=77&p=311&cp=liveintent&cu=1&url=https://i.liadm.com/s/28292?bidder_id%3D71340%26bidder_uuid%3D@@CRITEO_USERID@@ Set-Cookie: _li_ss=CggKBgjdARDrFg; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:23:05 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=13bc47c7-c97c-416f-a238-cb8d2bc718e6; Max-Age=63072000; Expires=Sat, 27 Dec 2025 16:23:05 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 3 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50611	44.208.253.113	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	1033	OUT	GET /qmap?c=240&tp=PUBM&tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:23:05 UTC	314	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:05 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.10.22 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:23:05 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50615	96.7.168.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	776	OUT	GET /cksync.html?cs=8&vsid=3467821796496295000V10&type=opx&refUrl=&vid=37805797753467821796496295000V10&axid_e=&ovsid=d99bc3d0-ccbc-4d0c-9f4f-15b0202ad43f HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3467821796496295000V10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50608	69.194.240.13	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	869	OUT	GET /usersync/tradedesk/3c35df97-b65a-42b9-abca-61d06d8e5fc4 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D
2023-12-28 16:23:05 UTC	784	IN	HTTP/1.1 302 Found date: Thu, 28 Dec 2023 16:23:05 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Fri, 27 Dec 2024 16:23:05 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005 connection: close
2023-12-28 16:23:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50614	96.7.168.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	727	OUT	GET /cksync.php?cs=1&type=crt&ovsid=b4a3613d-6031-4326-ba6a-2ee801b2f4d5&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3467821796496295000V10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50617	96.7.168.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	693	OUT	GET /cksync.php?type=mf&ovsid=993f14d4-7b99-4748-8f99-8687578ad473&cs=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3467821796496295000V10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50616	96.7.168.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	762	OUT	GET /cksync.php?cs=8&vsid=3467821796496295000V10&type=di&refUrl=&vid=37805797753467821796496295000V10&axid_e=&ovsid=di_3c93ec9c5d044eca9dba8 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3467821796496295000V10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50613	96.7.168.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	754	OUT	GET /cksync.php?cs=8&vsid=3467821796496295000V10&type=dxu&refUrl=&vid=37805797753467821796496295000V10&axid_e=&ovsid=gkU8EdmD1RiT9h5 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3467821796496295000V10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50612	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	3491	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7570669831052645281 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; SPugT=1703780577; KRTBCOOKIE_466=16530-d541ebb4-9aad-4c87-b8e0-e665e8aef738; KRTBCOOKIE_391=22924-1889789607327243659&KRTB&23263-1889789607327243659&KRTB&23481-1889789607327243659; chkChromeAb67Sec=4; pi=158936:4; DPSync3=1704326400%3A252_265_253%7C1704758400%3A257%7C1704931200%3A201_245_261_259_236_260_256_262_258_263%7C1703808000%3A248_255; SyncRTB3=1705017600%3A35%7C1708905600%3A69%7C1706313600%3A224%7C1704931200%3A165_55_104_166_7_264_249_8_5_3_22_240_13_56_231_96_176_48_234_54_21_254_178_71_99_233_220_250_46%7C1704326400%3A38_223_2_15%7C1704585600%3A63; KRTBCOOKIE_904=16787-Wiwdw7U-A5Ouzuec56CNZQ; PugT=1703780584
2023-12-28 16:23:05 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:23:05 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:23:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50619	173.222.52.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	690	OUT	GET /cksync?type=g&cs=8&google_gid=CAESEOdO299yF26cYT04VkYego8&google_cver=1 HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3467821796496295000V10
2023-12-28 16:23:05 UTC	560	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-g=CAESEOdO299yF26cYT04VkYego8~~8;Expires=Thu, 11 Jan 2024 16:23:05 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Thu, 28 Dec 2023 16:23:05 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 28 Dec 2023 16:23:05 GMT Connection: close
2023-12-28 16:23:05 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-28 16:23:05 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50620	173.222.52.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	682	OUT	GET /cksync?cs=1&type=ttd&ovsid=3c35df97-b65a-42b9-abca-61d06d8e5fc4 HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3467821796496295000V10
2023-12-28 16:23:05 UTC	571	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ttd=3c35df97-b65a-42b9-abca-61d06d8e5fc4~~1;Expires=Thu, 11 Jan 2024 16:23:05 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Thu, 28 Dec 2023 16:23:05 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 28 Dec 2023 16:23:05 GMT Connection: close
2023-12-28 16:23:05 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-28 16:23:05 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50618	70.42.32.31	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	750	OUT	GET /usersync/medianet/?cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__&puid=%24%7BVSID%7D&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=qcwviWe8CNPv6HUiCsR5
2023-12-28 16:23:05 UTC	529	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 111 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=qcwviWe8CNPv6HUiCsR5 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=qcwviWe8CNPv6HUiCsR5; Path=/; Domain=zemanta.com; Expires=Fri, 27 Dec 2024 16:23:05 GMT; Max-Age=31536000; Secure; SameSite=None Date: Thu, 28 Dec 2023 16:23:05 GMT
2023-12-28 16:23:05 UTC	111	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 61 6d 70 3b 74 79 70 65 3d 7a 65 6d 26 61 6d 70 3b 6f 76 73 69 64 3d 71 63 77 76 69 57 65 38 43 4e 50 76 36 48 55 69 43 73 52 35 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=qcwviWe8CNPv6HUiCsR5">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50624	8.28.7.84	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	3465	OUT	GET /AdServer/SPug?partnerID=158936&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; SPugT=1703780577; KRTBCOOKIE_466=16530-d541ebb4-9aad-4c87-b8e0-e665e8aef738; KRTBCOOKIE_391=22924-1889789607327243659&KRTB&23263-1889789607327243659&KRTB&23481-1889789607327243659; chkChromeAb67Sec=4; pi=158936:4; DPSync3=1704326400%3A252_265_253%7C1704758400%3A257%7C1704931200%3A201_245_261_259_236_260_256_262_258_263%7C1703808000%3A248_255; SyncRTB3=1705017600%3A35%7C1708905600%3A69%7C1706313600%3A224%7C1704931200%3A165_55_104_166_7_264_249_8_5_3_22_240_13_56_231_96_176_48_234_54_21_254_178_71_99_233_220_250_46%7C1704326400%3A38_223_2_15%7C1704585600%3A63; KRTBCOOKIE_904=16787-Wiwdw7U-A5Ouzuec56CNZQ; KRTBCOOKIE_860=16335-WErPEB1sWKl0G34wzjuMmtRmKQI&KRTB&23334-WErPEB1sWKl0G34wzjuMmtRmKQI&KRTB&23417-WErPEB1sWKl0G34wzjuMmtRmKQI&KRTB&23426-WErPEB1sWKl0G34wzjuMmtRmKQI; PugT=1703780585
2023-12-28 16:23:06 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 06:06:54 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1703743614; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 06:06:54 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:23:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50621	172.240.127.129	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	813	OUT	GET /match?bidder_id=43092&gdpr=0&consent=&callback_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D429%26user_id%3D%24%7BUSER_ID%7D%26ssp%3Dmedianet%26expires%3D30%26user_group%3D%24%7BUSER_GROUP%7D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: ads.betweendigital.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:06 UTC	1009	IN	HTTP/1.1 302 Found location: /match?bidder_id=43092&gdpr=0&consent=&callback_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D429%26user_id%3D%24%7BUSER_ID%7D%26ssp%3Dmedianet%26expires%3D30%26user_group%3D%24%7BUSER_GROUP%7D%26gdpr%3D0%26gdpr_consent%3D&crf=1&rts=8396143189694134101 cache-control: no-cache, no-store, max-age=0, must-revalidate set-cookie: dc=was1; Max-Age=31536000; Expires=Fri, 27 Dec 2024 16:23:06 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: tuuid=300e84d1-4553-536a-b213-fb6ad79e5b80; Max-Age=31536000; Expires=Fri, 27 Dec 2024 16:23:06 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ut=ZY2g6gAA8jCkybj5UjdTYqqI59676-5QXmXdNw==; Max-Age=31536000; Expires=Fri, 27 Dec 2024 16:23:06 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ss=1; Max-Age=31536000; Expires=Fri, 27 Dec 2024 16:23:06 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50588	72.34.250.75	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	731	OUT	GET /us?https://contextual.media.net/cksync.php?cs=8&vsid=3467821796496295000V10&type=son&refUrl=&vid=37805797753467821796496295000V10&axid_e=&ovsid=[UID] HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:08 UTC	771	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:23:07 GMT Content-Type: text/plain; charset=utf8 Content-Length: 0 Connection: close Expires: Sat, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache, no-store, private P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Pragma: no-cache Tcn: Choice Vary: negotiate,Accept-Encoding X-Go-Server: go-lax-1-5-20 X-Xss-Protection: 0 Location: https://contextual.media.net/cksync.php?cs=8&vsid=3467821796496295000V10&type=son&refUrl=&vid=37805797753467821796496295000V10&axid_e=&ovsid=21d98b43-7010-4412-a8b4-a4da65c69232 Set-Cookie: __uis=21d98b43-7010-4412-a8b4-a4da65c69232; expires=Sat, 27 Jan 2024 16:23:07 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None Server: sonobi-go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50626	74.119.118.138	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	755	OUT	GET /dis/usersync.aspx?r=77&p=311&cp=liveintent&cu=1&url=https://i.liadm.com/s/28292?bidder_id%3D71340%26bidder_uuid%3D@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=b4a3613d-6031-4326-ba6a-2ee801b2f4d5
2023-12-28 16:23:06 UTC	519	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 28 Dec 2023 16:23:06 GMT server: Kestrel cache-control: no-cache expires: Thu, 28 Dec 2023 00:00:00 GMT location: https://i.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-4hbklIwqIvCWt_LEW2ilff3RPQD93xHqLmlphA pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1104882 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50625	34.231.181.97	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:05 UTC	738	OUT	GET /sync/v1?source_id=7rkJAhPCWXbw9Lq5dZxc6TvN&source_user_id=ua-c3022ff3-a52d-3262-99be-6a51a23046c2 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
2023-12-28 16:23:06 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:06 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:23:06 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2023-12-28 16:23:06 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50623	3.93.251.5	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	421	OUT	GET /tag/?id=20909&user_id=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:06 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Thu, 28 Dec 2023 16:23:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2023-12-28 16:23:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50628	107.23.145.95	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:06 UTC	128	IN	HTTP/1.1 204 No Content Date: Thu, 28 Dec 2023 16:23:06 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50627	54.227.167.102	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	641	OUT	GET /?companyId=673&id=pubmatic_id:42E5D102-FCC7-4079-AEB2-CAED94F1F642 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:06 UTC	391	IN	HTTP/1.1 302 Found Date: Thu, 28 Dec 2023 16:23:06 GMT Location: https://io.narrative.io/?io.narrative.guid.v2=61c2a9e0-a59d-11ee-b039-16c962239a11&companyId=673&id=pubmatic_id:42E5D102-FCC7-4079-AEB2-CAED94F1F642 Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=61c2a9e0-a59d-11ee-b039-16c962239a11; Max-Age=47278080; SameSite=None; Secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50630	69.194.240.13	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	1006	OUT	GET /csync/RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%7D
2023-12-28 16:23:06 UTC	628	IN	HTTP/1.1 302 Found date: Thu, 28 Dec 2023 16:23:06 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005%22%7D; path=/; expires=Fri, 27 Dec 2024 16:23:06 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005 etag: RX798d506ec7f447e6bc6b13a43f6099f8005 connection: close
2023-12-28 16:23:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50634	96.7.168.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	799	OUT	GET /cksync.php?cs=1&type=zem&ovsid=qcwviWe8CNPv6HUiCsR5 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3467821796496295000V10; data-rk=1813050727983315911~~8; data-ttd=3c35df97-b65a-42b9-abca-61d06d8e5fc4~~1; data-g=CAESEOdO299yF26cYT04VkYego8~~8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50631	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	2993	OUT	GET /press/ HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; ezux_lpl_484470; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojotg0.0.5.5; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; _ga=GA1.1.1411026819.1703780523; ezux_tos_484470=33
2023-12-28 16:23:06 UTC	519	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb255928ac1448-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0 Expires: 0 Strict-Transport-Security: max-age=0 Vary: Accept-Encoding Content-Security-Policy: frame-ancestors *.mediafire.com Pragma: no-cache X-Frame-Options: SAMEORIGIN Server: cloudflare
2023-12-28 16:23:06 UTC	850	IN	Data Raw: 37 64 39 32 0d 0a 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 73 68 61 72 69 6e 67 20 61 6e 64 20 73 74 6f 72 61 67 65 20 6d 61 64 65 20 73 69 6d 70 6c 65 3c 2f 74 69 74 Data Ascii: 7d92 <!DOCTYPE html> <html lang="en-US" xmlns:fb="http://www.facebook.com/2008/fbml" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /><title>File sharing and storage made simple</tit
2023-12-28 16:23:06 UTC	1369	IN	Data Raw: 4c 4c 4f 57 22 20 2f 3e 0a 3c 4d 45 54 41 20 4e 41 4d 45 3d 22 47 4f 4f 47 4c 45 42 4f 54 22 20 43 4f 4e 54 45 4e 54 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 4d 45 54 41 20 4e 41 4d 45 3d 22 53 4c 55 52 50 22 20 43 4f 4e 54 45 4e 54 3d 22 49 4e 44 45 58 2c 46 4f 4c 4c 4f 57 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 74 72 61 6e 73 6c 61 74 65 2d 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 35 35 38 37 63 31 62 30 61 39 35 38 62 66 30 37 2d 36 32 61 38 65 33 30 39 64 65 36 38 36 65 38 37 2d 67 63 39 32 66 36 31 32 37 39 61 32 63 38 35 32 34 2d 31 31 22 3e 3c 2f 6d 65 74 61 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 22 20 63 6f Data Ascii: LLOW" /><META NAME="GOOGLEBOT" CONTENT="INDEX,FOLLOW" /><META NAME="SLURP" CONTENT="INDEX,FOLLOW" /><meta name="google-translate-customization" content="5587c1b0a958bf07-62a8e309de686e87-gc92f61279a2c8524-11"></meta><meta http-equiv="Cache-Control" co
2023-12-28 16:23:06 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 66 62 3a 61 70 70 5f 69 64 22 20 63 6f 6e 74 65 6e 74 3d 22 31 32 34 35 37 38 38 38 37 35 38 33 35 37 35 22 20 2f 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 35 35 35 36 34 36 31 39 36 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 54 69 Data Ascii: ontent="https://www.mediafire.com" /><meta property="fb:app_id" content="124578887583575" /><meta name="apple-itunes-app" content="app-id=555646196" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta name="msapplication-Ti
2023-12-28 16:23:06 UTC	1369	IN	Data Raw: 73 73 61 67 65 2b 27 22 20 20 27 3b 7d 4b 75 28 35 2c 76 55 29 3b 7d 3b 76 61 72 20 49 75 3d 27 46 69 6c 65 20 73 68 61 72 69 6e 67 20 61 6e 64 20 73 74 6f 72 61 67 65 20 6d 61 64 65 20 73 69 6d 70 6c 65 27 3b 20 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 31 2e 37 2e 32 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 20 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 4a 61 76 61 53 63 72 69 70 74 22 3e 74 72 79 7b 69 66 28 74 Data Ascii: ssage+'" ';}Ku(5,vU);};var Iu='File sharing and storage made simple'; </script> <script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js"> </script> <script language="JavaScript" type="text/JavaScript">try{if(t
2023-12-28 16:23:06 UTC	1369	IN	Data Raw: 70 73 3a 2f 2f 63 64 6e 2e 61 6d 70 6c 69 74 75 64 65 2e 63 6f 6d 2f 6c 69 62 73 2f 61 6d 70 6c 69 74 75 64 65 2d 38 2e 35 2e 30 2d 6d 69 6e 2e 67 7a 2e 6a 73 22 0a 20 20 20 20 3b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 2e 61 6d 70 6c 69 74 75 64 65 2e 72 75 6e 51 75 65 75 65 64 46 75 6e 63 74 69 6f 6e 73 29 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 5b 41 6d 70 6c 69 74 75 64 65 5d 20 45 72 72 6f 72 3a 20 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 61 64 20 53 44 4b 22 29 7d 7d 0a 20 20 20 20 3b 76 61 72 20 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 69 29 0a 20 Data Ascii: ps://cdn.amplitude.com/libs/amplitude-8.5.0-min.gz.js" ;r.onload=function(){if(!e.amplitude.runQueuedFunctions){ console.log("[Amplitude] Error: could not load SDK")}} ;var i=t.getElementsByTagName("script")[0];i.parentNode.insertBefore(r,i)
2023-12-28 16:23:06 UTC	1369	IN	Data Raw: 6e 73 74 61 6e 63 65 22 3a 65 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 0a 20 20 20 20 3b 69 66 28 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2e 5f 69 71 2c 65 29 29 7b 6e 2e 5f 69 71 5b 65 5d 3d 7b 5f 71 3a 5b 5d 7d 3b 76 28 6e 2e 5f 69 71 5b 65 5d 29 0a 20 20 20 20 7d 72 65 74 75 72 6e 20 6e 2e 5f 69 71 5b 65 5d 7d 3b 65 2e 61 6d 70 6c 69 74 75 64 65 3d 6e 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3b 0a 0a 20 20 20 20 76 61 72 20 61 6d 70 20 3d 20 61 6d 70 6c 69 74 75 64 65 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 3b 0a 20 20 20 20 61 6d 70 2e 69 6e 69 74 28 27 32 38 39 31 36 62 36 63 64 36 30 63 37 39 63 30 34 34 37 62 33 63 32 33 61 64 36 39 38 63 39 38 27 29 Data Ascii: nstance":e).toLowerCase() ;if(!Object.prototype.hasOwnProperty.call(n._iq,e)){n._iq[e]={_q:[]};v(n._iq[e]) }return n._iq[e]};e.amplitude=n})(window,document); var amp = amplitude.getInstance(); amp.init('28916b6cd60c79c0447b3c23ad698c98')
2023-12-28 16:23:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 4d 59 46 5f 57 49 44 47 45 54 5f 53 54 4f 52 41 47 45 5f 74 6f 74 61 6c 53 74 6f 72 61 67 65 3d 20 31 30 37 33 37 34 31 38 32 34 30 3b 4d 59 46 5f 57 49 44 47 45 54 5f 53 54 4f 52 41 47 45 5f 75 73 65 64 53 74 6f 72 61 67 65 3d 20 30 3b 4d 59 46 5f 57 49 44 47 45 54 5f 53 54 4f 52 41 47 45 5f 75 73 65 64 53 74 6f 72 61 67 65 50 65 72 63 65 6e 74 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 4d 61 74 68 2e 6d 69 6e 28 70 61 72 73 65 46 6c 6f 61 74 28 4d 59 46 5f 57 49 44 47 45 54 5f 53 54 4f 52 41 47 45 5f 75 73 65 64 53 74 6f 72 61 67 65 2f 4d 59 46 5f 57 49 44 47 45 54 5f 53 54 4f 52 41 47 45 5f Data Ascii: } </script><script type="text/javascript">var MYF_WIDGET_STORAGE_totalStorage= 10737418240;MYF_WIDGET_STORAGE_usedStorage= 0;MYF_WIDGET_STORAGE_usedStoragePercent=Math.round(Math.min(parseFloat(MYF_WIDGET_STORAGE_usedStorage/MYF_WIDGET_STORAGE_
2023-12-28 16:23:06 UTC	1369	IN	Data Raw: 3e 20 3c 61 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 74 69 74 6c 65 3d 22 43 6c 6f 73 65 20 64 69 61 6c 6f 67 22 20 68 72 65 66 3d 22 23 22 20 4f 6e 43 6c 69 63 6b 3d 22 62 66 4d 28 27 6d 6f 64 61 6c 5f 77 69 6e 64 6f 77 5f 70 6f 70 75 70 27 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 69 64 3d 22 6d 6f 64 61 6c 5f 77 69 6e 64 6f 77 5f 63 6c 6f 73 65 72 22 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 2d 63 6c 6f 73 65 22 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 43 6c 6f 73 65 20 50 6f 70 75 70 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 4d 73 67 57 72 61 70 70 65 72 22 20 73 74 79 6c 65 3e 20 3c 69 66 72 61 6d 65 20 6e 61 6d 65 3d 22 6d 6f 64 61 6c 5f 6d 73 67 5f Data Ascii: > <a role="button" title="Close dialog" href="#" OnClick="bfM('modal_window_popup');return false;" id="modal_window_closer" class="popup-close"><span style="display:none;">Close Popup</span></a> <div class="modalMsgWrapper" style> <iframe name="modal_msg_
2023-12-28 16:23:06 UTC	1369	IN	Data Raw: 69 66 79 5f 6d 73 67 73 63 72 6f 6c 6c 22 3e 20 3c 61 20 63 6c 61 73 73 3d 22 6d 73 67 73 63 72 6f 6c 6c 5f 75 70 22 20 68 72 65 66 3d 22 23 22 20 6f 6e 63 6c 69 63 6b 3d 22 50 66 28 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 53 63 72 6f 6c 6c 20 75 70 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 20 3c 61 20 63 6c 61 73 73 3d 22 6d 73 67 73 63 72 6f 6c 6c 5f 64 6e 22 20 68 72 65 66 3d 22 23 22 20 6f 6e 63 6c 69 63 6b 3d 22 50 65 28 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 53 63 72 6f 6c 6c 20 64 6f 77 6e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 20 3c 70 20 69 64 3d 22 6e 6f 74 69 66 79 5f 6d Data Ascii: ify_msgscroll"> <a class="msgscroll_up" href="#" onclick="Pf();return false;"><span style="display:none;">Scroll up</span></a> <a class="msgscroll_dn" href="#" onclick="Pe();return false;"><span style="display:none;">Scroll down</span></a> <p id="notify_m
2023-12-28 16:23:06 UTC	1369	IN	Data Raw: 61 20 68 72 65 66 3d 22 2f 22 20 74 61 72 67 65 74 3d 22 5f 74 6f 70 22 20 74 69 74 6c 65 3d 22 4d 65 64 69 61 46 69 72 65 22 3e 20 3c 69 6d 67 20 61 6c 74 3d 22 4d 65 64 69 61 46 69 72 65 22 20 77 69 64 74 68 3d 22 31 38 30 22 20 73 74 79 6c 65 3d 22 6d 61 78 2d 68 65 69 67 68 74 3a 32 35 70 78 22 20 69 64 3d 22 6d 66 5f 6c 6f 67 6f 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 5f 72 65 76 65 72 73 65 64 22 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 61 63 6b 67 72 6f 75 6e 64 73 2f 68 65 61 64 65 72 2f 6d 66 5f 6c 6f 67 6f 5f 75 31 5f 66 75 6c 6c 5f 63 6f 6c 6f 72 5f 72 65 76 65 72 73 65 64 2e 73 76 67 22 20 2f 3e 20 3c 69 6d 67 20 61 6c 74 3d 22 4d 65 64 69 61 46 69 72 65 22 20 77 69 64 74 68 3d 22 Data Ascii: a href="/" target="_top" title="MediaFire"> <img alt="MediaFire" width="180" style="max-height:25px" id="mf_logo_full_color_reversed" src="//static.mediafire.com/images/backgrounds/header/mf_logo_u1_full_color_reversed.svg" /> <img alt="MediaFire" width="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50636	172.240.127.129	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	955	OUT	GET /match?bidder_id=43092&gdpr=0&consent=&callback_url=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D429%26user_id%3D%24%7BUSER_ID%7D%26ssp%3Dmedianet%26expires%3D30%26user_group%3D%24%7BUSER_GROUP%7D%26gdpr%3D0%26gdpr_consent%3D&crf=1&rts=8396143189694134101 HTTP/1.1 Host: ads.betweendigital.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dc=was1; tuuid=300e84d1-4553-536a-b213-fb6ad79e5b80; ut=ZY2g6gAA8jCkybj5UjdTYqqI59676-5QXmXdNw==; ss=1
2023-12-28 16:23:06 UTC	759	IN	HTTP/1.1 302 Found location: https://x.bidswitch.net/sync?dsp_id=429&user_id=300e84d1-4553-536a-b213-fb6ad79e5b80&ssp=medianet&expires=30&user_group=1&gdpr=0&gdpr_consent= cache-control: no-cache, no-store, max-age=0, must-revalidate set-cookie: dc=was1; Max-Age=31536000; Expires=Fri, 27 Dec 2024 16:23:06 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: tuuid=300e84d1-4553-536a-b213-fb6ad79e5b80; Max-Age=31536000; Expires=Fri, 27 Dec 2024 16:23:06 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ut=ZY2g6gALPuhtXAnJ_FbiN-2w0ggP__PiRY_ZWw==; Max-Age=31536000; Expires=Fri, 27 Dec 2024 16:23:06 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50637	3.208.124.249	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	797	OUT	GET /qmap?c=240&tp=PUBM&tpid=42E5D102-FCC7-4079-AEB2-CAED94F1F642&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; _cc_cc="ACZ4XmNQME01MjJMMkxKNEo1SUozNDRLNjVLTE1OSUyzMDc0S01lAILU3gW3r%2Fz%2F%2F58fxAEDwfmrZwkwHlRm%2BM%2FIyHCsayc7jP1u4ho4%2B9KpR2ww8eV%2FCmHMc0cPMcPYPzZOYYGxd%2B%2B7DDfyQ8N9OPvw4jlwNW8%2FWsKU75t9gAlu6xKEkob%2FmjDhJ49vGsLYh9c%2B5YaxJ3VrwZgA6J1U4w%3D%3D"; _cc_aud="ABR4XmNgYGBI7V1wG0hBADMDA9cMMPNyF5iatRBIAABxuAWr"
2023-12-28 16:23:06 UTC	315	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:06 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.48.204 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2023-12-28 16:23:06 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50638	52.22.32.84	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	722	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-4hbklIwqIvCWt_LEW2ilff3RPQD93xHqLmlphA HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CggKBgjdARDrFg; lidid=13bc47c7-c97c-416f-a238-cb8d2bc718e6
2023-12-28 16:23:06 UTC	590	IN	HTTP/1.1 303 See Other Date: Thu, 28 Dec 2023 16:23:06 GMT Content-Length: 0 Connection: close Location: https://i6.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-4hbklIwqIvCWt_LEW2ilff3RPQD93xHqLmlphA Set-Cookie: _li_ss=ChMKBgjdARDrFgoJCP____8HEPUW; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:23:06 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=13bc47c7-c97c-416f-a238-cb8d2bc718e6; Max-Age=63072000; Expires=Sat, 27 Dec 2025 16:23:06 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 3 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50640	173.222.52.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	563	OUT	GET /cksync?cs=1&type=ttd&ovsid=3c35df97-b65a-42b9-abca-61d06d8e5fc4 HTTP/1.1 Host: cs.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3467821796496295000V10; data-rk=1813050727983315911~~8; data-ttd=3c35df97-b65a-42b9-abca-61d06d8e5fc4~~1; data-g=CAESEOdO299yF26cYT04VkYego8~~8
2023-12-28 16:23:06 UTC	571	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ttd=3c35df97-b65a-42b9-abca-61d06d8e5fc4~~1;Expires=Thu, 11 Jan 2024 16:23:06 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Thu, 28 Dec 2023 16:23:06 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 28 Dec 2023 16:23:06 GMT Connection: close
2023-12-28 16:23:06 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-28 16:23:06 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50632	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	3095	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/press/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; ezux_lpl_484470; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojotg0.0.5.5; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; _ga=GA1.1.1411026819.1703780523; ezux_tos_484470=33 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:23:06 UTC	416	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:23:06 GMT Connection: close CF-Ray: 83cb255b9ef62c96-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 607883 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:23:06 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50639	54.227.167.102	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	766	OUT	GET /?io.narrative.guid.v2=61c2a9e0-a59d-11ee-b039-16c962239a11&companyId=673&id=pubmatic_id:42E5D102-FCC7-4079-AEB2-CAED94F1F642 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io.narrative.guid.v2=61c2a9e0-a59d-11ee-b039-16c962239a11
2023-12-28 16:23:07 UTC	242	IN	HTTP/1.1 204 No Content Cache-Control: no-cache Date: Thu, 28 Dec 2023 16:23:07 GMT Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=61c2a9e0-a59d-11ee-b039-16c962239a11; Max-Age=47278080; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50641	173.222.52.23	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	571	OUT	GET /cksync?type=g&cs=8&google_gid=CAESEOdO299yF26cYT04VkYego8&google_cver=1 HTTP/1.1 Host: cs.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3467821796496295000V10; data-rk=1813050727983315911~~8; data-ttd=3c35df97-b65a-42b9-abca-61d06d8e5fc4~~1; data-g=CAESEOdO299yF26cYT04VkYego8~~8
2023-12-28 16:23:07 UTC	560	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-g=CAESEOdO299yF26cYT04VkYego8~~8;Expires=Thu, 11 Jan 2024 16:23:06 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Thu, 28 Dec 2023 16:23:07 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 28 Dec 2023 16:23:07 GMT Connection: close
2023-12-28 16:23:07 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2023-12-28 16:23:07 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50642	104.36.113.107	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:06 UTC	3681	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=42E5D102-FCC7-4079-AEB2-CAED94F1F642; KRTBCOOKIE_80=22987-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23025-CAESEItecgeyae_P2TGuxmFr4WA&KRTB&23386-CAESEItecgeyae_P2TGuxmFr4WA; KRTBCOOKIE_148=19421-uid:53579F87497840889870425CB87FCFFF&KRTB&23486-uid:53579F87497840889870425CB87FCFFF&KRTB&23489-uid:53579F87497840889870425CB87FCFFF&KRTB&23539-uid:53579F87497840889870425CB87FCFFF; KRTBCOOKIE_279=22890-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23011-bb8b2075-04f6-4e39-a178-835d11d8840f&KRTB&23355-bb8b2075-04f6-4e39-a178-835d11d8840f; KRTBCOOKIE_22=14911-4357227210337848260&KRTB&23150-4357227210337848260&KRTB&23527-4357227210337848260; KRTBCOOKIE_377=6810-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22918-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&22926-3c35df97-b65a-42b9-abca-61d06d8e5fc4&KRTB&23031-3c35df97-b65a-42b9-abca-61d06d8e5fc4; KRTBCOOKIE_57=22776-3643551440069563451&KRTB&23339-3643551440069563451; KRTBCOOKIE_153=1923-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&19420-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&22979-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf&KRTB&23462-FYber0KDhKkOioSqEIPL_RSG3vwOhYT9G9Co4Olf; KRTBCOOKIE_18=22947-1813050727983315911; KRTBCOOKIE_1003=22761-45e73c86-a59d-11ee-a23b-06900a68fba8&KRTB&23275-45e73c86-a59d-11ee-a23b-06900a68fba8; KRTBCOOKIE_107=1471-uid:gkU8EdmD1RiT9h5&KRTB&23421-uid:gkU8EdmD1RiT9h5; KRTBCOOKIE_52=22772-R33646_10E688CAC_3EE3278F&KRTB&23092-R33646_10E688CAC_3EE3278F; KRTBCOOKIE_32=11175-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22713-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&22715-AAAJcUrmU_I7JgNthe1VAAAAAAA&KRTB&23519-AAAJcUrmU_I7JgNthe1VAAAAAAA; KRTBCOOKIE_699=22727-AADkEU7LG0EAABaftLpXow; KRTBCOOKIE_27=16735-uid:7302658d-a0df-4300-ad87-7949433877d3; KRTBCOOKIE_469=8273-870242004881&KRTB&23428-870242004881; KRTBCOOKIE_1278=23329-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23340-e71ba19d-7bbb-496d-b970-b82e9389cf8b&KRTB&23498-e71ba19d-7bbb-496d-b970-b82e9389cf8b; KRTBCOOKIE_1323=23480-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23485-OPU871ee6e2ab5f45e68fcb357155d21285&KRTB&23524-OPU871ee6e2ab5f45e68fcb357155d21285; KRTBCOOKIE_466=16530-d541ebb4-9aad-4c87-b8e0-e665e8aef738; KRTBCOOKIE_391=22924-1889789607327243659&KRTB&23263-1889789607327243659&KRTB&23481-1889789607327243659; chkChromeAb67Sec=4; pi=158936:4; DPSync3=1704326400%3A252_265_253%7C1704758400%3A257%7C1704931200%3A201_245_261_259_236_260_256_262_258_263%7C1703808000%3A248_255; SyncRTB3=1705017600%3A35%7C1708905600%3A69%7C1706313600%3A224%7C1704931200%3A165_55_104_166_7_264_249_8_5_3_22_240_13_56_231_96_176_48_234_54_21_254_178_71_99_233_220_250_46%7C1704326400%3A38_223_2_15%7C1704585600%3A63; KRTBCOOKIE_904=16787-Wiwdw7U-A5Ouzuec56CNZQ; KRTBCOOKIE_860=16335-WErPEB1sWKl0G34wzjuMmtRmKQI&KRTB&23334-WErPEB1sWKl0G34wzjuMmtRmKQI&KRTB&23417-WErPEB1sWKl0G34wzjuMmtRmKQI&KRTB&23426-WErPEB1sWKl0G34wzjuMmtRmKQI; PugT=1703780585; SPugT=1703743614
2023-12-28 16:23:07 UTC	663	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 28 Dec 2023 16:23:06 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_594=17105-RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005&KRTB&17107-RX-798d506e-c7f4-47e6-bc6b-13a43f6099f8-005; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 27-Mar-2024 16:23:06 GMT; path=/ Set-Cookie: PugT=1703780586; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 27-Jan-2024 16:23:06 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-28 16:23:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50643	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:07 UTC	3071	OUT	GET /templates/upgrade/upgrade_button.php HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/press/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; ezux_lpl_484470; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojotg0.0.5.5; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; _ga=GA1.1.1411026819.1703780523; ezux_tos_484470=33
2023-12-28 16:23:07 UTC	307	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 83cb255dfbd64871-DFW CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, nofollow Server: cloudflare
2023-12-28 16:23:07 UTC	1369	IN	Data Raw: 31 36 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 Data Ascii: 16c0<!DOCTYPE html><html><head><style> html, body, a { margin: 0; padding: 0; border: 0; outline: 0; } html { font-size: 14px;
2023-12-28 16:23:07 UTC	1369	IN	Data Raw: 6e 2d 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 32 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: n-height: 36px; line-height: 1.5; margin: 0; padding: 6px 12px; border: 0; outline: 0; text-transform: uppercase; text-align: center;
2023-12-28 16:23:07 UTC	1369	IN	Data Raw: 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 2f 73 74 61 74 69 63 2e 6d 65 64 69 61 66 69 72 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 73 76 67 5f 64 61 72 6b 2f 69 63 6f 6e 73 5f 73 70 72 69 74 65 2e 73 76 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 Data Ascii: inline-flex; flex-shrink: 0; height: 24px; width: 24px; background-image: url(//static.mediafire.com/images/icons/svg_dark/icons_sprite.svg); background-repeat: no-repeat;
2023-12-28 16:23:07 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 42 74 6e 2d 69 63 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 61 20 69 64 3d 22 75 70 67 72 61 64 65 5f 61 63 63 74 22 20 63 6c 61 73 73 3d 22 75 70 67 72 61 64 65 5f 61 63 63 74 20 42 74 6e 20 42 74 6e 2d 2d 67 72 65 65 6e 55 70 67 72 61 64 65 22 20 68 72 65 66 3d 22 2f 75 70 67 72 61 64 65 22 20 74 69 74 6c 65 3d 22 55 70 67 72 61 64 65 20 6e 6f 77 21 22 20 74 61 72 67 65 74 3d 22 5f 74 6f 70 22 Data Ascii: } .Btn-icon { margin-right: 0; } } </style></head><body><a id="upgrade_acct" class="upgrade_acct Btn Btn--greenUpgrade" href="/upgrade" title="Upgrade now!" target="_top"
2023-12-28 16:23:07 UTC	356	IN	Data Raw: 79 43 6f 64 65 20 3d 3d 3d 20 39 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 73 68 6f 77 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 73 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 27 73 68 6f 77 Data Ascii: yCode === 9) { document.body.classList.add('show-focus-outlines'); } }); document.addEventListener('click', function(e) { document.body.classList.remove('show
2023-12-28 16:23:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50635	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:07 UTC	2936	OUT	GET /images/backgrounds/indicators/ext_link.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv4_121918.php?ver=ssl&date=2023-12-28 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; _ga=GA1.1.1411026819.1703780523; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6
2023-12-28 16:23:07 UTC	399	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:07 GMT Content-Type: image/png Content-Length: 1083 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-43b" Expires: Sat, 27 Jan 2024 15:06:01 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 4626 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb255e2bec3165-DFW
2023-12-28 16:23:07 UTC	970	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 03 00 00 00 ba ec 3f 8f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 31 20 36 34 2e 31 34 30 39 34 39 2c 20 32 30 31 30 2f 31 32 2f 30 37 2d 31 30 3a 35 37 3a 30 31 20 20 Data Ascii: PNGIHDR?tEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01
2023-12-28 16:23:07 UTC	113	IN	Data Raw: 97 e0 e2 e5 c1 c5 ca ff ff ff 68 dc cf a5 00 00 00 06 74 52 4e 53 ff ff ff ff ff 00 b3 bf a4 bf 00 00 00 39 49 44 41 54 78 da 24 cb c1 0d 00 30 08 c3 40 d2 c0 fe 2b d7 04 3f d0 09 da 1a 52 aa 55 17 85 6c c3 47 f2 91 e1 b2 c2 48 bd 74 5b 6f 34 fb 80 eb e3 f3 92 8e 17 fc 02 0c 00 2b ca 00 d0 83 06 78 77 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: htRNS9IDATx$0@+?RUlGHt[o4+xwIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50645	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:07 UTC	3095	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/press/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; ezux_lpl_484470; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojotg0.0.5.5; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; _ga=GA1.1.1411026819.1703780523; ezux_tos_484470=33 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:23:07 UTC	416	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:23:07 GMT Connection: close CF-Ray: 83cb255f09c72cd5-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 607884 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:23:07 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50648	3.210.81.252	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:07 UTC	829	OUT	POST /detroitchicago/greenoaks.gif?orig=1&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiJmNmEzYjNjYi0zNzVhLTRjNjgtNTkyNy1mYmE3ZTg1ZDI5ZWEiLCJkb21haW5faWQiOiI0ODQ0NzAiLCJ0X2Vwb2NoIjoxNzAzNzgwNTY4LCJkYXRhIjpbeyJuYW1lIjoidF91bmxvYWQiLCJ2YWwiOiIxNzAzNzgwNTg2MjQ3In1dfV0= HTTP/1.1 Host: g.ezoic.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:07 UTC	304	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.mediafire.com Cache-Control: private, max-age=0, must-revalidate, no-cache, no-store Date: Thu, 28 Dec 2023 16:23:06 GMT Expires: Wed, 27 Dec 2023 16:23:06 GMT Vary: Accept-Encoding X-Middleton-Display: ezp_sol Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50647	35.211.178.172	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:07 UTC	784	OUT	GET /sync?dsp_id=429&user_id=300e84d1-4553-536a-b213-fb6ad79e5b80&ssp=medianet&expires=30&user_group=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d541ebb4-9aad-4c87-b8e0-e665e8aef738; c=1703780532; tuuid_lu=1703780535
2023-12-28 16:23:07 UTC	540	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 28 Dec 2023 16:23:07 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //contextual.media.net/cksync.php?cs=1&type=bs&ovsid=d541ebb4-9aad-4c87-b8e0-e665e8aef738&gdpr=0&gdpr_consent=&gdpr_pd= Set-Cookie: cs=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50650	52.70.20.227	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:07 UTC	501	OUT	GET /sync/v1?source_id=7rkJAhPCWXbw9Lq5dZxc6TvN&source_user_id=ua-c3022ff3-a52d-3262-99be-6a51a23046c2 HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860
2023-12-28 16:23:07 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:07 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=db9c5fb4-4072-425b-b90c-38332cbed860; Max-Age=2592000; Expires=Sat, 27 Jan 2024 16:23:07 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2023-12-28 16:23:07 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50652	142.250.113.138	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:07 UTC	859	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:23:07 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 28 Dec 2023 16:23:07 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-28 16:23:07 UTC	687	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2023-12-28 16:23:07 UTC	1252	IN	Data Raw: 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e Data Ascii: (Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ba=function(a){_.t.setTimeout(function(){throw a;},0)};_.ca=function(a){a&&"function"==typeof a.
2023-12-28 16:23:07 UTC	1252	IN	Data Raw: 7c 7c 28 65 5b 67 5d 3d 21 30 2c 62 5b 63 2b 2b 5d 3d 66 29 7d 62 2e 6c 65 6e 67 74 68 3d 63 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 7a 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 61 3f 21 21 5f 2e 42 61 26 26 30 3c 5f 2e 42 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b 5f 2e 44 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 43 61 28 29 3f 21 31 3a 5f 2e 76 28 22 4f 70 65 72 61 22 29 7d 3b Data Ascii: \|\|(e[g]=!0,b[c++]=f)}b.length=c};_.za=function(){var a=_.t.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return-1!=_.za().indexOf(a)};_.Ca=function(){return _.Aa?!!_.Ba&&0<_.Ba.brands.length:!1};_.Da=function(){return _.Ca()?!1:_.v("Opera")};
2023-12-28 16:23:07 UTC	1252	IN	Data Raw: 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 55 61 2e 61 70 70 6c 79 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 30 3d 3d 3d 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 5f 2e 56 61 28 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 61 5b 30 5d 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2b 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 5b 64 5d 29 2b 61 5b 64 2b 31 5d 3b 72 65 74 75 72 6e 20 5f 2e 56 61 28 63 29 7d 3b 5f 2e 58 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 72 65 74 75 72 6e 28 61 3d 6e 75 6c 6c 3d 3d 28 63 3d 28 62 3d 61 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 Data Ascii: toLowerCase()===a+":"})};_.Wa=function(a){var b=_.Ua.apply(1,arguments);if(0===b.length)return _.Va(a[0]);for(var c=a[0],d=0;d<b.length;d++)c+=encodeURIComponent(b[d])+a[d+1];return _.Va(c)};_.Xa=function(a){var b,c;return(a=null==(c=(b=a.document).queryS
2023-12-28 16:23:07 UTC	1252	IN	Data Raw: 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 66 62 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 74 68 69 73 2e 67 3d 66 3b 66 62 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 Data Ascii: {var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&fb(c,a,{configurable:!0,writable:!0,value:b})}};w("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;fb(this,"description",{configurable:!0,writable:!0,valu
2023-12-28 16:23:07 UTC	1252	IN	Data Raw: 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 62 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 6d 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 6e 65 77 20 63 3b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 63 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 7d 69 66 28 22 75 6e 64 65 Data Ascii: h(b.value);a=c}return a};lb="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.mb=function(){function a(){function c(){}new c;Reflect.construct(c,[],function(){});return new c instanceof c}if("unde
2023-12-28 16:23:07 UTC	1252	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 62 7d 29 3b 0a 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 72 62 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 62 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 Data Ascii: ion(){return _.mb});w("Reflect.setPrototypeOf",function(a){return a?a:rb?function(b,c){try{return rb(b,c),!0}catch(d){return!1}}:null});w("Promise",function(a){function b(){this.g=null}function c(g){return g instanceof e?g:new e(function(h){h(g)})}if(a)
2023-12-28 16:23:07 UTC	1252	IN	Data Raw: 74 68 69 73 2e 73 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 67 2b 22 60 22 2b 68 2b 22 60 22 2b 74 68 69 73 2e 67 29 3b 74 68 69 73 2e 67 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 67 26 26 74 68 69 73 2e 4d 28 29 3b 74 68 69 73 2e 44 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 64 28 66 Data Ascii: this.s(g)};e.prototype.o=function(g){this.B(2,g)};e.prototype.s=function(g){this.B(1,g)};e.prototype.B=function(g,h){if(0!=this.g)throw Error("i`"+g+"`"+h+"`"+this.g);this.g=g;this.j=h;2===this.g&&this.M();this.D()};e.prototype.M=function(){var g=this;d(f
2023-12-28 16:23:07 UTC	1252	IN	Data Raw: 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 51 63 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 73 77 69 74 63 68 28 6d 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6d 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6a 60 22 2b 6d 2e 67 29 3b 7d 7d 76 61 72 20 6d 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 68 3f 66 2e 68 28 6c 29 3a 0a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: hen(void 0,g)};e.prototype.Qc=function(g,h){function l(){switch(m.g){case 1:g(m.j);break;case 2:h(m.j);break;default:throw Error("j`"+m.g);}}var m=this;null==this.h?f.h(l):this.h.push(l);this.A=!0};e.resolve=c;e.reject=function(g){return new e(function(h
2023-12-28 16:23:07 UTC	1252	IN	Data Raw: 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 Data Ascii: bject[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50649	34.205.128.181	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:07 UTC	700	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-4hbklIwqIvCWt_LEW2ilff3RPQD93xHqLmlphA HTTP/1.1 Host: i6.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=13bc47c7-c97c-416f-a238-cb8d2bc718e6
2023-12-28 16:23:07 UTC	226	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:23:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50651	54.200.104.216	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:07 UTC	636	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1065 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.mediafire.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:07 UTC	1065	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 65 34 38 34 63 63 37 38 37 66 35 32 36 62 33 31 38 62 64 39 39 35 34 64 61 65 37 34 61 34 62 30 26 63 6c 69 65 6e 74 3d 32 38 39 31 36 62 36 63 64 36 30 63 37 39 63 30 34 34 37 62 33 63 32 33 61 64 36 39 38 63 39 38 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 59 73 30 72 52 68 43 6a 43 2d 72 68 55 70 6d 46 69 69 62 37 73 73 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 30 33 37 38 30 35 38 36 34 39 34 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 36 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 30 33 37 38 30 35 32 32 35 39 39 25 32 43 25 32 32 Data Ascii: checksum=e484cc787f526b318bd9954dae74a4b0&client=28916b6cd60c79c0447b3c23ad698c98&e=%5B%7B%22device_id%22%3A%22Ys0rRhCjC-rhUpmFiib7ss%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1703780586494%2C%22event_id%22%3A6%2C%22session_id%22%3A1703780522599%2C%22
2023-12-28 16:23:08 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0eb-2c10daaf1c488b31193b2c2b Strict-Transport-Security: max-age=15768000
2023-12-28 16:23:08 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50654	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:07 UTC	3095	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/press/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; ezux_lpl_484470; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojotg0.0.5.5; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; _ga=GA1.1.1411026819.1703780523; ezux_tos_484470=33 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:23:07 UTC	417	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:23:07 GMT Connection: close CF-Ray: 83cb25626ecfea4b-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 2521842 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:23:07 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50656	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:07 UTC	2923	OUT	GET /images/backgrounds/press/quicklinksSprite.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv3_121918.php?ver=ssl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; _ga=GA1.1.1411026819.1703780523; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6
2023-12-28 16:23:08 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: image/png Content-Length: 2939 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-b7b" Expires: Sat, 27 Jan 2024 13:18:27 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11081 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb25639a4d281b-DFW
2023-12-28 16:23:08 UTC	969	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 3c 08 06 00 00 00 23 5b f5 91 00 00 0b 42 49 44 41 54 78 da ed 9c 7b 70 15 d5 1d c7 13 f2 30 09 81 24 83 95 47 23 c1 a0 a0 63 08 d2 a2 22 44 49 8b 24 10 82 48 09 12 88 92 40 79 24 34 41 92 48 08 01 72 77 ea d8 69 07 29 ad b4 43 c7 61 70 9c 76 20 da e9 74 6c ab 6d b5 a9 d8 76 4a 5f 23 8a 9d f2 e8 53 9a 62 07 2b 1d 1a aa e5 91 dc 7e ff f8 de 99 f5 70 77 f7 72 ef ef 6c 2e 9e 3d 33 9f b9 b9 67 7f fb bb bf 9c 3d df 3d cf dd 14 97 54 0d 32 80 57 ca a0 ad 6b 0a 87 c3 01 01 d7 1c 6e a9 06 94 03 d7 44 9b 9a 64 12 08 52 1a 98 05 56 83 7c d3 2f 72 80 1e 81 e4 81 0e 7e c6 69 e3 bf 40 90 3e 0e 36 01 8b 64 07 17 57 6b 4a e6 f8 b4 97 61 39 a8 03 95 a0 19 6c 27 9f 63 5e 5d 8c ad 8c 5f 15 22 17 84 80 45 Data Ascii: PNGIHDR<#[BIDATx{p0$G#c"DI$H@y$4AHrwi)Capv tlmvJ_#Sb+~pwrl.=3g==T2WknDdRV\|/r~i@>6dWkJa9l'c^]_"E
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 29 88 d4 83 42 30 03 7c 8a dd ae 6d c0 32 5d 20 52 2b d5 8d 06 77 b1 ea d5 4d 8a 5e 95 8b 6c 02 25 14 47 46 94 b5 b2 36 1f 04 32 83 76 75 fc cc a4 60 bb 81 15 08 84 83 74 21 26 1a 3a 48 6f 02 6a 9a 08 1a 63 9c b5 5c 18 65 ed a4 55 d3 20 5d a5 92 76 8d 60 83 7d 95 3f 10 08 e0 1d cc 12 62 2b c8 0b a6 79 3f 94 d2 d9 fd 6a 75 29 b3 e1 ca 39 23 e9 b3 4c b7 40 28 f0 0f ed d4 0e 04 62 03 29 4b 78 33 5b 27 b8 2b 58 28 bc 22 dd e3 b2 d6 a1 a6 39 7e 2c 14 92 cd 20 35 32 68 f7 46 ff 42 a1 95 08 a2 0b 85 84 cf 9c 58 82 74 1b b6 d5 a4 06 74 79 3c fc 34 1a 58 0a ed 20 3d ca f8 a5 cb af ad 26 64 0c 28 f3 b0 d1 bf d5 44 4c 20 f2 5b 4d ae 17 16 c8 6d 62 02 61 9f 58 13 db 85 37 2b d6 83 61 2e 5d 2d 75 3c 72 5f 94 e7 84 1a 22 62 f3 71 b3 e2 6c b7 a9 69 bf 37 2b b6 27 b2 5a Data Ascii: )B0\|m2] R+wM^l%GF62vu`t!&:Hojc\eU ]v`}?b+y?ju)9#L@(b)Kx3['+X("9~, 52hFBXtty<4X =&d(DL [MmbaX7+a.]-u<r_"bqli7+'Z
2023-12-28 16:23:08 UTC	601	IN	Data Raw: db cd 3b f7 0f c0 45 8d 02 51 79 d8 56 0f 66 80 47 c1 e7 d9 ed fa 2f 08 9b 2e 10 a9 95 ea 23 06 77 b1 7a 95 bc 09 e0 fd 18 ca ec af a0 96 8b 79 d9 51 16 f7 fa 7c 10 c8 26 da bd c4 cf 5c f0 44 64 6b 4f 20 10 ac 94 83 b0 10 73 0d 1d a4 1f 8d 92 5f 01 8e 78 75 51 c8 d3 51 d6 4e de d6 34 48 57 d9 45 bb 23 e0 2d fb 2a 7f 20 10 00 96 49 09 84 85 3b de c4 69 5e 97 ff 3b 0b 94 80 53 0e 65 76 0e 7c 4c 39 a7 10 0c 68 9a e6 55 f9 11 ed 5e 89 e4 05 02 21 24 4f 64 1b 34 e1 40 af d9 b8 85 42 ef 31 58 9b d3 c2 aa c3 42 b0 f6 85 42 72 06 a4 82 7d 1e 76 fa 17 0a a5 04 a2 fa 14 60 3f 08 0b 72 c9 14 81 90 83 9c d6 2d 72 b1 29 05 61 85 d3 20 4b 1d bf d0 57 8f 1f 5b 4d c8 54 d0 e9 66 a3 7b ab c9 79 7e 8a 08 44 f5 29 c0 64 61 81 2c 8e f8 96 9a 46 d5 c4 07 c2 9b 15 7b 41 9a 4b Data Ascii: ;EQyVfG/.#wzyQ\|&\DdkO s_xuQQN4HWE#-* I;i^;Sev\|L9hU^!$Od4@B1XBBr}v`?r-r)a KW[MTf{y~D)da,F{AK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50655	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:08 UTC	973	OUT	GET /?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE HTTP/1.1 Host: convertwithwave.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Attribution-Reporting-Eligible: navigation-source=event-source sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:08 UTC	886	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: text/html Content-Length: 3391 Connection: close Set-Cookie: AWSALB=LgUqppGNPcKj8mWSxZX1T4Pqtz69caRlQNvT266wwjDJ5n3aIRkvUmbtMTBUD/WcYodew7S/kXNTrToS83Q8Xo8mBDiJHKnqSf1ynIkuL+1x73j+UomnTlN0IYy1; Expires=Thu, 04 Jan 2024 16:23:08 GMT; Path=/ Set-Cookie: AWSALBCORS=LgUqppGNPcKj8mWSxZX1T4Pqtz69caRlQNvT266wwjDJ5n3aIRkvUmbtMTBUD/WcYodew7S/kXNTrToS83Q8Xo8mBDiJHKnqSf1ynIkuL+1x73j+UomnTlN0IYy1; Expires=Thu, 04 Jan 2024 16:23:08 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT Vary: Accept-Encoding ETag: "658d889d-d3f" Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64 Accept-Ranges: bytes
2023-12-28 16:23:08 UTC	3391	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 79 65 73 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 73 74 61 74 75 73 2d 62 61 72 2d 73 74 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-status-bar-st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50658	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:08 UTC	2917	OUT	GET /images/backgrounds/press/android_v2.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv3_121918.php?ver=ssl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; _ga=GA1.1.1411026819.1703780523; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6
2023-12-28 16:23:08 UTC	399	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: image/png Content-Length: 5692 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-163c" Expires: Sat, 27 Jan 2024 15:24:11 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 181 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2564ecfa4743-DFW
2023-12-28 16:23:08 UTC	970	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c3 00 00 01 21 08 03 00 00 00 34 d4 3b 65 00 00 01 80 50 4c 54 45 ff ff ff 2d 34 34 b1 1d 1d db db db b0 b0 b0 73 73 73 f6 f6 f6 79 ac d0 98 dc 00 c7 c7 c7 36 96 d7 f9 f9 f9 a7 d6 f7 ec ec ec 4f 51 51 1e 1e 1e 01 01 01 3d 42 42 f1 f1 f1 98 98 98 e2 e2 e2 80 81 81 18 88 d5 35 3a 3a 24 25 25 fb fb fb d0 e5 f2 92 cc f2 89 c8 f1 07 74 ce 44 89 b0 1b 0e 07 11 29 31 75 a6 10 8e c3 e7 54 99 c7 70 b9 eb 26 17 0a fe fe fe 4e a2 db a0 ca e7 98 cf f3 01 4c 53 11 11 11 dd 9d 8c 7c b7 dd 2a 90 d5 79 48 33 37 9c df ff f4 e9 bc d8 ec e5 f2 fa 56 38 29 e0 c6 a7 31 94 d6 3c 99 d8 ef 5f 7d 37 41 1b 15 11 04 23 34 3f f7 ef ee de ed f7 04 40 07 04 0d 50 c1 af 95 36 8f cd d7 75 c9 f6 e7 c8 bd 96 71 28 2c 2c 7a c0 ed 13 Data Ascii: PNGIHDR!4;ePLTE-44sssy6OQQ=BB5::$%%tD)1uTp&NLS\|*yH37V8)1<_}7A#4?@P6uq(,,z
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: dc 20 99 d7 86 dd 50 a8 ee a6 dd 14 77 91 65 53 43 29 35 99 19 44 70 a7 25 1f 6c c7 3a fe d9 fa c3 49 42 4d ae 25 55 76 17 b1 04 48 66 56 83 10 69 b2 41 31 b2 68 8e 45 ba e1 ca 50 71 8a d1 6a 8c 75 5b 43 27 2f 00 06 c9 e8 44 c8 01 26 fe ed e7 1f 5a 8f 7b 22 09 89 dc 39 15 cd 41 20 0f 42 3e 04 f0 c6 1f 93 0f f8 19 07 b5 5d 37 5c 1b 3a a7 a9 02 5b 6d 86 42 9b a6 0c 35 a1 7c 7d 0b 93 7d 6b 98 81 68 31 44 94 04 50 c4 39 8d 42 a4 86 88 03 26 93 11 20 74 c3 95 a1 86 29 c2 48 6c d3 f6 86 24 04 a8 fe 36 3b 02 5c 1b 7a 33 74 17 c2 6c 89 06 b3 a1 71 a7 6c 30 18 5a 41 b3 6e b8 36 74 4a 53 4d a3 c5 f8 0e 86 e4 8c d9 8f 93 84 6a 7f 6b 28 32 f2 a0 e9 75 00 54 22 cd d5 20 a9 e1 2b 58 e9 86 57 86 cb 8b 18 a1 6e 6e e8 8b 20 1b 52 4b 14 0c ae 0c 43 25 f7 b1 16 0d c1 13 1a Data Ascii: PweSC)5Dp%l:IBM%UvHfViA1hEPqju[C'/D&Z{"9A B>]7\:[mB5\|}}kh1DP9B& t)Hl$6;\z3tlql0ZAn6tJSMjk(2uT" +XWnn RKC%
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: ba cd c7 71 98 dc 51 93 bf f4 48 6b 66 cc 8e b8 d6 85 2a 29 34 32 de 99 32 90 8a d1 39 9b 9c be a5 30 bc 1f 26 35 62 cf 1d 8d b3 cc 5d e4 ae 7b 9d d6 ff 4e 56 d4 54 09 87 88 0a 6e d4 ba ef 09 51 2e 2b 25 95 2e fb 2c e2 72 19 e3 96 5e 94 61 ea 8e dc 6c 34 ca b3 e6 9c d6 84 47 c3 b5 f0 89 36 8c 4b 13 19 e2 92 24 17 da 94 9a 13 e3 bc e6 3d 67 5b 82 e1 29 c3 87 74 6f f8 34 ca f2 d1 78 5c 5f d3 64 f8 6c 38 11 da 57 5a d4 60 3b 41 d2 90 f0 54 19 fa d2 d0 d2 14 7d 9f ce 58 1c f8 30 3c 65 38 49 93 24 19 a6 f9 28 9f d7 84 ee e8 60 38 bc a7 7d 91 52 26 2c 95 d4 95 a6 92 93 0e 98 32 3b 8f 53 a9 b4 74 ce 7b 4b 03 18 9e 32 a4 de bc 46 ac 0d 47 63 37 af 9f a3 64 98 24 f3 f4 1b 1d db 11 51 58 53 3f 7f 20 a8 c9 21 8a 71 4b 2f ca 70 98 e5 4f cd 2b d3 3c 7f 4a 92 c6 10 ef Data Ascii: qQHkf*)42290&5b]{NVTnQ.+%.,r^al4G6K$=g[)to4x\_dl8WZ`;AT}X0<e8I$(`8}R&,2;St{K2FGc7d$QXS? !qK/pO+<J
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 0d 7b c3 e6 30 fd f8 dd d3 dd 35 ec 0d 97 fd d8 1b fe cf 1a 16 05 6e d5 a8 18 01 1b fc 2c 81 75 15 2a e9 30 ec 0d df 75 18 52 17 f0 6b 81 e3 4a ca c9 f2 2a 18 96 79 8b 65 09 2d 00 4a d1 c6 39 80 40 b0 28 50 15 d0 46 a4 a5 55 10 77 7a 76 5e 6f 98 fc f0 74 de ab ef 5e 3d 5d f4 43 c4 32 c9 a8 b1 80 07 98 ad 8c 8a 11 45 ab 40 5a 3b c5 b8 d4 25 0b 10 1e 40 a2 18 05 fc 5c 45 2f 27 ab 88 49 c9 bc 75 73 38 b6 07 54 19 45 e1 01 10 a7 45 8a 91 07 34 e3 3c c6 02 69 de 9f a5 77 30 fc 06 8b fe 7e 79 f1 4d 82 45 d1 a4 00 c9 a9 b4 71 a0 f9 b7 3e 90 a0 b5 03 65 ce 01 c4 78 24 e4 5b 5b 49 67 8b 06 7b e0 a2 95 b6 b0 9a 39 40 86 92 41 d2 40 3e a1 81 49 9d 03 f4 7b 0e fa c0 e7 56 d2 42 6a 43 09 8d d2 49 21 03 90 db 54 6b 75 87 67 e7 f5 86 4b b1 32 a4 b8 fe 1d d4 6c e4 65 ee Data Ascii: {05n,u0uRkJye-J9@(PFUwzv^ot^=]C2E@Z;%@\E/'Ius8TEE4<iw0~yMEq>ex$[[Ig{9@A@>I{VBjCI!TkugK2le
2023-12-28 16:23:08 UTC	615	IN	Data Raw: 70 4a ad ae 34 a8 85 e3 32 42 53 1a 8c f7 39 50 51 0f d4 a6 00 e7 4e b4 1e 08 94 3a 50 6b 03 98 af 83 0e 00 d5 3e c2 49 34 ae 01 da 13 07 2a b9 c9 25 b1 ad a1 e3 96 40 6a 87 c0 b0 ae 2e c3 35 6d 02 db 01 da a5 b9 86 f2 0e 90 37 f1 15 f3 3e 5a 54 0a 21 6c 63 f8 76 bf 31 db 3f 7f 72 7a f2 d5 e4 db 6c 99 13 4d 91 69 cb bc 96 96 11 26 a4 13 8c bb 26 a2 95 a6 3c 15 cb 24 93 86 5b 2d 59 60 82 3a c5 24 f3 c1 d0 81 97 d4 48 d1 ee 12 82 33 c9 88 a3 c2 e9 a0 85 33 de 54 ce 07 43 82 70 5c 6a a9 db 3d 4c 74 16 43 25 de 57 5e 1a 92 7a 6d 9b b1 76 81 6e 84 d9 29 79 7b c7 d5 7c c5 95 5e 2e aa 63 8c 36 1b bf de 9f df 8a 0e fe 76 fc d5 e4 ec e0 e0 d1 c1 a3 b3 c6 50 c7 79 d6 91 a8 64 20 95 8f c4 47 5f 33 27 f3 c8 63 e5 6c 15 2f a3 8e c4 54 52 a2 7c 54 3c 12 c7 63 a4 94 47 Data Ascii: pJ42BS9PQN:Pk>I4*%@j.5m7>ZT!lcv1?rzlMi&&<$[-Y`:$H33TCp\j=LtC%W^zmvn)y{\|^.c6vPyd G_3'cl/TR\|T<cG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50661	34.205.128.181	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:08 UTC	464	OUT	GET /s/28292?bidder_id=71340&bidder_uuid=k-4hbklIwqIvCWt_LEW2ilff3RPQD93xHqLmlphA HTTP/1.1 Host: i6.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=13bc47c7-c97c-416f-a238-cb8d2bc718e6
2023-12-28 16:23:08 UTC	226	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2023-12-28 16:23:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50659	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:08 UTC	3095	OUT	GET /blank.html HTTP/1.1 Host: www.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mediafire.com/press/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; ezstandaloneuser=false; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; ezux_lpl_484470; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; ezux_et_484470=2; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojotg0.0.5.5; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; _ga=GA1.1.1411026819.1703780523; ezux_tos_484470=33 If-Modified-Since: Wed, 15 Nov 2023 20:25:47 GMT
2023-12-28 16:23:08 UTC	416	IN	HTTP/1.1 304 Not Modified Date: Thu, 28 Dec 2023 16:23:08 GMT Connection: close CF-Ray: 83cb2565b8502fec-DFW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 607924 Cache-Control: public, max-age=43200 ETag: W/"6555294b-fd" Expires: Fri, 29 Dec 2023 04:23:08 GMT Last-Modified: Wed, 15 Nov 2023 20:25:47 GMT Vary: Accept-Encoding Content-Security-Policy: frame-ancestors * Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50660	104.16.114.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:08 UTC	2654	OUT	GET /images/backgrounds/indicators/ext_link.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6; _ga=GA1.2.1411026819.1703780523
2023-12-28 16:23:08 UTC	388	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: image/png Content-Length: 1083 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-43b" Expires: Sat, 27 Jan 2024 15:06:01 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2565fb1b3473-DFW
2023-12-28 16:23:08 UTC	981	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 03 00 00 00 ba ec 3f 8f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 31 20 36 34 2e 31 34 30 39 34 39 2c 20 32 30 31 30 2f 31 32 2f 30 37 2d 31 30 3a 35 37 3a 30 31 20 20 Data Ascii: PNGIHDR?tEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01
2023-12-28 16:23:08 UTC	102	IN	Data Raw: dc cf a5 00 00 00 06 74 52 4e 53 ff ff ff ff ff 00 b3 bf a4 bf 00 00 00 39 49 44 41 54 78 da 24 cb c1 0d 00 30 08 c3 40 d2 c0 fe 2b d7 04 3f d0 09 da 1a 52 aa 55 17 85 6c c3 47 f2 91 e1 b2 c2 48 bd 74 5b 6f 34 fb 80 eb e3 f3 92 8e 17 fc 02 0c 00 2b ca 00 d0 83 06 78 77 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: tRNS9IDATx$0@+?RUlGHt[o4+xwIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50662	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:08 UTC	2927	OUT	GET /images/backgrounds/press/productFeatureSprite.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv3_121918.php?ver=ssl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6; _ga=GA1.2.1411026819.1703780523
2023-12-28 16:23:08 UTC	398	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: image/png Content-Length: 3008 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-bc0" Expires: Sat, 27 Jan 2024 12:54:46 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 181 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2566bfe34790-DFW
2023-12-28 16:23:08 UTC	971	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 01 d4 08 06 00 00 00 52 e5 8a 35 00 00 0b 87 49 44 41 54 78 da ed 9d 7d 8c 17 c5 19 c7 ef 78 39 f1 68 aa c0 01 77 d5 6a 00 0f 0b 3d 4c 21 b4 45 de 24 be 04 0e 0f ea 5b 5b 03 a5 3d 8a b1 a5 0d 68 0a 22 20 96 23 84 37 35 84 43 d1 c6 1a f1 05 8d a9 6d ca 8b 24 28 85 4a b0 95 83 36 35 6d 7d 03 b4 a4 c2 41 81 3b ea 1d c7 c9 4b 6f fb 1d f2 9c 99 6e 67 77 67 77 66 5f 7e bf 7b 9e e4 93 db db 9d 99 fd ec cc 33 b3 b3 f7 cf 15 14 50 ac ac 2b 70 92 a4 20 28 32 2b 54 90 95 c8 bc 50 ea 43 98 33 42 a9 a5 4a ce 09 e1 b8 08 d4 82 46 42 1c 17 a5 29 b4 46 31 f6 2b d3 14 6a 50 08 35 b0 50 c0 90 ad 92 ae 77 01 4f 80 5b 53 4f 6a fc ec 01 de a0 3a 1f 83 6e a9 4d 7b 94 29 07 1f b8 7a ae 46 51 4e d9 83 56 85 70 fd Data Ascii: PNGIHDR$R5IDATx}x9hwj=L!E$[[=h" #75Cm$(J65m}A;Kongwgwf_~{3P+p (2+TPC3BJFB)F1+jP5PwO[SOj:nM{)zFQNVp
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 07 c7 52 90 f9 04 4c e4 4f 70 0e 0e 0e 8e 9c 8b 9a 47 9f 2c 02 b5 a0 01 38 09 d1 48 f7 2c 52 09 ad 49 50 c4 cd 4a 95 50 43 8a 42 0d 2a 21 27 4d 58 28 bf 85 bc ca b9 cf 2b da ec 09 be 01 1e 03 67 52 17 72 5d ff ba 9f 54 ec 42 f8 fd 5e 30 1e 74 92 ce ad b0 2e e4 d3 03 5e e2 cf 49 e7 46 65 41 e8 a0 74 ee da 2c 08 2d 8f b5 87 42 e4 d0 1d e0 3a d7 b9 e5 59 9a 65 43 c1 e9 b4 d7 a1 62 f0 35 b0 14 34 f3 ab 83 85 92 16 ca dc 8e 31 cd 3d f5 2a bf af 8e c6 4c 7c 75 70 70 70 70 70 70 70 58 8e e3 d3 9e 76 d2 24 77 84 74 cf 47 1d 01 ed f6 59 28 67 85 74 93 0e e7 d6 83 62 5b b3 d8 86 90 38 ff 37 30 38 4b 42 82 16 50 9d 25 a1 76 7c 87 30 f6 75 c8 a3 61 31 84 5f 4d 65 96 f9 3c ad 72 08 59 88 78 0f 54 a4 b5 0e 25 93 d4 b9 3e ed df f5 1a a2 34 84 92 79 75 f0 db 9e 85 e2 5a Data Ascii: RLOpG,8H,RIPJPCB!'MX(+gRr]TB^0t.^IFeAt,-B:YeCb541=L\|upppppppXv$wtGY(gtb[8708KBP%v\|0ua1_Me<rYxT%>4yuZ
2023-12-28 16:23:08 UTC	668	IN	Data Raw: 1c b9 38 ed 7b 82 91 44 4f e9 fc b8 38 d0 11 1a 29 55 18 c9 42 0a a1 5e 24 75 bd 38 4e 5d 88 83 83 83 83 83 83 83 83 83 43 3f 06 ed fe ab 23 c3 42 2c 94 53 42 ee 9b eb e2 d5 86 ee 39 cf 87 cd 4b 21 93 91 c9 be 50 5a 49 9d 39 21 5e 87 f2 3b 87 92 1c 05 de 5b e5 4c 77 46 4a 6a 16 e2 e0 a4 ee 70 42 51 b6 a6 c6 5b d8 9c 10 e2 e0 e0 e0 e0 d0 8c 21 cb 1b be 07 1a 81 a3 0b d5 6b 01 37 c6 21 14 4a 46 12 72 62 91 0a 2b e3 12 b2 2f 65 41 c8 ae 94 25 21 7b 52 16 85 ec 48 59 16 ba 28 95 8a 50 9c eb 90 63 1b 16 62 a1 fc 16 c2 89 1a 37 aa 6b 2c 94 b9 21 63 21 9e f6 1d 39 87 1a 2d 0b 35 46 12 42 99 25 f4 73 1a 38 61 49 46 b4 33 4d a7 17 16 bb 7e 5f 1a fb 46 4b 23 4f 16 d3 f1 32 d7 53 fd 3c ee 9b ff df 90 49 37 df ed 92 59 14 a5 3d 9b 42 32 0b a3 b6 17 87 d0 76 93 f6 e2 Data Ascii: 8{DO8)UB^$u8N]C?#B,SB9K!PZI9!^;[LwFJjpBQ[!k7!JFrb+/eA%!{RHY(Pcb7k,!c!9-5FB%s8aIF3M~_FK#O2S<I7Y=B2v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50663	104.16.114.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:08 UTC	2657	OUT	GET /images/backgrounds/press/quicklinksSprite.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6; _ga=GA1.2.1411026819.1703780523
2023-12-28 16:23:08 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: image/png Content-Length: 2939 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-b7b" Expires: Sat, 27 Jan 2024 13:18:27 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 11081 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2566dd123159-DFW
2023-12-28 16:23:08 UTC	969	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 3c 08 06 00 00 00 23 5b f5 91 00 00 0b 42 49 44 41 54 78 da ed 9c 7b 70 15 d5 1d c7 13 f2 30 09 81 24 83 95 47 23 c1 a0 a0 63 08 d2 a2 22 44 49 8b 24 10 82 48 09 12 88 92 40 79 24 34 41 92 48 08 01 72 77 ea d8 69 07 29 ad b4 43 c7 61 70 9c 76 20 da e9 74 6c ab 6d b5 a9 d8 76 4a 5f 23 8a 9d f2 e8 53 9a 62 07 2b 1d 1a aa e5 91 dc 7e ff f8 de 99 f5 70 77 f7 72 ef ef 6c 2e 9e 3d 33 9f b9 b9 67 7f fb bb bf 9c 3d df 3d cf dd 14 97 54 0d 32 80 57 ca a0 ad 6b 0a 87 c3 01 01 d7 1c 6e a9 06 94 03 d7 44 9b 9a 64 12 08 52 1a 98 05 56 83 7c d3 2f 72 80 1e 81 e4 81 0e 7e c6 69 e3 bf 40 90 3e 0e 36 01 8b 64 07 17 57 6b 4a e6 f8 b4 97 61 39 a8 03 95 a0 19 6c 27 9f 63 5e 5d 8c ad 8c 5f 15 22 17 84 80 45 Data Ascii: PNGIHDR<#[BIDATx{p0$G#c"DI$H@y$4AHrwi)Capv tlmvJ_#Sb+~pwrl.=3g==T2WknDdRV\|/r~i@>6dWkJa9l'c^]_"E
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 29 88 d4 83 42 30 03 7c 8a dd ae 6d c0 32 5d 20 52 2b d5 8d 06 77 b1 ea d5 4d 8a 5e 95 8b 6c 02 25 14 47 46 94 b5 b2 36 1f 04 32 83 76 75 fc cc a4 60 bb 81 15 08 84 83 74 21 26 1a 3a 48 6f 02 6a 9a 08 1a 63 9c b5 5c 18 65 ed a4 55 d3 20 5d a5 92 76 8d 60 83 7d 95 3f 10 08 e0 1d cc 12 62 2b c8 0b a6 79 3f 94 d2 d9 fd 6a 75 29 b3 e1 ca 39 23 e9 b3 4c b7 40 28 f0 0f ed d4 0e 04 62 03 29 4b 78 33 5b 27 b8 2b 58 28 bc 22 dd e3 b2 d6 a1 a6 39 7e 2c 14 92 cd 20 35 32 68 f7 46 ff 42 a1 95 08 a2 0b 85 84 cf 9c 58 82 74 1b b6 d5 a4 06 74 79 3c fc 34 1a 58 0a ed 20 3d ca f8 a5 cb af ad 26 64 0c 28 f3 b0 d1 bf d5 44 4c 20 f2 5b 4d ae 17 16 c8 6d 62 02 61 9f 58 13 db 85 37 2b d6 83 61 2e 5d 2d 75 3c 72 5f 94 e7 84 1a 22 62 f3 71 b3 e2 6c b7 a9 69 bf 37 2b b6 27 b2 5a Data Ascii: )B0\|m2] R+wM^l%GF62vu`t!&:Hojc\eU ]v`}?b+y?ju)9#L@(b)Kx3['+X("9~, 52hFBXtty<4X =&d(DL [MmbaX7+a.]-u<r_"bqli7+'Z
2023-12-28 16:23:08 UTC	601	IN	Data Raw: db cd 3b f7 0f c0 45 8d 02 51 79 d8 56 0f 66 80 47 c1 e7 d9 ed fa 2f 08 9b 2e 10 a9 95 ea 23 06 77 b1 7a 95 bc 09 e0 fd 18 ca ec af a0 96 8b 79 d9 51 16 f7 fa 7c 10 c8 26 da bd c4 cf 5c f0 44 64 6b 4f 20 10 ac 94 83 b0 10 73 0d 1d a4 1f 8d 92 5f 01 8e 78 75 51 c8 d3 51 d6 4e de d6 34 48 57 d9 45 bb 23 e0 2d fb 2a 7f 20 10 00 96 49 09 84 85 3b de c4 69 5e 97 ff 3b 0b 94 80 53 0e 65 76 0e 7c 4c 39 a7 10 0c 68 9a e6 55 f9 11 ed 5e 89 e4 05 02 21 24 4f 64 1b 34 e1 40 af d9 b8 85 42 ef 31 58 9b d3 c2 aa c3 42 b0 f6 85 42 72 06 a4 82 7d 1e 76 fa 17 0a a5 04 a2 fa 14 60 3f 08 0b 72 c9 14 81 90 83 9c d6 2d 72 b1 29 05 61 85 d3 20 4b 1d bf d0 57 8f 1f 5b 4d c8 54 d0 e9 66 a3 7b ab c9 79 7e 8a 08 44 f5 29 c0 64 61 81 2c 8e f8 96 9a 46 d5 c4 07 c2 9b 15 7b 41 9a 4b Data Ascii: ;EQyVfG/.#wzyQ\|&\DdkO s_xuQQN4HWE#-* I;i^;Sev\|L9hU^!$Od4@B1XBBr}v`?r-r)a KW[MTf{y~D)da,F{AK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50664	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:08 UTC	2913	OUT	GET /images/backgrounds/press/ios_v2.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv3_121918.php?ver=ssl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6; _ga=GA1.2.1411026819.1703780523
2023-12-28 16:23:08 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: image/png Content-Length: 8839 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-2287" Expires: Sat, 27 Jan 2024 13:37:19 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 4746 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb2566ed5f6b43-DFW
2023-12-28 16:23:08 UTC	969	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c3 00 00 01 21 08 03 00 00 00 34 d4 3b 65 00 00 01 08 50 4c 54 45 ff ff ff 19 19 19 2b 6c c3 2b 6a c3 fc fc fc ee ef ef f8 f8 f9 13 13 13 f2 f2 f2 2c 6a c4 22 22 22 e9 e9 e9 f5 f5 f5 db db db d2 d2 d2 e2 e2 e2 0f 54 ba bf bf bf 8b c9 f1 93 cc f2 2a 64 b4 2e 6e c4 9a d0 f4 cc cc cc 13 0c 0a 5b 88 c1 ff ff fa 19 15 0f b3 b3 b3 a2 a2 a2 3b 3b 3b 19 5e bd 85 c6 f1 33 33 33 c6 c6 c6 ae d3 f0 22 64 c0 c3 c3 c3 73 a7 d6 28 67 c2 7a 79 7a 84 84 85 2a 2a 2a 5a 5a 5a 92 92 92 68 95 d5 65 65 65 6f 6f 6f e1 ee f7 94 b9 e1 1b 85 d5 42 41 41 50 50 50 52 89 ce 48 48 48 5d a0 cc c4 d8 ef 88 b3 de 7d c1 ed d1 e3 f5 70 ba ed 36 41 94 a3 c2 e6 44 7d ca bd de f5 38 74 c7 40 4d 9d 51 54 92 a1 ce ec ef f5 fb 08 74 d0 65 Data Ascii: PNGIHDR!4;ePLTE+l+j,j"""Td.n[;;;^333"ds(gzyz**ZZZheeeoooBAAPPPRHHH]}p6AD}8t@MQTte
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 1f ca 10 d1 46 1a 2a 52 7f 2f 85 8b 19 b3 4c 02 e7 c3 ff ec 9b cd 0a c4 20 10 83 ef df fb 3f f0 52 16 5c 10 34 9d 30 7a d9 04 3c 14 4b 7b 08 f3 13 33 d6 35 3e 22 89 3d 00 3c 42 c4 5a 70 46 ce 4b 27 7d b8 39 97 a4 6a a7 0f cb f0 1a f8 7b 0e bf c0 ea 27 0c 58 fc e8 1b dd 84 43 05 de 6f 50 e1 27 fa b0 55 1f 6a 21 31 40 0b 2d f6 fd 18 e2 e3 97 e3 90 39 ab e9 91 70 7a 13 a9 18 52 24 1c 3e c0 cf 8b 2c 68 54 ab ad 97 89 7f c8 2e ea ac e1 53 1a d2 a9 f8 18 a9 87 15 ff 70 63 9c df 99 76 da 92 9a be 74 9a 89 d2 94 e8 3d 1c a2 fc d7 89 3e fc c5 21 72 20 8d 75 f0 61 b9 bb 12 ec 7e 4c 72 e9 e0 10 3d 01 73 56 ed 19 fd 0e d1 87 ef eb 21 e7 07 d5 f0 77 89 6f 31 fb 16 1a e8 b6 a6 70 fd bb 50 71 59 27 6e 12 87 c2 f6 2d e8 8b d3 07 a8 e4 ac 4d d4 43 33 69 36 f0 27 fa 9d f1 Data Ascii: F*R/L ?R\40z<K{35>"=<BZpFK'}9j{'XCoP'Uj!1@-9pzR$>,hT.Spcvt=>!r ua~Lr=sV!wo1pPqY'n-MC3i6'
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 52 c2 50 94 30 e3 c4 fa 11 eb a2 31 cf 98 34 3a 04 34 ca 0b 44 51 08 c9 10 16 ac 74 e1 ff ff 35 f6 b6 a7 a7 c3 d3 85 1b 13 27 69 e5 41 7b 6f 81 a4 87 73 bf 3a 26 0c 49 1e 39 33 4e 94 65 83 69 04 a1 10 79 00 45 60 b7 2b db 44 ae c2 89 32 f8 c4 97 01 80 01 09 cc 2a 79 87 37 85 0e 32 48 df a1 12 16 00 57 95 fd 61 c2 d0 83 45 af a5 40 37 5a c2 5d 7d 93 d1 0b d8 e8 af 24 0f 3f 04 83 19 98 16 4d b0 02 4c 90 a1 07 98 e9 5c 69 05 68 66 65 b8 fb 52 64 90 6d e9 ce 1f 86 d5 75 ff 76 6c c2 00 64 52 1e 11 b8 24 1e 30 bd 5e 09 f2 70 c9 45 45 3b 0c 54 f0 28 c0 4d 63 1d c4 b8 85 38 07 05 bf 0f 99 4e e9 21 ef 5b ec 72 7c 95 32 bc 60 e4 54 09 2b 26 67 3a 24 10 29 b1 34 ac af ef 89 50 f4 70 ad 4c 43 82 98 7e 2d 61 73 e0 5f bc 9b 8f c5 24 04 a4 07 46 bb 2a 18 09 c0 9d 73 8b Data Ascii: RP014:4DQt5'iA{os:&I93NeiyE`+D2y72HWaE@7Z]}$?ML\ihfeRdmuvldR$0^pEE;T(Mc8N![r\|2`T+&g:$)4PpLC~-as_$Fs
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: df 97 ff ff 61 c2 50 df 6e cb 18 02 c3 bb db 6d 19 43 60 f8 f4 f5 ad b6 a7 19 43 60 f8 a8 b8 d5 96 31 cc 18 de 7a cb 18 de 7e cb 18 de 7e fb 13 86 47 df 8a 9b 69 19 c3 87 18 6e 53 3d 4d 53 5d cf 7f 98 fd e2 e3 e7 f7 ff 1f b8 19 c3 87 18 9e bf 7f 93 36 f4 5b 87 76 22 84 4f ee df bc 7d 5b 14 cf 9f c9 ca b9 b1 5c 1e 17 c7 e2 d9 49 64 7f df 32 86 ff 16 c3 fe 5b ed db 37 b6 3a c2 73 ef f0 7b fc e1 d1 fb af 1f 9f bf bb ff 72 ff fe c9 a7 e2 cd db af cf 8f f7 9f 5f 7e f8 fc e5 d5 5f bf 34 63 f8 8b bd 3b ea 4d 13 0a c3 38 fe 5c 9c c3 48 0f ef 7b 82 26 9e 2e 01 a3 18 1a 1c 44 da e8 b4 d5 65 e9 45 bd 69 bf ff f7 d9 51 d4 b5 2a db 7a 81 93 e4 fc 53 11 b1 d9 cd 2f 30 a8 be a1 51 43 b1 7a e9 be 54 75 f7 2d 47 1e b6 cd 33 d8 f4 38 9d 4e 8a 2f fc 25 0f 87 a6 1f 67 37 e6 Data Ascii: aPnmC`C`1z~~GinS=MS]6[v"O}[\Id2[7:s{r_~_4c;M8\H{&.DeEiQ*zS/0QCzTu-G38N/%g7
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: c8 19 ba ef d3 b4 3d 67 d8 fe 9c 61 fb 3b 35 14 5e db 72 f3 16 67 e6 9e 7c 9b 3c 3c aa a4 ac 9e 7e 6f d8 3f c9 c3 fa d1 4a 4d ef ff 5d f9 87 df 95 52 1e 6d 38 bf ee e6 9e dc b1 b4 f5 39 c3 f6 e7 0c db 9f 33 6c 7f ce b0 fd 9d 31 5c df af d7 f7 f7 6b d4 e5 e1 ca 72 86 c7 86 f7 77 8b dd 17 f4 4f 2a 63 20 2c c7 04 88 8c 70 35 39 c3 63 c3 97 b7 c5 b6 a7 c7 5d a3 83 66 3e 04 e6 b9 91 60 33 64 84 06 40 c4 80 1f f9 f8 54 ce b0 61 c3 a7 e3 7b 05 7d 5f dc a3 4a df 28 ff 26 cd 54 dc cf bf 05 71 3e 8b 45 39 1f c6 34 cb e7 84 cf e4 0c 1b 35 5c 3f bf 8c 76 d9 4f 9d b6 8f 51 f7 30 4f da 8f 92 59 30 8c 87 a4 fb d1 4d 5a 7c 8b 87 22 99 17 b7 51 a4 f1 99 9c e1 bb 1a b9 57 d0 49 a3 c1 08 55 71 5e c6 98 15 39 90 8d 87 e3 71 98 4d 80 29 47 fd 92 70 e9 3c cf 19 fe e5 5e 41 dd Data Ascii: =ga;5^rg\|<<~o?JM]Rm893l1\krwO*c ,p59c]f>`3d@Ta{}_J(&Tq>E945\?vOQ0OY0MZ\|"QWIUq^9qM)Gp<^A
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 6a 89 5b 08 01 a9 92 c3 a7 3a fc 74 63 24 86 65 bf 0c d8 e0 8d 64 dd dd 70 46 7d bf 68 e0 15 2e 29 1c 6e 50 f5 02 e8 5b 5c d2 f8 60 b7 fb 97 c3 bc b2 0d 6e d1 04 d5 db e4 f0 a9 0e 47 89 57 ff 13 dd 8b 00 bb 30 b0 0d c4 8b b6 5a 1a ca a5 0d 80 6e a2 5c eb e9 60 fb e2 ac 82 ad 14 14 fb 45 0f d9 30 76 b4 17 05 f8 62 80 ac 1c e0 42 5b 29 05 5f 49 f4 a5 36 8a 48 b3 07 37 12 80 34 c1 6f ce 68 aa b3 34 0e 9f ea f0 f3 c8 c7 5f 71 49 5d 43 19 d2 61 68 5b b3 ac bb 59 ec 78 3e 2c 4a 31 f4 fd 4a 00 e5 b2 a2 cc 5d 54 be 2e 7b 55 bd 28 17 2b aa db 95 c7 44 39 2b d1 bc 68 f2 ba 5e 39 b7 6c cf 6c e9 fd 50 f6 b2 ab 7d d0 55 d3 fc 50 da a1 1d 08 08 b3 7a 66 69 d9 ce 7c 75 46 c9 e1 93 1c 4e 77 36 02 5b 56 1d c2 62 c5 ab 2e 5c 84 32 d8 52 2f ec 42 ba 3e 0c f0 b3 1c 40 33 bc Data Ascii: j[:tc$edpF}h.)nP[\`nGW0Zn\`E0vbB[)_I6H74oh4_qI]Cah[Yx>,J1J]T.{U(+D9+h^9llP}UPzfi\|uFNw6[Vb.\2R/B>@3
2023-12-28 16:23:08 UTC	1025	IN	Data Raw: fb d1 b5 7a d3 f3 f3 f3 b7 57 70 c7 9d 0c f1 d0 62 a2 2b 26 74 c2 f2 4b a7 d2 d7 f3 5f de 37 1c f8 de 21 f6 86 dc 5a 0e bc c4 f2 dd fe f1 51 4b e1 36 f9 9b 43 12 6d 15 38 84 41 1f 13 73 80 c4 82 57 95 c4 20 31 95 6e 0f 42 2a ba d5 f0 7c 53 a4 8b ab 87 73 7c 2a bf 5e af 6f c2 f0 d1 35 20 0e 86 bc 28 d5 77 27 42 80 2b 02 73 d8 5d 81 4c 3a 08 70 4c 85 a5 7a 10 dd b7 64 e6 ac 54 03 86 96 33 23 42 ed 84 22 b0 b0 cb fe a8 78 b6 00 ac a0 59 a3 ea 06 98 40 c9 d0 31 63 11 01 80 5a cc 6b 0c d1 48 57 a3 ce dd e5 d2 6c 4e 4c e5 51 f2 0b f5 a6 0c 1f 87 1c e3 00 d9 1b ca 59 04 92 24 6e 1a 05 4a 9d aa 2a 8d b8 ae f5 c2 96 0b 93 96 a0 8f cd 1c 4e 92 03 55 d4 ac b4 a0 b2 a9 01 43 8d bb 19 09 50 d6 96 e7 df e5 5c a6 aa 9d d3 82 e0 24 23 75 0c 40 26 64 75 90 47 25 51 ba 28 Data Ascii: zWpb+&tK_7!ZQK6Cm8AsW 1nB\|Ss\|^o5 (w'B+s]L:pLzdT3#B"xY@1cZkHWlNLQY$nJ*NUCP\$#u@&duG%Q(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50665	35.166.142.103	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:08 UTC	341	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:08 UTC	344	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 86400 Trace-Id: Root=1-658da0ec-0cde887c6069e21e7d7226a6 Strict-Transport-Security: max-age=15768000
2023-12-28 16:23:08 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50666	104.16.113.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:08 UTC	2913	OUT	GET /images/backgrounds/press/web_v2.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.mediafire.com/css/mfv3_121918.php?ver=ssl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6; _ga=GA1.2.1411026819.1703780523
2023-12-28 16:23:08 UTC	401	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: image/png Content-Length: 21609 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-5469" Expires: Sat, 27 Jan 2024 13:54:19 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 8929 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb25683fa50c2b-DFW
2023-12-28 16:23:08 UTC	968	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e2 00 00 01 24 08 03 00 00 00 5d 64 a4 39 00 00 01 f8 50 4c 54 45 ff ff ff eb eb eb f3 f3 f3 31 37 3d f7 f8 f8 f0 ef f1 f9 f9 f9 fe fe fd e3 e3 e3 c2 c2 c2 d5 d6 d6 d9 d9 d9 e5 e4 e5 d2 d2 d2 f6 f5 f5 de de de fb fc fc c5 c5 c5 db db db ed ed ed 2c 32 37 ce ce cd b8 b8 b8 e7 e7 e8 a7 a7 a7 bd bd bd cb cb cd ca ca ca c7 c7 c8 e1 e1 e1 d8 d7 d9 e9 e9 e9 2f 95 d9 37 a2 e9 e0 df e1 28 2d 33 ac ac ac f1 f1 f2 1b 1f 25 15 19 1f 37 9d e1 94 c3 e5 89 bc e1 a9 ce eb af af af 4a 4d 51 78 79 7a 56 59 5e 65 65 66 3e 40 43 a0 c7 e5 84 85 86 6f 6f 70 f6 f2 f0 05 40 7a 2d 6a 98 b3 b3 b3 8c 8d 8e 34 a7 f7 9d 9f a0 b9 d9 f1 98 99 99 24 28 2d 2d 9a e4 5a 60 69 a2 a3 a4 92 93 93 e1 de dd fd fb f9 5b 9e ce 32 31 34 d8 Data Ascii: PNGIHDR$]d9PLTE17=,27/7(-3%7JMQxyzVY^eef>@Coop@z-j4$(--Z`i[214
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 04 8c 2d 50 29 41 fe 6f 8d ff 21 43 a9 07 f0 9b 8d bb e2 30 13 8b 54 c6 26 07 d4 b8 be 73 52 05 0c 58 46 eb 87 97 52 67 44 85 de b8 a0 52 b3 44 0a a4 82 02 f3 b1 5d 88 49 45 26 a8 cc 01 50 c9 41 b4 41 42 d8 21 95 78 b8 5d ec 81 51 b5 62 bc 1d 51 0a 74 13 97 02 15 95 08 38 b2 48 05 a5 2f c0 be 79 cc 6d 48 85 2a b1 c3 da b0 e8 b1 3e ee 8f b3 55 aa ba b7 6a f2 cc ad 92 6b 62 46 92 ad 3a e9 c7 9d e9 28 9d 92 a4 5c d3 1a 08 1a 05 40 0b 06 b4 b7 c4 a4 a9 9e 7b 23 05 bf e6 d7 08 df 0f 54 d2 87 23 12 22 08 64 5f 1e 5d 46 fa 12 50 c3 37 87 e3 70 20 86 52 49 54 4d 30 b4 2f 42 78 85 33 c3 eb 1d 81 f3 d7 d1 9f 6a f0 6f ed 8b 7f b6 55 a3 e5 d9 cb b3 cd 09 b1 1a d6 40 30 e5 69 15 de 48 69 75 2d 35 ea a9 e9 dd 79 6d 6d 35 35 e9 a9 53 98 18 f5 26 26 34 e8 89 50 e9 56 83 Data Ascii: -P)Ao!C0T&sRXFRgDRD]IE&PAAB!x]QbQt8H/ymH*>UjkbF:(\@{#T#"d_]FP7p RITM0/Bx3joU@0iHiu-5ymm55S&&4PV
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 9d f1 c3 c3 1f 82 ba 69 65 e5 f8 f8 b8 62 ea 54 b7 e9 0f b5 a2 8d c7 e4 0b fc 3e 39 7a e3 2e eb 87 f7 67 7f 7b 74 e1 e1 4f df b8 39 bd 73 71 f1 99 a5 ed 0f 9e 7b f8 71 e7 e6 e6 f6 7b 8b 4f 7d fc de 58 84 19 ce 62 c0 c5 c2 1c 53 94 74 2b 2a 95 90 23 09 d8 b2 1a 17 7c 4b ad a1 62 b9 5e b6 5d 9f 70 fd 72 2d b6 d5 a0 d9 2d 4c f4 df ec 4e 45 75 7e 26 66 d1 ed 43 45 9b 26 8f 9e bf 3e 86 cf 5f df df d0 2a b7 3c d5 bc dc 70 c4 50 6f de 1a 08 e6 f1 cb cb d6 d3 df 5c 75 b6 82 c0 af 85 b5 2d f7 ea 37 5b 6e a0 61 d7 f3 5f f3 bd f8 c7 9e a0 71 67 be 94 4d 5f 91 2f f0 1b f7 3f f7 c8 8d d7 ad 5b 37 7f 7a af 7a e1 ee cd ad 2f 1e d9 9d 5e bc 38 7d f1 a1 2b 1f be 94 9e 7e f9 ab 07 76 ef d9 dc 94 09 c7 70 2b 62 05 03 0e 77 b2 b1 a1 c8 87 0b e5 05 2f 2f c1 8c 37 e5 57 cb 2e Data Ascii: iebT>9z.g{tO9sq{q{O}XbSt+#\|Kb^]pr--LNEu~&fCE&>_<pPo\u-7[na_qgM_/?[7zz/^8}+~vp+bw//7W.
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 21 b8 65 43 e4 03 07 77 59 54 30 05 95 3a 5d 50 57 50 11 22 29 b5 86 a4 f4 25 5e fe 5d 52 03 b5 43 e6 24 51 9f f7 04 09 7d 51 a7 5b be 4f fd 2e e1 67 37 05 3c b2 59 ed bb fa 60 58 54 9b 20 fd bc 7e ff 45 55 48 41 46 38 60 20 08 a2 62 25 4d 47 ab 69 aa a6 a1 a7 eb 1d 07 f5 8c 2d 19 89 5a 06 4e b5 84 9c 61 8e 3c bd 5d 27 ef cc e7 9d e2 cd 41 f9 11 36 42 7e 98 85 71 90 fa 8c 1a 66 d4 7c 87 4a 4d c7 a7 30 5a f4 89 cf 93 92 1d c1 b1 2e b5 63 38 95 77 9d 3d ea 8b 7c 23 82 89 14 82 a0 fe 30 29 be d4 98 d4 48 dd 9c 52 b7 be b3 47 52 aa 6f b8 29 76 ff 9c f2 db f5 85 47 df 62 65 3b 49 11 3d 17 95 60 58 d4 7e f5 9d 7d 16 15 fd de 8b 6a a8 8f f3 57 2d 1a 41 d2 3a 8d ae a3 6e 82 30 10 04 75 2e 5b f6 f0 40 13 d1 4f 92 c5 8b ba 4c e9 44 10 06 e5 6f 09 cf 06 1d 9b 40 b7 Data Ascii: !eCwYT0:]PWP")%^]RC$Q}Q[O.g7<Y`XT ~EUHAF8` b%MGi-ZNa<]'A6B~qf\|JM0Z.c8w=\|#0)HRGRo)vGbe;I=`X~}jW-A:n0u.[@OLDo@
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 61 e5 02 6e ce f0 fa 2e 34 0f 40 6c ef fb 24 4a 7c 69 fd f6 8d e5 66 e3 e8 54 f9 ed b9 d6 e3 f9 4f 37 d7 32 b8 8b 9f a8 c1 d2 fa bd f9 f2 3b a4 36 62 4f d7 4e 3d aa c1 fa ee 76 52 c1 ed 3d 93 85 21 b6 3a c6 a4 48 c0 63 9a b6 01 68 79 0d 75 83 8f c0 85 28 a2 90 d4 24 54 d2 a0 24 ce 55 6c 0e e6 3c 2a 53 7b e7 d4 5f 39 e4 f2 69 34 c2 7a 16 ed d0 b6 a9 64 4e 93 42 08 2e 71 9b 99 ae d2 e1 e5 52 68 69 75 71 07 80 ee 54 00 0f 10 4a 15 3b 3f 1a ba 69 1c ac 66 e0 64 05 47 2d 60 52 70 a3 b7 ba 01 2a b7 14 98 b8 a4 28 a7 cd 90 bf 74 e6 e2 11 33 0e 51 1c de 38 94 d3 7e 00 97 63 19 26 26 01 22 4a 29 82 49 da a9 65 18 62 8b c3 12 18 3d b8 90 1b 0d f8 00 24 a7 8a 3a 91 2d 9b 0f 2a 75 54 d1 e0 24 1e 42 ec 70 2b dd 43 a5 e9 22 47 52 31 de 09 1c 96 cc 72 5e 36 4b 1e 76 30 Data Ascii: an.4@l$J\|ifTO72;6bON=vR=!:Hchyu($T$Ul<S{_9i4zdNB.qRhiuqTJ;?ifdG-`Rp(t3Q8~c&&"J)Ieb=$:-*uT$Bp+C"GR1r^6Kv0
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 11 d5 71 1f 15 e7 fb 46 7a 15 31 58 5b 2a ce 18 78 15 28 3e b3 b0 b8 58 39 d8 51 70 bc 5d 2e 9e cb 49 c2 57 82 94 cb 31 6f 16 a1 85 e2 1b e0 e8 68 07 ac ce 7f dc 0f 8a 3f 7b 3a af 3c 8e 8a 2b 4f 0c 7f 71 45 8a 33 44 75 68 a8 e2 23 77 ce b8 6d 6a 2a ae 53 84 d8 ee aa 40 f1 19 e7 22 70 5c d9 41 c5 9b b4 57 3c 16 8b 4e a6 f3 9f e7 d3 93 d1 9c c8 a8 80 f8 88 03 4c ec 54 f1 58 5b c5 47 df b0 e2 02 51 1d af 14 37 9d fa 90 37 6d 15 57 45 14 af 6d a3 e3 db 95 a3 53 8e 0f b4 50 5c ca 01 52 2e 9a df df df da da 82 e2 e4 cb 9c 00 c1 55 4a 24 12 ba 22 6e 75 b0 85 9e 26 72 a7 10 d7 e9 b8 57 fd d0 4a 00 d0 2f c2 bd 1b fb 3b 47 8e e2 af fb 57 2e 77 a8 38 aa 0b 34 c7 f3 4f 9e d6 6b e1 14 50 2e ab 56 71 4e 43 9a 5c 95 e2 cd d0 8d 35 b9 50 bf e2 3b 10 bf c1 f2 3f 2a 87 a7 Data Ascii: qFz1X[x(>X9Qp].IW1oh?{:<+OqE3Duh#wmjS@"p\AW<NLTX[GQ77mWEmSP\R.UJ$"nu&rWJ/;GW.w84OkP.VqNC\5P;?*
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: c1 2f 07 78 ab 0c 9c 55 5c 70 87 84 18 a4 e3 69 74 fc 64 99 c8 9c c0 a2 4a 4e cc 06 fc 85 92 3f 50 f5 07 4a 01 7f 12 43 fa 06 54 d6 bf 80 94 3b c9 65 30 85 81 64 a5 7a 1f 8e 45 f7 8c d0 9f 29 f9 01 48 c5 23 45 30 7e e5 19 34 22 1b cf 02 58 56 fd d0 c1 75 aa 38 52 4e a5 08 49 a5 64 83 21 5a ff e4 5e 3e 21 2e b7 65 29 ba 1c 4d 59 42 e9 e8 26 e4 21 8e 4d f7 19 c5 c3 b2 e2 6b 90 89 a7 f2 4b 90 93 28 28 9e 76 13 b2 49 15 0f 5f 40 71 e1 df 28 3e 35 e1 19 b7 cd 7a 41 71 2f 35 d7 03 96 f8 66 49 70 c1 37 a8 9b 79 df 48 88 f7 f1 7d 82 3c f2 f1 04 61 39 22 d3 37 64 98 d2 eb ad cc 60 df 94 59 6f 20 76 88 f6 fd 76 72 a9 4b 99 e8 21 47 d1 59 c7 94 73 71 4c 54 66 df f3 02 d3 c1 7b af a2 38 86 6d 96 25 f6 87 dd f6 69 6e 6a 8e 27 d0 52 89 e2 b5 5a e5 f0 10 02 38 c6 ee 5f Data Ascii: /xU\pitdJN?PJCT;e0dzE)H#E0~4"XVu8RNId!Z^>!.e)MYB&!MkK((vI_@q(>5zAq/5fIp7yH}<a9"7d`Yo vvrK!GYsqLTf{8m%inj'RZ8_
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: de b5 00 46 2f 38 41 71 9f ef db 5d d4 1b ae f4 06 dd 67 0f 37 95 12 96 d6 27 8c f3 7c a3 72 ba 9b 69 4f 8c e9 08 8c e2 9d 2b 4e 4f a6 6d 31 ea 6a f5 79 cb ff 4f c5 4d 4d b7 4f 9d 4c ab e1 14 50 8d e2 5d 70 f9 c2 f1 85 dd 6f 3d df ee ee 3a 51 f1 c5 89 81 99 86 e2 ea 79 79 f2 3f 45 f1 b2 a3 13 52 e5 a7 fd f4 25 11 e5 4b 2a 9e 4a 55 af 46 71 b3 0a cf 17 e7 a8 e2 7d 72 2e 5e a7 79 36 2d 55 5c 11 9d a0 12 c5 bb e0 bd 65 9d bb 80 73 7c 02 a0 86 ab 51 f1 36 29 3a d7 fb a4 1c 3e c7 2a de 57 71 03 05 42 9b d8 c6 42 1e 4e 25 e9 0b db 9e 94 69 ab 3e ad 39 77 fe 89 83 ce 6c 8c 35 77 fa a9 1a 67 ae 82 1e 23 51 1d 0c 55 7c 50 6f 6a f1 aa 9f 41 d2 02 83 5a 14 9f 71 8e 2f c0 55 53 16 d0 ef c5 c5 f1 2e 6a b8 da 2e 32 d1 96 18 57 0d 74 c8 0f 71 c8 8e e2 43 97 9e 57 80 e8 Data Ascii: F/8Aq]g7'\|riO+NOm1jyOMMOLP]po=:Qyy?ER%KJUFq}r.^y6-U\es\|Q6):>WqBBN%i>9wl5wg#QU\|PojAZq/US.j.2WtqCW
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 22 91 ff 2c a8 8b 9b 7e e2 04 22 91 d0 26 9e 2c 45 89 47 a2 c4 23 eb 80 83 77 82 5b f3 c4 93 61 49 9c e3 02 d1 c3 03 45 89 47 89 bf bb c4 c3 d7 78 94 78 94 78 c8 13 d7 e0 9d d0 a2 c4 83 e1 a1 c9 6a 51 e2 21 4d 3c e9 5f fc b2 d7 31 71 ee ab af 5f bc 78 f1 35 5a 56 a7 a6 bd f7 89 b3 1c bc 0b 2c b7 3e 89 b7 5a c9 98 d3 4a b6 9c 18 bd ac 63 e2 e8 c5 d5 ee 61 2f d0 ed 59 22 f7 76 e2 62 dd 86 de 26 a4 ea 00 a3 1e 40 dd 8a 7b 4e 0f ae 71 04 7c 6c 98 13 97 d1 d5 45 56 0a 2c c8 52 21 0e c5 78 b1 a0 22 9b d5 0b 88 e8 05 3e b4 89 5f 34 2f 5f 5f ec 3b 8d 8b 7d fa d9 4a 2e 4b 9c 63 6f d1 d8 27 a2 c1 72 2f 11 f8 d0 4b 98 51 ac 5c c2 2a c2 15 96 85 b9 de c4 81 49 0d b6 27 12 4c 26 c0 4f f6 95 c9 56 17 ae 49 02 f8 d8 f0 6d d2 bd 69 51 48 01 64 44 23 c5 9b 59 56 90 14 81 Data Ascii: ",~"&,EG#w[aIEGxxxjQ!M<_1q_x5ZV,>ZJca/Y"vb&@{Nq\|lEV,R!x">_4/__;}J.Kco'r/KQ\*I'L&OVImiQHdD#YV
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: f8 e0 1c 22 c1 f0 d4 89 ff 7a 2b f1 4f fc 1b b1 55 12 6f 9f 55 0f 4e 5f bd 3a 3d 38 3b ab 02 a5 ba 00 60 a7 bc c4 a8 3b 6c 58 ae e2 f5 3d a1 61 91 5c dd 85 c7 f7 cd f9 95 1f 0e e7 5e 42 e4 81 c2 95 f8 eb bf 4f 54 3e 1a af b2 b8 b9 53 ad bc ba 38 a0 95 57 ab 3b 40 f1 1e 00 74 32 f5 54 d9 50 86 f4 46 b3 d3 ef 64 c0 ec 77 9f 22 71 74 7c ee 3b b8 16 cd 59 1e 2a 4c 89 c7 2e 5f 7f 71 db 6f 1f 5c ae 92 f8 1e 4d fc e0 15 fd 9c 27 ce b9 75 4b 69 66 bc 5a 6f d3 ea c3 28 51 af f1 1b 2e b8 f5 be 07 8f ef b0 7d c5 5f 52 b8 52 3d 82 c8 83 84 2c f1 d8 87 bf dd 4e 7c ba 52 e2 87 d5 0a 0d fc e0 d5 45 b5 ba 07 3e 6e d8 cd ca fd 8c 21 e1 a2 04 0a e8 5d 0b 89 80 fa 3d 11 1e 83 f1 42 96 e5 17 c6 7c 9e 42 e3 de db b9 5a 18 de a3 5f fd 2b 78 ef 68 45 1b 82 e2 a9 13 1f 5f 7e 74 Data Ascii: "z+OUoUN_:=8;`;lX=a\^BOT>S8W;@t2TPFdw"qt\|;Y*L._qo\M'uKifZo(Q.}_RR=,N\|RE>n!]=B\|BZ_+xhE_~t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50667	104.16.114.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:08 UTC	2651	OUT	GET /images/backgrounds/press/android_v2.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780579.4.0.0; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6; _ga=GA1.2.1411026819.1703780523
2023-12-28 16:23:08 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:08 GMT Content-Type: image/png Content-Length: 5692 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-163c" Expires: Sat, 27 Jan 2024 15:24:11 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 3537 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb25685df62873-DFW
2023-12-28 16:23:08 UTC	969	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c3 00 00 01 21 08 03 00 00 00 34 d4 3b 65 00 00 01 80 50 4c 54 45 ff ff ff 2d 34 34 b1 1d 1d db db db b0 b0 b0 73 73 73 f6 f6 f6 79 ac d0 98 dc 00 c7 c7 c7 36 96 d7 f9 f9 f9 a7 d6 f7 ec ec ec 4f 51 51 1e 1e 1e 01 01 01 3d 42 42 f1 f1 f1 98 98 98 e2 e2 e2 80 81 81 18 88 d5 35 3a 3a 24 25 25 fb fb fb d0 e5 f2 92 cc f2 89 c8 f1 07 74 ce 44 89 b0 1b 0e 07 11 29 31 75 a6 10 8e c3 e7 54 99 c7 70 b9 eb 26 17 0a fe fe fe 4e a2 db a0 ca e7 98 cf f3 01 4c 53 11 11 11 dd 9d 8c 7c b7 dd 2a 90 d5 79 48 33 37 9c df ff f4 e9 bc d8 ec e5 f2 fa 56 38 29 e0 c6 a7 31 94 d6 3c 99 d8 ef 5f 7d 37 41 1b 15 11 04 23 34 3f f7 ef ee de ed f7 04 40 07 04 0d 50 c1 af 95 36 8f cd d7 75 c9 f6 e7 c8 bd 96 71 28 2c 2c 7a c0 ed 13 Data Ascii: PNGIHDR!4;ePLTE-44sssy6OQQ=BB5::$%%tD)1uTp&NLS\|*yH37V8)1<_}7A#4?@P6uq(,,z
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: c7 dc 20 99 d7 86 dd 50 a8 ee a6 dd 14 77 91 65 53 43 29 35 99 19 44 70 a7 25 1f 6c c7 3a fe d9 fa c3 49 42 4d ae 25 55 76 17 b1 04 48 66 56 83 10 69 b2 41 31 b2 68 8e 45 ba e1 ca 50 71 8a d1 6a 8c 75 5b 43 27 2f 00 06 c9 e8 44 c8 01 26 fe ed e7 1f 5a 8f 7b 22 09 89 dc 39 15 cd 41 20 0f 42 3e 04 f0 c6 1f 93 0f f8 19 07 b5 5d 37 5c 1b 3a a7 a9 02 5b 6d 86 42 9b a6 0c 35 a1 7c 7d 0b 93 7d 6b 98 81 68 31 44 94 04 50 c4 39 8d 42 a4 86 88 03 26 93 11 20 74 c3 95 a1 86 29 c2 48 6c d3 f6 86 24 04 a8 fe 36 3b 02 5c 1b 7a 33 74 17 c2 6c 89 06 b3 a1 71 a7 6c 30 18 5a 41 b3 6e b8 36 74 4a 53 4d a3 c5 f8 0e 86 e4 8c d9 8f 93 84 6a 7f 6b 28 32 f2 a0 e9 75 00 54 22 cd d5 20 a9 e1 2b 58 e9 86 57 86 cb 8b 18 a1 6e 6e e8 8b 20 1b 52 4b 14 0c ae 0c 43 25 f7 b1 16 0d c1 13 Data Ascii: PweSC)5Dp%l:IBM%UvHfViA1hEPqju[C'/D&Z{"9A B>]7\:[mB5\|}}kh1DP9B& t)Hl$6;\z3tlql0ZAn6tJSMjk(2uT" +XWnn RKC%
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: 2b ba cd c7 71 98 dc 51 93 bf f4 48 6b 66 cc 8e b8 d6 85 2a 29 34 32 de 99 32 90 8a d1 39 9b 9c be a5 30 bc 1f 26 35 62 cf 1d 8d b3 cc 5d e4 ae 7b 9d d6 ff 4e 56 d4 54 09 87 88 0a 6e d4 ba ef 09 51 2e 2b 25 95 2e fb 2c e2 72 19 e3 96 5e 94 61 ea 8e dc 6c 34 ca b3 e6 9c d6 84 47 c3 b5 f0 89 36 8c 4b 13 19 e2 92 24 17 da 94 9a 13 e3 bc e6 3d 67 5b 82 e1 29 c3 87 74 6f f8 34 ca f2 d1 78 5c 5f d3 64 f8 6c 38 11 da 57 5a d4 60 3b 41 d2 90 f0 54 19 fa d2 d0 d2 14 7d 9f ce 58 1c f8 30 3c 65 38 49 93 24 19 a6 f9 28 9f d7 84 ee e8 60 38 bc a7 7d 91 52 26 2c 95 d4 95 a6 92 93 0e 98 32 3b 8f 53 a9 b4 74 ce 7b 4b 03 18 9e 32 a4 de bc 46 ac 0d 47 63 37 af 9f a3 64 98 24 f3 f4 1b 1d db 11 51 58 53 3f 7f 20 a8 c9 21 8a 71 4b 2f ca 70 98 e5 4f cd 2b d3 3c 7f 4a 92 c6 10 Data Ascii: +qQHkf*)42290&5b]{NVTnQ.+%.,r^al4G6K$=g[)to4x\_dl8WZ`;AT}X0<e8I$(`8}R&,2;St{K2FGc7d$QXS? !qK/pO+<J
2023-12-28 16:23:08 UTC	1369	IN	Data Raw: a7 0d 7b c3 e6 30 fd f8 dd d3 dd 35 ec 0d 97 fd d8 1b fe cf 1a 16 05 6e d5 a8 18 01 1b fc 2c 81 75 15 2a e9 30 ec 0d df 75 18 52 17 f0 6b 81 e3 4a ca c9 f2 2a 18 96 79 8b 65 09 2d 00 4a d1 c6 39 80 40 b0 28 50 15 d0 46 a4 a5 55 10 77 7a 76 5e 6f 98 fc f0 74 de ab ef 5e 3d 5d f4 43 c4 32 c9 a8 b1 80 07 98 ad 8c 8a 11 45 ab 40 5a 3b c5 b8 d4 25 0b 10 1e 40 a2 18 05 fc 5c 45 2f 27 ab 88 49 c9 bc 75 73 38 b6 07 54 19 45 e1 01 10 a7 45 8a 91 07 34 e3 3c c6 02 69 de 9f a5 77 30 fc 06 8b fe 7e 79 f1 4d 82 45 d1 a4 00 c9 a9 b4 71 a0 f9 b7 3e 90 a0 b5 03 65 ce 01 c4 78 24 e4 5b 5b 49 67 8b 06 7b e0 a2 95 b6 b0 9a 39 40 86 92 41 d2 40 3e a1 81 49 9d 03 f4 7b 0e fa c0 e7 56 d2 42 6a 43 09 8d d2 49 21 03 90 db 54 6b 75 87 67 e7 f5 86 4b b1 32 a4 b8 fe 1d d4 6c e4 65 Data Ascii: {05n,u0uRkJye-J9@(PFUwzv^ot^=]C2E@Z;%@\E/'Ius8TEE4<iw0~yMEq>ex$[[Ig{9@A@>I{VBjCI!TkugK2le
2023-12-28 16:23:08 UTC	616	IN	Data Raw: c0 70 4a ad ae 34 a8 85 e3 32 42 53 1a 8c f7 39 50 51 0f d4 a6 00 e7 4e b4 1e 08 94 3a 50 6b 03 98 af 83 0e 00 d5 3e c2 49 34 ae 01 da 13 07 2a b9 c9 25 b1 ad a1 e3 96 40 6a 87 c0 b0 ae 2e c3 35 6d 02 db 01 da a5 b9 86 f2 0e 90 37 f1 15 f3 3e 5a 54 0a 21 6c 63 f8 76 bf 31 db 3f 7f 72 7a f2 d5 e4 db 6c 99 13 4d 91 69 cb bc 96 96 11 26 a4 13 8c bb 26 a2 95 a6 3c 15 cb 24 93 86 5b 2d 59 60 82 3a c5 24 f3 c1 d0 81 97 d4 48 d1 ee 12 82 33 c9 88 a3 c2 e9 a0 85 33 de 54 ce 07 43 82 70 5c 6a a9 db 3d 4c 74 16 43 25 de 57 5e 1a 92 7a 6d 9b b1 76 81 6e 84 d9 29 79 7b c7 d5 7c c5 95 5e 2e aa 63 8c 36 1b bf de 9f df 8a 0e fe 76 fc d5 e4 ec e0 e0 d1 c1 a3 b3 c6 50 c7 79 d6 91 a8 64 20 95 8f c4 47 5f 33 27 f3 c8 63 e5 6c 15 2f a3 8e c4 54 52 a2 7c 54 3c 12 c7 63 a4 94 Data Ascii: pJ42BS9PQN:Pk>I4*%@j.5m7>ZT!lcv1?rzlMi&&<$[-Y`:$H33TCp\j=LtC%W^zmvn)y{\|^.c6vPyd G_3'cl/TR\|T<c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50673	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:09 UTC	1314	OUT	GET /assets/index-41235507.js HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://convertwithwave.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=LgUqppGNPcKj8mWSxZX1T4Pqtz69caRlQNvT266wwjDJ5n3aIRkvUmbtMTBUD/WcYodew7S/kXNTrToS83Q8Xo8mBDiJHKnqSf1ynIkuL+1x73j+UomnTlN0IYy1; AWSALBCORS=LgUqppGNPcKj8mWSxZX1T4Pqtz69caRlQNvT266wwjDJ5n3aIRkvUmbtMTBUD/WcYodew7S/kXNTrToS83Q8Xo8mBDiJHKnqSf1ynIkuL+1x73j+UomnTlN0IYy1
2023-12-28 16:23:09 UTC	782	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:09 GMT Content-Type: application/javascript Content-Length: 588024 Connection: close Set-Cookie: AWSALB=G35JgVP4hs6i8Az7boO7nL1uA5zctWQPoNvf1P6bKzn2lETHLTlmkFKPoz/FZhXzswMHm/L1PWqgN6q10xoBr8/6qFYw3ih+dvXYFWoFo3yZSngzg39x/BURgVgd; Expires=Thu, 04 Jan 2024 16:23:09 GMT; Path=/ Set-Cookie: AWSALBCORS=G35JgVP4hs6i8Az7boO7nL1uA5zctWQPoNvf1P6bKzn2lETHLTlmkFKPoz/FZhXzswMHm/L1PWqgN6q10xoBr8/6qFYw3ih+dvXYFWoFo3yZSngzg39x/BURgVgd; Expires=Thu, 04 Jan 2024 16:23:09 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT Vary: Accept-Encoding ETag: "658d889d-8f8f8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:09 UTC	15602	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 2e 72 65 6c 4c 69 73 74 3b 69 66 28 74 26 26 74 2e 73 75 70 70 6f 72 74 73 26 26 74 2e 73 75 70 70 6f 72 74 73 28 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 29 29 72 65 74 75 72 6e 3b 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 6c 69 6e 6b 5b 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 5d 27 29 29 6e 28 69 29 3b 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 69 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 6f 20 6f 66 20 69 29 69 66 28 6f 2e 74 79 70 65 3d 3d 3d 22 63 68 69 6c 64 4c 69 73 74 22 29 66 6f Data Ascii: (function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const i of document.querySelectorAll('link[rel="modulepreload"]'))n(i);new MutationObserver(i=>{for(const o of i)if(o.type==="childList")fo
2023-12-28 16:23:09 UTC	16384	IN	Data Raw: 28 74 2e 70 72 65 26 26 21 65 2e 70 72 65 29 72 65 74 75 72 6e 20 31 7d 72 65 74 75 72 6e 20 72 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 6d 28 65 29 7b 50 75 3d 21 31 2c 4c 6f 3d 21 30 2c 46 74 2e 73 6f 72 74 28 51 77 29 3b 63 6f 6e 73 74 20 74 3d 6f 72 3b 74 72 79 7b 66 6f 72 28 64 72 3d 30 3b 64 72 3c 46 74 2e 6c 65 6e 67 74 68 3b 64 72 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 46 74 5b 64 72 5d 3b 72 26 26 72 2e 61 63 74 69 76 65 21 3d 3d 21 31 26 26 72 6e 28 72 2c 6e 75 6c 6c 2c 31 34 29 7d 7d 66 69 6e 61 6c 6c 79 7b 64 72 3d 30 2c 46 74 2e 6c 65 6e 67 74 68 3d 30 2c 65 6d 28 29 2c 4c 6f 3d 21 31 2c 68 66 3d 6e 75 6c 6c 2c 28 46 74 2e 6c 65 6e 67 74 68 7c 7c 6d 69 2e 6c 65 6e 67 74 68 29 26 26 74 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 77 28 65 2c 74 2c 2e Data Ascii: (t.pre&&!e.pre)return 1}return r};function tm(e){Pu=!1,Lo=!0,Ft.sort(Qw);const t=or;try{for(dr=0;dr<Ft.length;dr++){const r=Ft[dr];r&&r.active!==!1&&rn(r,null,14)}}finally{dr=0,Ft.length=0,em(),Lo=!1,hf=null,(Ft.length\|\|mi.length)&&tm()}}function Kw(e,t,.
2023-12-28 16:23:09 UTC	406	IN	Data Raw: 61 28 65 2c 74 2c 72 3d 66 74 2c 6e 3d 21 31 29 7b 69 66 28 72 29 7b 63 6f 6e 73 74 20 69 3d 72 5b 65 5d 7c 7c 28 72 5b 65 5d 3d 5b 5d 29 2c 6f 3d 74 2e 5f 5f 77 65 68 7c 7c 28 74 2e 5f 5f 77 65 68 3d 28 2e 2e 2e 73 29 3d 3e 7b 69 66 28 72 2e 69 73 55 6e 6d 6f 75 6e 74 65 64 29 72 65 74 75 72 6e 3b 48 69 28 29 2c 6c 6e 28 72 29 3b 63 6f 6e 73 74 20 61 3d 4b 74 28 74 2c 72 2c 65 2c 73 29 3b 72 65 74 75 72 6e 20 6e 6e 28 29 2c 57 69 28 29 2c 61 7d 29 3b 72 65 74 75 72 6e 20 6e 3f 69 2e 75 6e 73 68 69 66 74 28 6f 29 3a 69 2e 70 75 73 68 28 6f 29 2c 6f 7d 7d 63 6f 6e 73 74 20 44 72 3d 65 3d 3e 28 74 2c 72 3d 66 74 29 3d 3e 28 21 43 69 7c 7c 65 3d 3d 3d 22 73 70 22 29 26 26 4a 61 28 65 2c 28 2e 2e 2e 6e 29 3d 3e 74 28 2e 2e 2e 6e 29 2c 72 29 2c 70 30 3d 44 72 Data Ascii: a(e,t,r=ft,n=!1){if(r){const i=r[e]\|\|(r[e]=[]),o=t.__weh\|\|(t.__weh=(...s)=>{if(r.isUnmounted)return;Hi(),ln(r);const a=Kt(t,r,e,s);return nn(),Wi(),a});return n?i.unshift(o):i.push(o),o}}const Dr=e=>(t,r=ft)=>(!Ci\|\|e==="sp")&&Ja(e,(...n)=>t(...n),r),p0=Dr
2023-12-28 16:23:09 UTC	16384	IN	Data Raw: 6f 6e 65 6e 74 73 22 3b 66 75 6e 63 74 69 6f 6e 20 63 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6d 28 5f 66 2c 65 2c 21 30 2c 74 29 7c 7c 65 7d 63 6f 6e 73 74 20 70 6d 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 76 2d 6e 64 63 22 29 3b 66 75 6e 63 74 69 6f 6e 20 48 6e 28 65 29 7b 72 65 74 75 72 6e 20 5a 65 28 65 29 3f 76 6d 28 5f 66 2c 65 2c 21 31 29 7c 7c 65 3a 65 7c 7c 70 6d 7d 66 75 6e 63 74 69 6f 6e 20 76 6d 28 65 2c 74 2c 72 3d 21 30 2c 6e 3d 21 31 29 7b 63 6f 6e 73 74 20 69 3d 5f 74 7c 7c 66 74 3b 69 66 28 69 29 7b 63 6f 6e 73 74 20 6f 3d 69 2e 74 79 70 65 3b 69 66 28 65 3d 3d 3d 5f 66 29 7b 63 6f 6e 73 74 20 61 3d 4c 75 28 6f 2c 21 31 29 3b 69 66 28 61 26 26 28 61 3d 3d 3d 74 7c 7c 61 3d 3d 3d 70 72 28 74 29 7c 7c 61 3d 3d 3d 71 61 28 70 72 28 74 29 Data Ascii: onents";function cn(e,t){return vm(_f,e,!0,t)\|\|e}const pm=Symbol.for("v-ndc");function Hn(e){return Ze(e)?vm(_f,e,!1)\|\|e:e\|\|pm}function vm(e,t,r=!0,n=!1){const i=_t\|\|ft;if(i){const o=i.type;if(e===_f){const a=Lu(o,!1);if(a&&(a===t\|\|a===pr(t)\|\|a===qa(pr(t)
2023-12-28 16:23:09 UTC	16384	IN	Data Raw: 55 70 64 61 74 65 29 26 26 7a 74 28 70 65 2c 47 2c 6f 65 2c 6e 65 29 2c 4f 6e 28 77 2c 21 30 29 3b 63 6f 6e 73 74 20 24 65 3d 53 63 28 77 29 2c 74 74 3d 77 2e 73 75 62 54 72 65 65 3b 77 2e 73 75 62 54 72 65 65 3d 24 65 2c 76 28 74 74 2c 24 65 2c 66 28 74 74 2e 65 6c 29 2c 46 28 74 74 29 2c 77 2c 6a 2c 56 29 2c 6f 65 2e 65 6c 3d 24 65 2e 65 6c 2c 74 65 3d 3d 3d 6e 75 6c 6c 26 26 70 66 28 77 2c 24 65 2e 65 6c 29 2c 75 65 26 26 77 74 28 75 65 2c 6a 29 2c 28 70 65 3d 6f 65 2e 70 72 6f 70 73 26 26 6f 65 2e 70 72 6f 70 73 2e 6f 6e 56 6e 6f 64 65 55 70 64 61 74 65 64 29 26 26 77 74 28 28 29 3d 3e 7a 74 28 70 65 2c 47 2c 6f 65 2c 6e 65 29 2c 6a 29 7d 65 6c 73 65 7b 6c 65 74 20 6f 65 3b 63 6f 6e 73 74 7b 65 6c 3a 72 65 2c 70 72 6f 70 73 3a 75 65 7d 3d 53 2c 7b 62 Data Ascii: Update)&&zt(pe,G,oe,ne),On(w,!0);const $e=Sc(w),tt=w.subTree;w.subTree=$e,v(tt,$e,f(tt.el),F(tt),w,j,V),oe.el=$e.el,te===null&&pf(w,$e.el),ue&&wt(ue,j),(pe=oe.props&&oe.props.onVnodeUpdated)&&wt(()=>zt(pe,G,oe,ne),j)}else{let oe;const{el:re,props:ue}=S,{b
2023-12-28 16:23:09 UTC	16073	IN	Data Raw: 75 74 65 28 74 29 3b 72 65 74 75 72 6e 7d 6c 65 74 20 63 3d 21 31 3b 69 66 28 72 3d 3d 3d 22 22 7c 7c 72 3d 3d 6e 75 6c 6c 29 7b 63 6f 6e 73 74 20 75 3d 74 79 70 65 6f 66 20 65 5b 74 5d 3b 75 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 3f 72 3d 43 67 28 72 29 3a 72 3d 3d 6e 75 6c 6c 26 26 75 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 28 72 3d 22 22 2c 63 3d 21 30 29 3a 75 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 28 72 3d 30 2c 63 3d 21 30 29 7d 74 72 79 7b 65 5b 74 5d 3d 72 7d 63 61 74 63 68 7b 7d 63 26 26 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 52 6e 28 65 2c 74 2c 72 2c 6e 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 72 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 45 28 65 2c 74 2c 72 2c 6e 29 7b 65 Data Ascii: ute(t);return}let c=!1;if(r===""\|\|r==null){const u=typeof e[t];u==="boolean"?r=Cg(r):r==null&&u==="string"?(r="",c=!0):u==="number"&&(r=0,c=!0)}try{e[t]=r}catch{}c&&e.removeAttribute(t)}function Rn(e,t,r,n){e.addEventListener(t,r,n)}function oE(e,t,r,n){e
2023-12-28 16:23:09 UTC	311	IN	Data Raw: 74 69 6f 6e 20 4b 45 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 26 26 28 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 69 6c 74 65 72 28 74 3d 3e 65 5b 74 5d 29 29 2c 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 2e 6a 6f 69 6e 28 22 20 22 29 3a 65 29 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 69 6c 74 65 72 28 74 3d 3e 74 2e 74 72 69 6d 28 29 29 2e 66 69 6c 74 65 72 28 42 6f 6f 6c 65 61 6e 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 45 28 65 29 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 29 7b 63 6f 6e 73 74 20 72 3d 74 2e 73 74 61 72 74 73 57 69 74 68 28 Data Ascii: tion KE(e){return typeof e=="object"&&!Array.isArray(e)&&(e=Object.keys(e).filter(t=>e[t])),(Array.isArray(e)?e.join(" "):e).split(" ").filter(t=>t.trim()).filter(Boolean).join(" ")}async function JE(e){for(const t of Object.keys(e)){const r=t.startsWith(
2023-12-28 16:23:09 UTC	16384	IN	Data Raw: 67 28 65 5b 74 5d 29 3d 3d 3d 22 74 72 75 65 22 3f 65 5b 74 5d 3d 72 3f 22 74 72 75 65 22 3a 22 22 3a 53 74 72 69 6e 67 28 65 5b 74 5d 29 3d 3d 3d 22 66 61 6c 73 65 22 26 26 28 72 3f 65 5b 74 5d 3d 22 66 61 6c 73 65 22 3a 64 65 6c 65 74 65 20 65 5b 74 5d 29 7d 72 65 74 75 72 6e 20 65 7d 63 6f 6e 73 74 20 47 45 3d 31 30 3b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 59 45 28 65 29 7b 63 6f 6e 73 74 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 65 2e 72 65 73 6f 6c 76 65 64 49 6e 70 75 74 29 2e 66 69 6c 74 65 72 28 28 5b 72 2c 6e 5d 29 3d 3e 74 79 70 65 6f 66 20 6e 3c 22 75 22 26 26 4c 45 2e 69 6e 63 6c 75 64 65 73 28 72 29 29 2e 66 6f 72 45 61 63 68 28 28 5b 72 2c 6e 5d 29 3d 3e 7b 63 6f 6e 73 74 20 69 3d 44 45 28 6e Data Ascii: g(e[t])==="true"?e[t]=r?"true":"":String(e[t])==="false"&&(r?e[t]="false":delete e[t])}return e}const GE=10;async function YE(e){const t=[];return Object.entries(e.resolvedInput).filter(([r,n])=>typeof n<"u"&&LE.includes(r)).forEach(([r,n])=>{const i=DE(n
2023-12-28 16:23:09 UTC	16073	IN	Data Raw: 46 22 2c 22 23 36 36 33 33 43 43 22 2c 22 23 36 36 33 33 46 46 22 2c 22 23 36 36 43 43 30 30 22 2c 22 23 36 36 43 43 33 33 22 2c 22 23 39 39 30 30 43 43 22 2c 22 23 39 39 30 30 46 46 22 2c 22 23 39 39 33 33 43 43 22 2c 22 23 39 39 33 33 46 46 22 2c 22 23 39 39 43 43 30 30 22 2c 22 23 39 39 43 43 33 33 22 2c 22 23 43 43 30 30 30 30 22 2c 22 23 43 43 30 30 33 33 22 2c 22 23 43 43 30 30 36 36 22 2c 22 23 43 43 30 30 39 39 22 2c 22 23 43 43 30 30 43 43 22 2c 22 23 43 43 30 30 46 46 22 2c 22 23 43 43 33 33 30 30 22 2c 22 23 43 43 33 33 33 33 22 2c 22 23 43 43 33 33 36 36 22 2c 22 23 43 43 33 33 39 39 22 2c 22 23 43 43 33 33 43 43 22 2c 22 23 43 43 33 33 46 46 22 2c 22 23 43 43 36 36 30 30 22 2c 22 23 43 43 36 36 33 33 22 2c 22 23 43 43 39 39 30 30 22 2c 22 23 Data Ascii: F","#6633CC","#6633FF","#66CC00","#66CC33","#9900CC","#9900FF","#9933CC","#9933FF","#99CC00","#99CC33","#CC0000","#CC0033","#CC0066","#CC0099","#CC00CC","#CC00FF","#CC3300","#CC3333","#CC3366","#CC3399","#CC33CC","#CC33FF","#CC6600","#CC6633","#CC9900","#
2023-12-28 16:23:09 UTC	16384	IN	Data Raw: 7d 29 2c 74 7d 2c 43 68 3d 53 79 6d 62 6f 6c 28 22 69 6e 74 65 72 6e 61 6c 73 22 29 3b 66 75 6e 63 74 69 6f 6e 20 72 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 53 74 72 69 6e 67 28 65 29 2e 74 72 69 6d 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 71 73 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 21 31 7c 7c 65 3d 3d 6e 75 6c 6c 3f 65 3a 4c 2e 69 73 41 72 72 61 79 28 65 29 3f 65 2e 6d 61 70 28 71 73 29 3a 53 74 72 69 6e 67 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 4f 28 65 29 7b 63 6f 6e 73 74 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 72 3d 2f 28 5b 5e 5c 73 2c 3b 3d 5d 2b 29 5c 73 2a 28 3f 3a 3d 5c 73 2a 28 5b 5e 2c 3b 5d 2b 29 29 3f 2f 67 3b 6c 65 74 20 6e 3b 66 6f 72 28 3b 6e 3d 72 2e 65 78 Data Ascii: }),t},Ch=Symbol("internals");function ro(e){return e&&String(e).trim().toLowerCase()}function qs(e){return e===!1\|\|e==null?e:L.isArray(e)?e.map(qs):String(e)}function OO(e){const t=Object.create(null),r=/([^\s,;=]+)\s(?:=\s([^,;]+))?/g;let n;for(;n=r.ex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50674	104.16.114.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:09 UTC	2662	OUT	GET /images/backgrounds/press/productFeatureSprite.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6; _ga=GA1.2.1411026819.1703780523; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780587.60.0.0
2023-12-28 16:23:09 UTC	399	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:09 GMT Content-Type: image/png Content-Length: 3008 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-bc0" Expires: Sat, 27 Jan 2024 12:54:46 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1685 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb256a3fc9e9b1-DFW
2023-12-28 16:23:09 UTC	970	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 01 d4 08 06 00 00 00 52 e5 8a 35 00 00 0b 87 49 44 41 54 78 da ed 9d 7d 8c 17 c5 19 c7 ef 78 39 f1 68 aa c0 01 77 d5 6a 00 0f 0b 3d 4c 21 b4 45 de 24 be 04 0e 0f ea 5b 5b 03 a5 3d 8a b1 a5 0d 68 0a 22 20 96 23 84 37 35 84 43 d1 c6 1a f1 05 8d a9 6d ca 8b 24 28 85 4a b0 95 83 36 35 6d 7d 03 b4 a4 c2 41 81 3b ea 1d c7 c9 4b 6f fb 1d f2 9c 99 6e 67 77 67 77 66 5f 7e bf 7b 9e e4 93 db db 9d 99 fd ec cc 33 b3 b3 f7 cf 15 14 50 ac ac 2b 70 92 a4 20 28 32 2b 54 90 95 c8 bc 50 ea 43 98 33 42 a9 a5 4a ce 09 e1 b8 08 d4 82 46 42 1c 17 a5 29 b4 46 31 f6 2b d3 14 6a 50 08 35 b0 50 c0 90 ad 92 ae 77 01 4f 80 5b 53 4f 6a fc ec 01 de a0 3a 1f 83 6e a9 4d 7b 94 29 07 1f b8 7a ae 46 51 4e d9 83 56 85 70 fd Data Ascii: PNGIHDR$R5IDATx}x9hwj=L!E$[[=h" #75Cm$(J65m}A;Kongwgwf_~{3P+p (2+TPC3BJFB)F1+jP5PwO[SOj:nM{)zFQNVp
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: 6f 07 c7 52 90 f9 04 4c e4 4f 70 0e 0e 0e 8e 9c 8b 9a 47 9f 2c 02 b5 a0 01 38 09 d1 48 f7 2c 52 09 ad 49 50 c4 cd 4a 95 50 43 8a 42 0d 2a 21 27 4d 58 28 bf 85 bc ca b9 cf 2b da ec 09 be 01 1e 03 67 52 17 72 5d ff ba 9f 54 ec 42 f8 fd 5e 30 1e 74 92 ce ad b0 2e e4 d3 03 5e e2 cf 49 e7 46 65 41 e8 a0 74 ee da 2c 08 2d 8f b5 87 42 e4 d0 1d e0 3a d7 b9 e5 59 9a 65 43 c1 e9 b4 d7 a1 62 f0 35 b0 14 34 f3 ab 83 85 92 16 ca dc 8e 31 cd 3d f5 2a bf af 8e c6 4c 7c 75 70 70 70 70 70 70 70 58 8e e3 d3 9e 76 d2 24 77 84 74 cf 47 1d 01 ed f6 59 28 67 85 74 93 0e e7 d6 83 62 5b b3 d8 86 90 38 ff 37 30 38 4b 42 82 16 50 9d 25 a1 76 7c 87 30 f6 75 c8 a3 61 31 84 5f 4d 65 96 f9 3c ad 72 08 59 88 78 0f 54 a4 b5 0e 25 93 d4 b9 3e ed df f5 1a a2 34 84 92 79 75 f0 db 9e 85 e2 Data Ascii: oRLOpG,8H,RIPJPCB!'MX(+gRr]TB^0t.^IFeAt,-B:YeCb541=L\|upppppppXv$wtGY(gtb[8708KBP%v\|0ua1_Me<rYxT%>4yu
2023-12-28 16:23:09 UTC	669	IN	Data Raw: 64 1c b9 38 ed 7b 82 91 44 4f e9 fc b8 38 d0 11 1a 29 55 18 c9 42 0a a1 5e 24 75 bd 38 4e 5d 88 83 83 83 83 83 83 83 83 83 43 3f 06 ed fe ab 23 c3 42 2c 94 53 42 ee 9b eb e2 d5 86 ee 39 cf 87 cd 4b 21 93 91 c9 be 50 5a 49 9d 39 21 5e 87 f2 3b 87 92 1c 05 de 5b e5 4c 77 46 4a 6a 16 e2 e0 a4 ee 70 42 51 b6 a6 c6 5b d8 9c 10 e2 e0 e0 e0 e0 d0 8c 21 cb 1b be 07 1a 81 a3 0b d5 6b 01 37 c6 21 14 4a 46 12 72 62 91 0a 2b e3 12 b2 2f 65 41 c8 ae 94 25 21 7b 52 16 85 ec 48 59 16 ba 28 95 8a 50 9c eb 90 63 1b 16 62 a1 fc 16 c2 89 1a 37 aa 6b 2c 94 b9 21 63 21 9e f6 1d 39 87 1a 2d 0b 35 46 12 42 99 25 f4 73 1a 38 61 49 46 b4 33 4d a7 17 16 bb 7e 5f 1a fb 46 4b 23 4f 16 d3 f1 32 d7 53 fd 3c ee 9b ff df 90 49 37 df ed 92 59 14 a5 3d 9b 42 32 0b a3 b6 17 87 d0 76 93 f6 Data Ascii: d8{DO8)UB^$u8N]C?#B,SB9K!PZI9!^;[LwFJjpBQ[!k7!JFrb+/eA%!{RHY(Pcb7k,!c!9-5FB%s8aIF3M~_FK#O2S<I7Y=B2v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50675	104.16.114.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:09 UTC	2648	OUT	GET /images/backgrounds/press/ios_v2.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6; _ga=GA1.2.1411026819.1703780523; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780587.60.0.0
2023-12-28 16:23:09 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:09 GMT Content-Type: image/png Content-Length: 8839 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-2287" Expires: Sat, 27 Jan 2024 13:37:19 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1685 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb256a4f572c85-DFW
2023-12-28 16:23:09 UTC	969	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c3 00 00 01 21 08 03 00 00 00 34 d4 3b 65 00 00 01 08 50 4c 54 45 ff ff ff 19 19 19 2b 6c c3 2b 6a c3 fc fc fc ee ef ef f8 f8 f9 13 13 13 f2 f2 f2 2c 6a c4 22 22 22 e9 e9 e9 f5 f5 f5 db db db d2 d2 d2 e2 e2 e2 0f 54 ba bf bf bf 8b c9 f1 93 cc f2 2a 64 b4 2e 6e c4 9a d0 f4 cc cc cc 13 0c 0a 5b 88 c1 ff ff fa 19 15 0f b3 b3 b3 a2 a2 a2 3b 3b 3b 19 5e bd 85 c6 f1 33 33 33 c6 c6 c6 ae d3 f0 22 64 c0 c3 c3 c3 73 a7 d6 28 67 c2 7a 79 7a 84 84 85 2a 2a 2a 5a 5a 5a 92 92 92 68 95 d5 65 65 65 6f 6f 6f e1 ee f7 94 b9 e1 1b 85 d5 42 41 41 50 50 50 52 89 ce 48 48 48 5d a0 cc c4 d8 ef 88 b3 de 7d c1 ed d1 e3 f5 70 ba ed 36 41 94 a3 c2 e6 44 7d ca bd de f5 38 74 c7 40 4d 9d 51 54 92 a1 ce ec ef f5 fb 08 74 d0 65 Data Ascii: PNGIHDR!4;ePLTE+l+j,j"""Td.n[;;;^333"ds(gzyz**ZZZheeeoooBAAPPPRHHH]}p6AD}8t@MQTte
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: 1f ca 10 d1 46 1a 2a 52 7f 2f 85 8b 19 b3 4c 02 e7 c3 ff ec 9b cd 0a c4 20 10 83 ef df fb 3f f0 52 16 5c 10 34 9d 30 7a d9 04 3c 14 4b 7b 08 f3 13 33 d6 35 3e 22 89 3d 00 3c 42 c4 5a 70 46 ce 4b 27 7d b8 39 97 a4 6a a7 0f cb f0 1a f8 7b 0e bf c0 ea 27 0c 58 fc e8 1b dd 84 43 05 de 6f 50 e1 27 fa b0 55 1f 6a 21 31 40 0b 2d f6 fd 18 e2 e3 97 e3 90 39 ab e9 91 70 7a 13 a9 18 52 24 1c 3e c0 cf 8b 2c 68 54 ab ad 97 89 7f c8 2e ea ac e1 53 1a d2 a9 f8 18 a9 87 15 ff 70 63 9c df 99 76 da 92 9a be 74 9a 89 d2 94 e8 3d 1c a2 fc d7 89 3e fc c5 21 72 20 8d 75 f0 61 b9 bb 12 ec 7e 4c 72 e9 e0 10 3d 01 73 56 ed 19 fd 0e d1 87 ef eb 21 e7 07 d5 f0 77 89 6f 31 fb 16 1a e8 b6 a6 70 fd bb 50 71 59 27 6e 12 87 c2 f6 2d e8 8b d3 07 a8 e4 ac 4d d4 43 33 69 36 f0 27 fa 9d f1 Data Ascii: F*R/L ?R\40z<K{35>"=<BZpFK'}9j{'XCoP'Uj!1@-9pzR$>,hT.Spcvt=>!r ua~Lr=sV!wo1pPqY'n-MC3i6'
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: 52 c2 50 94 30 e3 c4 fa 11 eb a2 31 cf 98 34 3a 04 34 ca 0b 44 51 08 c9 10 16 ac 74 e1 ff ff 35 f6 b6 a7 a7 c3 d3 85 1b 13 27 69 e5 41 7b 6f 81 a4 87 73 bf 3a 26 0c 49 1e 39 33 4e 94 65 83 69 04 a1 10 79 00 45 60 b7 2b db 44 ae c2 89 32 f8 c4 97 01 80 01 09 cc 2a 79 87 37 85 0e 32 48 df a1 12 16 00 57 95 fd 61 c2 d0 83 45 af a5 40 37 5a c2 5d 7d 93 d1 0b d8 e8 af 24 0f 3f 04 83 19 98 16 4d b0 02 4c 90 a1 07 98 e9 5c 69 05 68 66 65 b8 fb 52 64 90 6d e9 ce 1f 86 d5 75 ff 76 6c c2 00 64 52 1e 11 b8 24 1e 30 bd 5e 09 f2 70 c9 45 45 3b 0c 54 f0 28 c0 4d 63 1d c4 b8 85 38 07 05 bf 0f 99 4e e9 21 ef 5b ec 72 7c 95 32 bc 60 e4 54 09 2b 26 67 3a 24 10 29 b1 34 ac af ef 89 50 f4 70 ad 4c 43 82 98 7e 2d 61 73 e0 5f bc 9b 8f c5 24 04 a4 07 46 bb 2a 18 09 c0 9d 73 8b Data Ascii: RP014:4DQt5'iA{os:&I93NeiyE`+D2y72HWaE@7Z]}$?ML\ihfeRdmuvldR$0^pEE;T(Mc8N![r\|2`T+&g:$)4PpLC~-as_$Fs
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: df 97 ff ff 61 c2 50 df 6e cb 18 02 c3 bb db 6d 19 43 60 f8 f4 f5 ad b6 a7 19 43 60 f8 a8 b8 d5 96 31 cc 18 de 7a cb 18 de 7e cb 18 de 7e fb 13 86 47 df 8a 9b 69 19 c3 87 18 6e 53 3d 4d 53 5d cf 7f 98 fd e2 e3 e7 f7 ff 1f b8 19 c3 87 18 9e bf 7f 93 36 f4 5b 87 76 22 84 4f ee df bc 7d 5b 14 cf 9f c9 ca b9 b1 5c 1e 17 c7 e2 d9 49 64 7f df 32 86 ff 16 c3 fe 5b ed db 37 b6 3a c2 73 ef f0 7b fc e1 d1 fb af 1f 9f bf bb ff 72 ff fe c9 a7 e2 cd db af cf 8f f7 9f 5f 7e f8 fc e5 d5 5f bf 34 63 f8 8b bd 3b ea 4d 13 0a c3 38 fe 5c 9c c3 48 0f ef 7b 82 26 9e 2e 01 a3 18 1a 1c 44 da e8 b4 d5 65 e9 45 bd 69 bf ff f7 d9 51 d4 b5 2a db 7a 81 93 e4 fc 53 11 b1 d9 cd 2f 30 a8 be a1 51 43 b1 7a e9 be 54 75 f7 2d 47 1e b6 cd 33 d8 f4 38 9d 4e 8a 2f fc 25 0f 87 a6 1f 67 37 e6 Data Ascii: aPnmC`C`1z~~GinS=MS]6[v"O}[\Id2[7:s{r_~_4c;M8\H{&.DeEiQ*zS/0QCzTu-G38N/%g7
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: c8 19 ba ef d3 b4 3d 67 d8 fe 9c 61 fb 3b 35 14 5e db 72 f3 16 67 e6 9e 7c 9b 3c 3c aa a4 ac 9e 7e 6f d8 3f c9 c3 fa d1 4a 4d ef ff 5d f9 87 df 95 52 1e 6d 38 bf ee e6 9e dc b1 b4 f5 39 c3 f6 e7 0c db 9f 33 6c 7f ce b0 fd 9d 31 5c df af d7 f7 f7 6b d4 e5 e1 ca 72 86 c7 86 f7 77 8b dd 17 f4 4f 2a 63 20 2c c7 04 88 8c 70 35 39 c3 63 c3 97 b7 c5 b6 a7 c7 5d a3 83 66 3e 04 e6 b9 91 60 33 64 84 06 40 c4 80 1f f9 f8 54 ce b0 61 c3 a7 e3 7b 05 7d 5f dc a3 4a df 28 ff 26 cd 54 dc cf bf 05 71 3e 8b 45 39 1f c6 34 cb e7 84 cf e4 0c 1b 35 5c 3f bf 8c 76 d9 4f 9d b6 8f 51 f7 30 4f da 8f 92 59 30 8c 87 a4 fb d1 4d 5a 7c 8b 87 22 99 17 b7 51 a4 f1 99 9c e1 bb 1a b9 57 d0 49 a3 c1 08 55 71 5e c6 98 15 39 90 8d 87 e3 71 98 4d 80 29 47 fd 92 70 e9 3c cf 19 fe e5 5e 41 dd Data Ascii: =ga;5^rg\|<<~o?JM]Rm893l1\krwO*c ,p59c]f>`3d@Ta{}_J(&Tq>E945\?vOQ0OY0MZ\|"QWIUq^9qM)Gp<^A
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: 6a 89 5b 08 01 a9 92 c3 a7 3a fc 74 63 24 86 65 bf 0c d8 e0 8d 64 dd dd 70 46 7d bf 68 e0 15 2e 29 1c 6e 50 f5 02 e8 5b 5c d2 f8 60 b7 fb 97 c3 bc b2 0d 6e d1 04 d5 db e4 f0 a9 0e 47 89 57 ff 13 dd 8b 00 bb 30 b0 0d c4 8b b6 5a 1a ca a5 0d 80 6e a2 5c eb e9 60 fb e2 ac 82 ad 14 14 fb 45 0f d9 30 76 b4 17 05 f8 62 80 ac 1c e0 42 5b 29 05 5f 49 f4 a5 36 8a 48 b3 07 37 12 80 34 c1 6f ce 68 aa b3 34 0e 9f ea f0 f3 c8 c7 5f 71 49 5d 43 19 d2 61 68 5b b3 ac bb 59 ec 78 3e 2c 4a 31 f4 fd 4a 00 e5 b2 a2 cc 5d 54 be 2e 7b 55 bd 28 17 2b aa db 95 c7 44 39 2b d1 bc 68 f2 ba 5e 39 b7 6c cf 6c e9 fd 50 f6 b2 ab 7d d0 55 d3 fc 50 da a1 1d 08 08 b3 7a 66 69 d9 ce 7c 75 46 c9 e1 93 1c 4e 77 36 02 5b 56 1d c2 62 c5 ab 2e 5c 84 32 d8 52 2f ec 42 ba 3e 0c f0 b3 1c 40 33 bc Data Ascii: j[:tc$edpF}h.)nP[\`nGW0Zn\`E0vbB[)_I6H74oh4_qI]Cah[Yx>,J1J]T.{U(+D9+h^9llP}UPzfi\|uFNw6[Vb.\2R/B>@3
2023-12-28 16:23:09 UTC	1025	IN	Data Raw: fb d1 b5 7a d3 f3 f3 f3 b7 57 70 c7 9d 0c f1 d0 62 a2 2b 26 74 c2 f2 4b a7 d2 d7 f3 5f de 37 1c f8 de 21 f6 86 dc 5a 0e bc c4 f2 dd fe f1 51 4b e1 36 f9 9b 43 12 6d 15 38 84 41 1f 13 73 80 c4 82 57 95 c4 20 31 95 6e 0f 42 2a ba d5 f0 7c 53 a4 8b ab 87 73 7c 2a bf 5e af 6f c2 f0 d1 35 20 0e 86 bc 28 d5 77 27 42 80 2b 02 73 d8 5d 81 4c 3a 08 70 4c 85 a5 7a 10 dd b7 64 e6 ac 54 03 86 96 33 23 42 ed 84 22 b0 b0 cb fe a8 78 b6 00 ac a0 59 a3 ea 06 98 40 c9 d0 31 63 11 01 80 5a cc 6b 0c d1 48 57 a3 ce dd e5 d2 6c 4e 4c e5 51 f2 0b f5 a6 0c 1f 87 1c e3 00 d9 1b ca 59 04 92 24 6e 1a 05 4a 9d aa 2a 8d b8 ae f5 c2 96 0b 93 96 a0 8f cd 1c 4e 92 03 55 d4 ac b4 a0 b2 a9 01 43 8d bb 19 09 50 d6 96 e7 df e5 5c a6 aa 9d d3 82 e0 24 23 75 0c 40 26 64 75 90 47 25 51 ba 28 Data Ascii: zWpb+&tK_7!ZQK6Cm8AsW 1nB\|Ss\|^o5 (w'B+s]L:pLzdT3#B"xY@1cZkHWlNLQY$nJ*NUCP\$#u@&duG%Q(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50681	104.16.114.74	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:09 UTC	2673	OUT	GET /images/backgrounds/press/web_v2.png HTTP/1.1 Host: static.mediafire.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ukey=6gg63gqvina3euirsnw2ppyezz5ol772; __cf_bm=6HMq3xdrhp8wqRjwmJtnWkyZ0efySH1XuPAJ9qKidAU-1703780518-1-AW6eocxywXGdasTOeebA9Dg/N7Id/22xAOtW0B+QUnETJ30DrSQXxZ7CV49fuoR1/tbzpfhgttOTcEZMJeGjfCk=; d5v3=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-51%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FChrome%22%2C%22mf_campaign%22%3A%22d5llbbm8wu92jg8%22%2C%22mf_term%22%3A%2292e8aa362e660d900147ed6010bd4bcb%22%7D; ezoadgid_484470=-1; ezoref_484470=; ezosuibasgeneris-1=efb9720e-ee65-4b8e-4f6c-bb493792b811; ezoab_484470=mod1-c; lp_484470=https://www.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe; ezovuuid_484470=6e63d025-9547-438e-7176-f2744d2045c7; _gid=GA1.2.1372328257.1703780523; cf_clearance=UAIv1rqECDnwC3USyVG0ic21oJ.JC.falm9hxJojWXU-1703780524-0-2-fc6fa8d.a93fff66.58c7a56d-0.2.1703780524; _cc_id=5e221b1ba2e4bf116c56aecdaf8716ee; panoramaId_expiry=1703866930753; panoramaId=5ea19513cc31b5172025c439bdd4a9fb927a0df352ad63637c44ab874eba6b06; panoramaIdType=panoDevice; __gads=ID=fb7f03735d5241db:T=1703780530:RT=1703780530:S=ALNI_MY-3AR0GVi4PeYAT7fJZ2fw-xV5cQ; __gpi=UID=00000daf1f27be5b:T=1703780530:RT=1703780530:S=ALNI_MauFlCrh77W3OyAGeQ41RvQlrbj4g; _hjFirstSeen=1; _hjIncludedInSessionSample_1232118=0; _hjSession_1232118=eyJpZCI6ImQzOTVkZDY3LWQ3OTktNGRkMy1iZWU5LTZlYzBlOTQ5OGZkNSIsImMiOjE3MDM3ODA1NDg1OTUsInMiOjAsInIiOjAsInNiIjowfQ==; _hjAbsoluteSessionInProgress=0; __mmapiwsid=018cb13c-12a7-7da0-989f-3fa4c042fec2:b1a4e10ababb13b4be6809178d2fc060610d4781; _gat_UA-86547571-1=1; _gat_UA-102514676-1=1; _hjSessionUser_1232118=eyJpZCI6IjBiYTdmM2Y2LTcwZjMtNTlmZS04ZThmLTBhZTNkY2RjM2E3YiIsImNyZWF0ZWQiOjE3MDM3ODA1NDg1OTMsImV4aXN0aW5nIjp0cnVlfQ==; _ga_2RW30JETPH=GS1.2.1703780557.1.0.1703780557.0.0.0; _ga_51LXLHFPYT=GS1.2.1703780557.1.0.1703780557.0.0.0; ezovuuidtime_484470=1703780568; active_template::484470=orig_site.1703780568; ezopvc_484470=2; FCNEC=%5B%5B%22AKsRol8tKntSy4ptMyPoR7jGTwnoSTxR53PiLp7AGJSqjUFFV1OlMo0F65v2THgrQm1IfAuXD3OFbU6CJGf82R3Tc54GmrqHOHgLlZ9csmyplwnDcBcfUZXlUd8oGVV_H8trOvb_7-IBtpxZZqODTOu7E2Gb9frH9Q%3D%3D%22%5D%5D; amp_28916b=Ys0rRhCjC-rhUpmFiib7ss...1hiojn6j7.1hiojp4vu.0.6.6; _ga_K68XP6D85D=GS1.1.1703780523.1.1.1703780588.59.0.0; _ga=GA1.1.1411026819.1703780523; _gat_gtag_UA_829541_1=1
2023-12-28 16:23:09 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:09 GMT Content-Type: image/png Content-Length: 21609 Connection: close Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT ETag: "62deda56-5469" Expires: Sat, 27 Jan 2024 13:54:19 GMT Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 182 Accept-Ranges: bytes Server: cloudflare CF-RAY: 83cb256b8f934757-DFW
2023-12-28 16:23:09 UTC	969	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e2 00 00 01 24 08 03 00 00 00 5d 64 a4 39 00 00 01 f8 50 4c 54 45 ff ff ff eb eb eb f3 f3 f3 31 37 3d f7 f8 f8 f0 ef f1 f9 f9 f9 fe fe fd e3 e3 e3 c2 c2 c2 d5 d6 d6 d9 d9 d9 e5 e4 e5 d2 d2 d2 f6 f5 f5 de de de fb fc fc c5 c5 c5 db db db ed ed ed 2c 32 37 ce ce cd b8 b8 b8 e7 e7 e8 a7 a7 a7 bd bd bd cb cb cd ca ca ca c7 c7 c8 e1 e1 e1 d8 d7 d9 e9 e9 e9 2f 95 d9 37 a2 e9 e0 df e1 28 2d 33 ac ac ac f1 f1 f2 1b 1f 25 15 19 1f 37 9d e1 94 c3 e5 89 bc e1 a9 ce eb af af af 4a 4d 51 78 79 7a 56 59 5e 65 65 66 3e 40 43 a0 c7 e5 84 85 86 6f 6f 70 f6 f2 f0 05 40 7a 2d 6a 98 b3 b3 b3 8c 8d 8e 34 a7 f7 9d 9f a0 b9 d9 f1 98 99 99 24 28 2d 2d 9a e4 5a 60 69 a2 a3 a4 92 93 93 e1 de dd fd fb f9 5b 9e ce 32 31 34 d8 Data Ascii: PNGIHDR$]d9PLTE17=,27/7(-3%7JMQxyzVY^eef>@Coop@z-j4$(--Z`i[214
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: 8c 2d 50 29 41 fe 6f 8d ff 21 43 a9 07 f0 9b 8d bb e2 30 13 8b 54 c6 26 07 d4 b8 be 73 52 05 0c 58 46 eb 87 97 52 67 44 85 de b8 a0 52 b3 44 0a a4 82 02 f3 b1 5d 88 49 45 26 a8 cc 01 50 c9 41 b4 41 42 d8 21 95 78 b8 5d ec 81 51 b5 62 bc 1d 51 0a 74 13 97 02 15 95 08 38 b2 48 05 a5 2f c0 be 79 cc 6d 48 85 2a b1 c3 da b0 e8 b1 3e ee 8f b3 55 aa ba b7 6a f2 cc ad 92 6b 62 46 92 ad 3a e9 c7 9d e9 28 9d 92 a4 5c d3 1a 08 1a 05 40 0b 06 b4 b7 c4 a4 a9 9e 7b 23 05 bf e6 d7 08 df 0f 54 d2 87 23 12 22 08 64 5f 1e 5d 46 fa 12 50 c3 37 87 e3 70 20 86 52 49 54 4d 30 b4 2f 42 78 85 33 c3 eb 1d 81 f3 d7 d1 9f 6a f0 6f ed 8b 7f b6 55 a3 e5 d9 cb b3 cd 09 b1 1a d6 40 30 e5 69 15 de 48 69 75 2d 35 ea a9 e9 dd 79 6d 6d 35 35 e9 a9 53 98 18 f5 26 26 34 e8 89 50 e9 56 83 f0 Data Ascii: -P)Ao!C0T&sRXFRgDRD]IE&PAAB!x]QbQt8H/ymH*>UjkbF:(\@{#T#"d_]FP7p RITM0/Bx3joU@0iHiu-5ymm55S&&4PV
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: f1 c3 c3 1f 82 ba 69 65 e5 f8 f8 b8 62 ea 54 b7 e9 0f b5 a2 8d c7 e4 0b fc 3e 39 7a e3 2e eb 87 f7 67 7f 7b 74 e1 e1 4f df b8 39 bd 73 71 f1 99 a5 ed 0f 9e 7b f8 71 e7 e6 e6 f6 7b 8b 4f 7d fc de 58 84 19 ce 62 c0 c5 c2 1c 53 94 74 2b 2a 95 90 23 09 d8 b2 1a 17 7c 4b ad a1 62 b9 5e b6 5d 9f 70 fd 72 2d b6 d5 a0 d9 2d 4c f4 df ec 4e 45 75 7e 26 66 d1 ed 43 45 9b 26 8f 9e bf 3e 86 cf 5f df df d0 2a b7 3c d5 bc dc 70 c4 50 6f de 1a 08 e6 f1 cb cb d6 d3 df 5c 75 b6 82 c0 af 85 b5 2d f7 ea 37 5b 6e a0 61 d7 f3 5f f3 bd f8 c7 9e a0 71 67 be 94 4d 5f 91 2f f0 1b f7 3f f7 c8 8d d7 ad 5b 37 7f 7a af 7a e1 ee cd ad 2f 1e d9 9d 5e bc 38 7d f1 a1 2b 1f be 94 9e 7e f9 ab 07 76 ef d9 dc 94 09 c7 70 2b 62 05 03 0e 77 b2 b1 a1 c8 87 0b e5 05 2f 2f c1 8c 37 e5 57 cb 2e 7e Data Ascii: iebT>9z.g{tO9sq{q{O}XbSt+#\|Kb^]pr--LNEu~&fCE&>_<pPo\u-7[na_qgM_/?[7zz/^8}+~vp+bw//7W.~
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: b8 65 43 e4 03 07 77 59 54 30 05 95 3a 5d 50 57 50 11 22 29 b5 86 a4 f4 25 5e fe 5d 52 03 b5 43 e6 24 51 9f f7 04 09 7d 51 a7 5b be 4f fd 2e e1 67 37 05 3c b2 59 ed bb fa 60 58 54 9b 20 fd bc 7e ff 45 55 48 41 46 38 60 20 08 a2 62 25 4d 47 ab 69 aa a6 a1 a7 eb 1d 07 f5 8c 2d 19 89 5a 06 4e b5 84 9c 61 8e 3c bd 5d 27 ef cc e7 9d e2 cd 41 f9 11 36 42 7e 98 85 71 90 fa 8c 1a 66 d4 7c 87 4a 4d c7 a7 30 5a f4 89 cf 93 92 1d c1 b1 2e b5 63 38 95 77 9d 3d ea 8b 7c 23 82 89 14 82 a0 fe 30 29 be d4 98 d4 48 dd 9c 52 b7 be b3 47 52 aa 6f b8 29 76 ff 9c f2 db f5 85 47 df 62 65 3b 49 11 3d 17 95 60 58 d4 7e f5 9d 7d 16 15 fd de 8b 6a a8 8f f3 57 2d 1a 41 d2 3a 8d ae a3 6e 82 30 10 04 75 2e 5b f6 f0 40 13 d1 4f 92 c5 8b ba 4c e9 44 10 06 e5 6f 09 cf 06 1d 9b 40 b7 27 Data Ascii: eCwYT0:]PWP")%^]RC$Q}Q[O.g7<Y`XT ~EUHAF8` b%MGi-ZNa<]'A6B~qf\|JM0Z.c8w=\|#0)HRGRo)vGbe;I=`X~}jW-A:n0u.[@OLDo@'
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: e5 02 6e ce f0 fa 2e 34 0f 40 6c ef fb 24 4a 7c 69 fd f6 8d e5 66 e3 e8 54 f9 ed b9 d6 e3 f9 4f 37 d7 32 b8 8b 9f a8 c1 d2 fa bd f9 f2 3b a4 36 62 4f d7 4e 3d aa c1 fa ee 76 52 c1 ed 3d 93 85 21 b6 3a c6 a4 48 c0 63 9a b6 01 68 79 0d 75 83 8f c0 85 28 a2 90 d4 24 54 d2 a0 24 ce 55 6c 0e e6 3c 2a 53 7b e7 d4 5f 39 e4 f2 69 34 c2 7a 16 ed d0 b6 a9 64 4e 93 42 08 2e 71 9b 99 ae d2 e1 e5 52 68 69 75 71 07 80 ee 54 00 0f 10 4a 15 3b 3f 1a ba 69 1c ac 66 e0 64 05 47 2d 60 52 70 a3 b7 ba 01 2a b7 14 98 b8 a4 28 a7 cd 90 bf 74 e6 e2 11 33 0e 51 1c de 38 94 d3 7e 00 97 63 19 26 26 01 22 4a 29 82 49 da a9 65 18 62 8b c3 12 18 3d b8 90 1b 0d f8 00 24 a7 8a 3a 91 2d 9b 0f 2a 75 54 d1 e0 24 1e 42 ec 70 2b dd 43 a5 e9 22 47 52 31 de 09 1c 96 cc 72 5e 36 4b 1e 76 30 b3 Data Ascii: n.4@l$J\|ifTO72;6bON=vR=!:Hchyu($T$Ul<S{_9i4zdNB.qRhiuqTJ;?ifdG-`Rp(t3Q8~c&&"J)Ieb=$:-*uT$Bp+C"GR1r^6Kv0
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: d5 71 1f 15 e7 fb 46 7a 15 31 58 5b 2a ce 18 78 15 28 3e b3 b0 b8 58 39 d8 51 70 bc 5d 2e 9e cb 49 c2 57 82 94 cb 31 6f 16 a1 85 e2 1b e0 e8 68 07 ac ce 7f dc 0f 8a 3f 7b 3a af 3c 8e 8a 2b 4f 0c 7f 71 45 8a 33 44 75 68 a8 e2 23 77 ce b8 6d 6a 2a ae 53 84 d8 ee aa 40 f1 19 e7 22 70 5c d9 41 c5 9b b4 57 3c 16 8b 4e a6 f3 9f e7 d3 93 d1 9c c8 a8 80 f8 88 03 4c ec 54 f1 58 5b c5 47 df b0 e2 02 51 1d af 14 37 9d fa 90 37 6d 15 57 45 14 af 6d a3 e3 db 95 a3 53 8e 0f b4 50 5c ca 01 52 2e 9a df df df da da 82 e2 e4 cb 9c 00 c1 55 4a 24 12 ba 22 6e 75 b0 85 9e 26 72 a7 10 d7 e9 b8 57 fd d0 4a 00 d0 2f c2 bd 1b fb 3b 47 8e e2 af fb 57 2e 77 a8 38 aa 0b 34 c7 f3 4f 9e d6 6b e1 14 50 2e ab 56 71 4e 43 9a 5c 95 e2 cd d0 8d 35 b9 50 bf e2 3b 10 bf c1 f2 3f 2a 87 a7 1c Data Ascii: qFz1X[x(>X9Qp].IW1oh?{:<+OqE3Duh#wmjS@"p\AW<NLTX[GQ77mWEmSP\R.UJ$"nu&rWJ/;GW.w84OkP.VqNC\5P;?*
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: 2f 07 78 ab 0c 9c 55 5c 70 87 84 18 a4 e3 69 74 fc 64 99 c8 9c c0 a2 4a 4e cc 06 fc 85 92 3f 50 f5 07 4a 01 7f 12 43 fa 06 54 d6 bf 80 94 3b c9 65 30 85 81 64 a5 7a 1f 8e 45 f7 8c d0 9f 29 f9 01 48 c5 23 45 30 7e e5 19 34 22 1b cf 02 58 56 fd d0 c1 75 aa 38 52 4e a5 08 49 a5 64 83 21 5a ff e4 5e 3e 21 2e b7 65 29 ba 1c 4d 59 42 e9 e8 26 e4 21 8e 4d f7 19 c5 c3 b2 e2 6b 90 89 a7 f2 4b 90 93 28 28 9e 76 13 b2 49 15 0f 5f 40 71 e1 df 28 3e 35 e1 19 b7 cd 7a 41 71 2f 35 d7 03 96 f8 66 49 70 c1 37 a8 9b 79 df 48 88 f7 f1 7d 82 3c f2 f1 04 61 39 22 d3 37 64 98 d2 eb ad cc 60 df 94 59 6f 20 76 88 f6 fd 76 72 a9 4b 99 e8 21 47 d1 59 c7 94 73 71 4c 54 66 df f3 02 d3 c1 7b af a2 38 86 6d 96 25 f6 87 dd f6 69 6e 6a 8e 27 d0 52 89 e2 b5 5a e5 f0 10 02 38 c6 ee 5f 7f Data Ascii: /xU\pitdJN?PJCT;e0dzE)H#E0~4"XVu8RNId!Z^>!.e)MYB&!MkK((vI_@q(>5zAq/5fIp7yH}<a9"7d`Yo vvrK!GYsqLTf{8m%inj'RZ8_
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: b5 00 46 2f 38 41 71 9f ef db 5d d4 1b ae f4 06 dd 67 0f 37 95 12 96 d6 27 8c f3 7c a3 72 ba 9b 69 4f 8c e9 08 8c e2 9d 2b 4e 4f a6 6d 31 ea 6a f5 79 cb ff 4f c5 4d 4d b7 4f 9d 4c ab e1 14 50 8d e2 5d 70 f9 c2 f1 85 dd 6f 3d df ee ee 3a 51 f1 c5 89 81 99 86 e2 ea 79 79 f2 3f 45 f1 b2 a3 13 52 e5 a7 fd f4 25 11 e5 4b 2a 9e 4a 55 af 46 71 b3 0a cf 17 e7 a8 e2 7d 72 2e 5e a7 79 36 2d 55 5c 11 9d a0 12 c5 bb e0 bd 65 9d bb 80 73 7c 02 a0 86 ab 51 f1 36 29 3a d7 fb a4 1c 3e c7 2a de 57 71 03 05 42 9b d8 c6 42 1e 4e 25 e9 0b db 9e 94 69 ab 3e ad 39 77 fe 89 83 ce 6c 8c 35 77 fa a9 1a 67 ae 82 1e 23 51 1d 0c 55 7c 50 6f 6a f1 aa 9f 41 d2 02 83 5a 14 9f 71 8e 2f c0 55 53 16 d0 ef c5 c5 f1 2e 6a b8 da 2e 32 d1 96 18 57 0d 74 c8 0f 71 c8 8e e2 43 97 9e 57 80 e8 ff Data Ascii: F/8Aq]g7'\|riO+NOm1jyOMMOLP]po=:Qyy?ER%KJUFq}r.^y6-U\es\|Q6):>WqBBN%i>9wl5wg#QU\|PojAZq/US.j.2WtqCW
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: 91 ff 2c a8 8b 9b 7e e2 04 22 91 d0 26 9e 2c 45 89 47 a2 c4 23 eb 80 83 77 82 5b f3 c4 93 61 49 9c e3 02 d1 c3 03 45 89 47 89 bf bb c4 c3 d7 78 94 78 94 78 c8 13 d7 e0 9d d0 a2 c4 83 e1 a1 c9 6a 51 e2 21 4d 3c e9 5f fc b2 d7 31 71 ee ab af 5f bc 78 f1 35 5a 56 a7 a6 bd f7 89 b3 1c bc 0b 2c b7 3e 89 b7 5a c9 98 d3 4a b6 9c 18 bd ac 63 e2 e8 c5 d5 ee 61 2f d0 ed 59 22 f7 76 e2 62 dd 86 de 26 a4 ea 00 a3 1e 40 dd 8a 7b 4e 0f ae 71 04 7c 6c 98 13 97 d1 d5 45 56 0a 2c c8 52 21 0e c5 78 b1 a0 22 9b d5 0b 88 e8 05 3e b4 89 5f 34 2f 5f 5f ec 3b 8d 8b 7d fa d9 4a 2e 4b 9c 63 6f d1 d8 27 a2 c1 72 2f 11 f8 d0 4b 98 51 ac 5c c2 2a c2 15 96 85 b9 de c4 81 49 0d b6 27 12 4c 26 c0 4f f6 95 c9 56 17 ae 49 02 f8 d8 f0 6d d2 bd 69 51 48 01 64 44 23 c5 9b 59 56 90 14 81 cd Data Ascii: ,~"&,EG#w[aIEGxxxjQ!M<_1q_x5ZV,>ZJca/Y"vb&@{Nq\|lEV,R!x">_4/__;}J.Kco'r/KQ\*I'L&OVImiQHdD#YV
2023-12-28 16:23:09 UTC	1369	IN	Data Raw: e0 1c 22 c1 f0 d4 89 ff 7a 2b f1 4f fc 1b b1 55 12 6f 9f 55 0f 4e 5f bd 3a 3d 38 3b ab 02 a5 ba 00 60 a7 bc c4 a8 3b 6c 58 ae e2 f5 3d a1 61 91 5c dd 85 c7 f7 cd f9 95 1f 0e e7 5e 42 e4 81 c2 95 f8 eb bf 4f 54 3e 1a af b2 b8 b9 53 ad bc ba 38 a0 95 57 ab 3b 40 f1 1e 00 74 32 f5 54 d9 50 86 f4 46 b3 d3 ef 64 c0 ec 77 9f 22 71 74 7c ee 3b b8 16 cd 59 1e 2a 4c 89 c7 2e 5f 7f 71 db 6f 1f 5c ae 92 f8 1e 4d fc e0 15 fd 9c 27 ce b9 75 4b 69 66 bc 5a 6f d3 ea c3 28 51 af f1 1b 2e b8 f5 be 07 8f ef b0 7d c5 5f 52 b8 52 3d 82 c8 83 84 2c f1 d8 87 bf dd 4e 7c ba 52 e2 87 d5 0a 0d fc e0 d5 45 b5 ba 07 3e 6e d8 cd ca fd 8c 21 e1 a2 04 0a e8 5d 0b 89 80 fa 3d 11 1e 83 f1 42 96 e5 17 c6 7c 9e 42 e3 de db b9 5a 18 de a3 5f fd 2b 78 ef 68 45 1b 82 e2 a9 13 1f 5f 7e 74 2b Data Ascii: "z+OUoUN_:=8;`;lX=a\^BOT>S8W;@t2TPFdw"qt\|;Y*L._qo\M'uKifZo(Q.}_RR=,N\|RE>n!]=B\|BZ_+xhE_~t+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50683	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:09 UTC	1295	OUT	GET /assets/index-ae347421.css HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=LgUqppGNPcKj8mWSxZX1T4Pqtz69caRlQNvT266wwjDJ5n3aIRkvUmbtMTBUD/WcYodew7S/kXNTrToS83Q8Xo8mBDiJHKnqSf1ynIkuL+1x73j+UomnTlN0IYy1; AWSALBCORS=LgUqppGNPcKj8mWSxZX1T4Pqtz69caRlQNvT266wwjDJ5n3aIRkvUmbtMTBUD/WcYodew7S/kXNTrToS83Q8Xo8mBDiJHKnqSf1ynIkuL+1x73j+UomnTlN0IYy1
2023-12-28 16:23:10 UTC	768	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:09 GMT Content-Type: text/css Content-Length: 208386 Connection: close Set-Cookie: AWSALB=1cZjBzpSU6bh8i7mkw8fZrksi6F2NfLiM29f5aAADNIRxtZ0A9WVny6gf/Q+Kwism8sjPKIaEH58Gym4Tw5L3LAXEhblDOdST+0SpxQFnnT9lFfX8WXzGZ/+Ycb+; Expires=Thu, 04 Jan 2024 16:23:09 GMT; Path=/ Set-Cookie: AWSALBCORS=1cZjBzpSU6bh8i7mkw8fZrksi6F2NfLiM29f5aAADNIRxtZ0A9WVny6gf/Q+Kwism8sjPKIaEH58Gym4Tw5L3LAXEhblDOdST+0SpxQFnnT9lFfX8WXzGZ/+Ycb+; Expires=Thu, 04 Jan 2024 16:23:09 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT Vary: Accept-Encoding ETag: "658d889d-32e02" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:10 UTC	15616	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 69 6d 70 6f 72 74 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 49 6e 74 65 72 3a 77 67 68 74 40 32 30 30 3b 34 30 30 3b 36 30 30 3b 38 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3b 2f 2a 21 0a 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 50 72 6f 20 36 2e 31 2e 32 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 28 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 29 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 Data Ascii: @charset "UTF-8";@import"https://fonts.googleapis.com/css2?family=Inter:wght@200;400;600;800&display=swap";/! Font Awesome Pro 6.1.2 by @fontawesome - https://fontawesome.com* License - https://fontawesome.com/license (Commercial License)* Copyright
2023-12-28 16:23:10 UTC	406	IN	Data Raw: 7d 2e 66 61 2d 61 6e 67 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9d b9 22 7d 2e 66 61 2d 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 82 8c 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 39 30 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 82 8d 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 87 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 84 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 85 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 86 22 7d 2e 66 61 2d 61 6e 67 6c 65 73 2d 64 6f 77 6e Data Ascii: }.fa-angel:before{content:""}.fa-angle:before{content:""}.fa-angle-90:before{content:""}.fa-angle-down:before{content:""}.fa-angle-left:before{content:""}.fa-angle-right:before{content:""}.fa-angle-up:before{content:""}.fa-angles-down
2023-12-28 16:23:10 UTC	16384	IN	Data Raw: 67 6c 65 73 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 81 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 81 22 7d 2e 66 61 2d 61 6e 67 6c 65 73 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 82 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 82 22 7d 2e 66 61 2d 61 6e 6b 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 99 84 22 7d 2e 66 61 2d 61 70 61 72 74 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 91 a8 22 7d 2e 66 61 2d 61 70 65 72 74 75 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 8b 9f 22 7d 2e 66 61 2d Data Ascii: gles-right:before{content:""}.fa-angle-double-right:before{content:""}.fa-angles-up:before{content:""}.fa-angle-double-up:before{content:""}.fa-ankh:before{content:""}.fa-apartment:before{content:""}.fa-aperture:before{content:""}.fa-
2023-12-28 16:23:10 UTC	16384	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 92 9c 22 7d 2e 66 61 2d 62 6f 78 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 92 9c 22 7d 2e 66 61 2d 62 6f 78 2d 74 61 70 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 92 9a 22 7d 2e 66 61 2d 62 6f 78 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 92 9a 22 7d 2e 66 61 2d 62 6f 78 2d 74 69 73 73 75 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 81 9b 22 7d 2e 66 61 2d 62 6f 78 65 73 2d 70 61 63 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 93 87 22 7d 2e 66 61 2d 62 6f 78 65 73 2d 73 74 61 63 6b 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 a8 22 7d 2e 66 61 2d 62 6f 78 65 73 3a 62 65 66 6f 72 65 7b Data Ascii: :before{content:""}.fa-box-full:before{content:""}.fa-box-taped:before{content:""}.fa-box-alt:before{content:""}.fa-box-tissue:before{content:""}.fa-boxes-packing:before{content:""}.fa-boxes-stacked:before{content:""}.fa-boxes:before{
2023-12-28 16:23:10 UTC	16384	IN	Data Raw: 74 3a 22 ee 84 91 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d 69 6e 66 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 81 9a 22 7d 2e 66 61 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 81 9a 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d 6a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 92 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 93 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 94 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8d 99 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 Data Ascii: t:""}.fa-circle-info:before{content:""}.fa-info-circle:before{content:""}.fa-circle-j:before{content:""}.fa-circle-k:before{content:""}.fa-circle-l:before{content:""}.fa-circle-left:before{content:""}.fa-arrow-alt-circle-left:before{c
2023-12-28 16:23:10 UTC	16073	IN	Data Raw: 22 ef 9e 95 22 7d 2e 66 61 2d 65 61 72 74 68 2d 61 66 72 69 63 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 bc 22 7d 2e 66 61 2d 67 6c 6f 62 65 2d 61 66 72 69 63 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 bc 22 7d 2e 66 61 2d 65 61 72 74 68 2d 61 6d 65 72 69 63 61 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 bd 22 7d 2e 66 61 2d 65 61 72 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 bd 22 7d 2e 66 61 2d 65 61 72 74 68 2d 61 6d 65 72 69 63 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 bd 22 7d 2e 66 61 2d 67 6c 6f 62 65 2d 61 6d 65 72 69 63 61 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 bd 22 7d 2e 66 61 2d 65 61 72 74 68 2d 61 73 69 61 3a 62 65 66 6f 72 65 7b 63 Data Ascii: ""}.fa-earth-africa:before{content:""}.fa-globe-africa:before{content:""}.fa-earth-americas:before{content:""}.fa-earth:before{content:""}.fa-earth-america:before{content:""}.fa-globe-americas:before{content:""}.fa-earth-asia:before{c
2023-12-28 16:23:10 UTC	311	IN	Data Raw: 2e 66 61 2d 67 61 6d 65 70 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 9b 22 7d 2e 66 61 2d 67 61 6d 65 70 61 64 2d 6d 6f 64 65 72 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 96 a2 22 7d 2e 66 61 2d 67 61 6d 65 70 61 64 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 96 a2 22 7d 2e 66 61 2d 67 61 72 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 89 22 7d 2e 66 61 2d 67 61 72 61 67 65 2d 63 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 8a 22 7d 2e 66 61 2d 67 61 72 61 67 65 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 8b 22 7d 2e 66 61 2d 67 61 72 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 90 8e 22 7d 2e 66 61 2d 67 61 73 2d Data Ascii: .fa-gamepad:before{content:""}.fa-gamepad-modern:before{content:""}.fa-gamepad-alt:before{content:""}.fa-garage:before{content:""}.fa-garage-car:before{content:""}.fa-garage-open:before{content:""}.fa-garlic:before{content:""}.fa-gas-
2023-12-28 16:23:10 UTC	16384	IN	Data Raw: 65 6e 74 3a 22 ef 97 b4 22 7d 2e 66 61 2d 67 61 75 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 98 a4 22 7d 2e 66 61 2d 64 61 73 68 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 98 a4 22 7d 2e 66 61 2d 67 61 75 67 65 2d 6d 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 98 a4 22 7d 2e 66 61 2d 74 61 63 68 6f 6d 65 74 65 72 2d 61 6c 74 2d 61 76 65 72 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 98 a4 22 7d 2e 66 61 2d 67 61 75 67 65 2d 63 69 72 63 6c 65 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 92 96 22 7d 2e 66 61 2d 67 61 75 67 65 2d 63 69 72 63 6c 65 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 92 97 22 7d 2e 66 61 2d 67 61 75 67 65 Data Ascii: ent:""}.fa-gauge:before{content:""}.fa-dashboard:before{content:""}.fa-gauge-med:before{content:""}.fa-tachometer-alt-average:before{content:""}.fa-gauge-circle-bolt:before{content:""}.fa-gauge-circle-minus:before{content:""}.fa-gauge
2023-12-28 16:23:10 UTC	16073	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 94 22 7d 2e 66 61 2d 6c 61 6d 70 2d 66 6c 6f 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 95 22 7d 2e 66 61 2d 6c 61 6d 70 2d 73 74 72 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 87 85 22 7d 2e 66 61 2d 6c 61 6e 64 2d 6d 69 6e 65 2d 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 94 9b 22 7d 2e 66 61 2d 6c 61 6e 64 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 99 af 22 7d 2e 66 61 2d 6c 61 6e 64 6d 61 72 6b 2d 64 6f 6d 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9d 92 22 7d 2e 66 61 2d 6c 61 6e 64 6d 61 72 6b 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9d 92 22 7d 2e 66 61 2d 6c 61 6e 64 6d 61 72 6b Data Ascii: before{content:""}.fa-lamp-floor:before{content:""}.fa-lamp-street:before{content:""}.fa-land-mine-on:before{content:""}.fa-landmark:before{content:""}.fa-landmark-dome:before{content:""}.fa-landmark-alt:before{content:""}.fa-landmark
2023-12-28 16:23:10 UTC	16384	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 22 ef 9e b8 22 7d 2e 66 61 2d 6f 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9c 80 22 7d 2e 66 61 2d 6f 75 74 64 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 80 bb 22 7d 2e 66 61 2d 64 65 64 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 80 bb 22 7d 2e 66 61 2d 6f 75 74 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 9c 22 7d 2e 66 61 2d 6f 76 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 80 9d 22 7d 2e 66 61 2d 6f 76 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a1 b6 22 7d 2e 66 61 2d 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 50 22 7d 2e 66 61 2d 70 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: content:""}.fa-otter:before{content:""}.fa-outdent:before{content:""}.fa-dedent:before{content:""}.fa-outlet:before{content:""}.fa-oven:before{content:""}.fa-overline:before{content:""}.fa-p:before{content:"P"}.fa-page:before{content:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50633	142.251.116.104	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:09 UTC	1004	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-829541-1&cid=1411026819.1703780523&jid=347425432&_u=SCCAAUACQAAAACAAI~&z=623255566 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mediafire.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:23:10 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:23:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:23:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50689	142.251.116.99	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:10 UTC	767	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-829541-1&cid=1411026819.1703780523&jid=347425432&_u=SCCAAUACQAAAACAAI~&z=623255566 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:23:10 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:23:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:23:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50690	3.210.52.109	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:10 UTC	594	OUT	GET /offerpitch HTTP/1.1 Host: api.wavebrowser.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:11 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:10 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALBTG=5Jetv5AV4CUIFZhy5itDfYRjGBWgC/SAMcx1PrXTvy5ILS9KjYlV0urAk053motlcSOoUOr64WF6gqdSsX3aBoYNMf7zfD9cFiViyV5uyoqNJl/lqyQ8o2OK/IOindSFMwz4avgz0K5+wGlCvCEax45KIJRA46mlM6MSN/18GTq1uJwQjhU=; Expires=Thu, 04 Jan 2024 16:23:10 GMT; Path=/ Set-Cookie: AWSALBTGCORS=5Jetv5AV4CUIFZhy5itDfYRjGBWgC/SAMcx1PrXTvy5ILS9KjYlV0urAk053motlcSOoUOr64WF6gqdSsX3aBoYNMf7zfD9cFiViyV5uyoqNJl/lqyQ8o2OK/IOindSFMwz4avgz0K5+wGlCvCEax45KIJRA46mlM6MSN/18GTq1uJwQjhU=; Expires=Thu, 04 Jan 2024 16:23:10 GMT; Path=/; SameSite=None; Secure Server: nginx Access-Control-Allow-Origin: * X-Robots-Tag: noindex, nofollow Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
2023-12-28 16:23:11 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2023-12-28 16:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50691	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:10 UTC	1794	OUT	GET /home/pixels?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%2520converter&crt=677032990697&plc=www.mediafire.com&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=1cZjBzpSU6bh8i7mkw8fZrksi6F2NfLiM29f5aAADNIRxtZ0A9WVny6gf/Q+Kwism8sjPKIaEH58Gym4Tw5L3LAXEhblDOdST+0SpxQFnnT9lFfX8WXzGZ/+Ycb+; AWSALBCORS=1cZjBzpSU6bh8i7mkw8fZrksi6F2NfLiM29f5aAADNIRxtZ0A9WVny6gf/Q+Kwism8sjPKIaEH58Gym4Tw5L3LAXEhblDOdST+0SpxQFnnT9lFfX8WXzGZ/+Ycb+; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22anonymous%22%2C%22%24sesid%22%3A%5B1703780589701%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%7D
2023-12-28 16:23:11 UTC	1519	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:11 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Server: nginx Access-Control-Allow-Credentials: * Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Set-Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; expires=Tue, 09 Jan 2024 16:23:10 GMT; domain=.convertwithwave.com; path=/; secure; samesite=none Set-Cookie: startDownload=false; path=/ Set-Cookie: cacheUrl=; path=/ Set-Cookie: stubStartedUrl=; path=/ Set-Cookie: pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; domain=.convertwithwave.com; path=/; secure; samesite=lax Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version X-Robots-Tag: noindex, nofollow
2023-12-28 16:23:11 UTC	3885	IN	Data Raw: 66 32 36 0d 0a 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 67 65 74 49 6e 73 74 61 6c 6c 46 69 6e 69 73 68 65 64 50 69 78 65 6c 73 4c 6f 61 64 65 64 50 72 6f 6d 69 73 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 20 7d 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 67 65 74 49 6e 73 74 61 6c 6c 53 74 61 72 74 50 69 78 65 6c 73 4c 6f 61 64 65 64 50 72 6f 6d 69 73 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 20 7d 3b 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 28 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d Data Ascii: f26 var getInstallFinishedPixelsLoadedPromise = function () { return Promise.resolve(); }; var getInstallStartPixelsLoadedPromise = function () { return Promise.resolve(); }; (() => { let script = docum
2023-12-28 16:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50693	143.204.165.57	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:10 UTC	657	OUT	POST /e/?ip=1&_=1703780589703&ver=1.77.2 HTTP/1.1 Host: app.posthog.com Connection: keep-alive Content-Length: 1631 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:10 UTC	1631	OUT	Data Raw: 64 61 74 61 3d 65 79 4a 31 64 57 6c 6b 49 6a 6f 69 4d 44 45 34 59 32 49 78 4d 32 4d 74 59 54 41 34 4e 43 30 33 59 6a 42 69 4c 54 6b 34 4e 6d 51 74 4d 44 68 6b 5a 6d 51 33 59 6a 42 69 4f 54 46 6c 49 69 77 69 5a 58 5a 6c 62 6e 51 69 4f 69 49 6b 63 47 46 6e 5a 58 5a 70 5a 58 63 69 4c 43 4a 77 63 6d 39 77 5a 58 4a 30 61 57 56 7a 49 6a 70 37 49 69 52 76 63 79 49 36 49 6c 64 70 62 6d 52 76 64 33 4d 69 4c 43 49 6b 62 33 4e 66 64 6d 56 79 63 32 6c 76 62 69 49 36 49 6a 45 77 4c 6a 41 69 4c 43 49 6b 59 6e 4a 76 64 33 4e 6c 63 69 49 36 49 6b 4e 6f 63 6d 39 74 5a 53 49 73 49 69 52 6b 5a 58 5a 70 59 32 56 66 64 48 6c 77 5a 53 49 36 49 6b 52 6c 63 32 74 30 62 33 41 69 4c 43 49 6b 59 33 56 79 63 6d 56 75 64 46 39 31 63 6d 77 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 Data Ascii: data=eyJ1dWlkIjoiMDE4Y2IxM2MtYTA4NC03YjBiLTk4NmQtMDhkZmQ3YjBiOTFlIiwiZXZlbnQiOiIkcGFnZXZpZXciLCJwcm9wZXJ0aWVzIjp7IiRvcyI6IldpbmRvd3MiLCIkb3NfdmVyc2lvbiI6IjEwLjAiLCIkYnJvd3NlciI6IkNocm9tZSIsIiRkZXZpY2VfdHlwZSI6IkRlc2t0b3AiLCIkY3VycmVudF91cmwiOiJodHRwczovL2
2023-12-28 16:23:11 UTC	603	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Thu, 28 Dec 2023 16:23:10 GMT Access-Control-Allow-Origin: https://convertwithwave.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type X-Content-Type-Options: nosniff Referrer-Policy: same-origin X-Cache: Miss from cloudfront Via: 1.1 c9dd4c62d0b78547effb08ee91c8fd16.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW3-C1 X-Amz-Cf-Id: gTgAWJf623bbPLv7pGY_VQA_vtmv5TmLS4CxkME3DOglZ0jqH6oIBQ==
2023-12-28 16:23:11 UTC	18	IN	Data Raw: 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 20 31 7d 0d 0a Data Ascii: d{"status": 1}
2023-12-28 16:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50692	143.204.165.57	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:10 UTC	665	OUT	POST /decide/?v=3&ip=1&_=1703780589704&ver=1.77.2 HTTP/1.1 Host: app.posthog.com Connection: keep-alive Content-Length: 177 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:10 UTC	177	OUT	Data Raw: 64 61 74 61 3d 65 79 4a 30 62 32 74 6c 62 69 49 36 49 6e 42 6f 59 31 39 73 64 6b 70 43 62 6d 49 35 4d 30 78 34 59 6d 46 46 4e 44 49 30 62 48 6c 53 61 46 56 4b 54 47 5a 4f 55 45 4a 74 56 57 56 79 55 6e 42 56 64 6e 56 77 5a 6b 35 72 4e 32 5a 36 49 69 77 69 5a 47 6c 7a 64 47 6c 75 59 33 52 66 61 57 51 69 4f 69 49 77 4d 54 68 6a 59 6a 45 7a 59 79 31 68 4d 44 67 78 4c 54 64 6b 4d 47 59 74 4f 47 55 32 4f 53 30 34 5a 44 45 7a 4d 54 68 6a 4f 57 51 7a 5a 6a 63 69 4c 43 4a 6e 63 6d 39 31 63 48 4d 69 4f 6e 74 39 66 51 25 33 44 25 33 44 Data Ascii: data=eyJ0b2tlbiI6InBoY19sdkpCbmI5M0x4YmFFNDI0bHlSaFVKTGZOUEJtVWVyUnBVdnVwZk5rN2Z6IiwiZGlzdGluY3RfaWQiOiIwMThjYjEzYy1hMDgxLTdkMGYtOGU2OS04ZDEzMThjOWQzZjciLCJncm91cHMiOnt9fQ%3D%3D
2023-12-28 16:23:11 UTC	603	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Thu, 28 Dec 2023 16:23:10 GMT Access-Control-Allow-Origin: https://convertwithwave.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type X-Content-Type-Options: nosniff Referrer-Policy: same-origin X-Cache: Miss from cloudfront Via: 1.1 40c3aaa12a54f0b84c0f7eef3c4ad110.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW3-C1 X-Amz-Cf-Id: m05Hvx0slbW01ZIYIDvQa96PH0dj3V2D_8zI36deNp0_hQ0AHkOW6A==
2023-12-28 16:23:11 UTC	451	IN	Data Raw: 31 62 63 0d 0a 7b 22 63 6f 6e 66 69 67 22 3a 20 7b 22 65 6e 61 62 6c 65 5f 63 6f 6c 6c 65 63 74 5f 65 76 65 72 79 74 68 69 6e 67 22 3a 20 74 72 75 65 7d 2c 20 22 74 6f 6f 6c 62 61 72 50 61 72 61 6d 73 22 3a 20 7b 7d 2c 20 22 69 73 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 20 66 61 6c 73 65 2c 20 22 73 75 70 70 6f 72 74 65 64 43 6f 6d 70 72 65 73 73 69 6f 6e 22 3a 20 5b 22 67 7a 69 70 22 2c 20 22 67 7a 69 70 2d 6a 73 22 5d 2c 20 22 66 65 61 74 75 72 65 46 6c 61 67 73 22 3a 20 7b 7d 2c 20 22 73 65 73 73 69 6f 6e 52 65 63 6f 72 64 69 6e 67 22 3a 20 66 61 6c 73 65 2c 20 22 65 72 72 6f 72 73 57 68 69 6c 65 43 6f 6d 70 75 74 69 6e 67 46 6c 61 67 73 22 3a 20 66 61 6c 73 65 2c 20 22 66 65 61 74 75 72 65 46 6c 61 67 50 61 79 6c 6f 61 64 73 22 3a 20 7b 7d 2c 20 Data Ascii: 1bc{"config": {"enable_collect_everything": true}, "toolbarParams": {}, "isAuthenticated": false, "supportedCompression": ["gzip", "gzip-js"], "featureFlags": {}, "sessionRecording": false, "errorsWhileComputingFlags": false, "featureFlagPayloads": {},
2023-12-28 16:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50695	143.204.165.47	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:11 UTC	373	OUT	GET /e/?ip=1&_=1703780589703&ver=1.77.2 HTTP/1.1 Host: app.posthog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:11 UTC	404	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Thu, 28 Dec 2023 16:23:11 GMT X-Content-Type-Options: nosniff Referrer-Policy: same-origin X-Cache: Error from cloudfront Via: 1.1 e67238cd96dfce710846014b9928af62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW3-C1 X-Amz-Cf-Id: kH3Sal4mvkgTffIOYfQqe8qdKttDmEsqhqUGbp4bI8UkIUY4qxiENw==
2023-12-28 16:23:11 UTC	180	IN	Data Raw: 61 65 0d 0a 7b 22 74 79 70 65 22 3a 20 22 76 61 6c 69 64 61 74 69 6f 6e 5f 65 72 72 6f 72 22 2c 20 22 63 6f 64 65 22 3a 20 22 6e 6f 5f 64 61 74 61 22 2c 20 22 64 65 74 61 69 6c 22 3a 20 22 4e 6f 20 64 61 74 61 20 66 6f 75 6e 64 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 73 65 20 61 20 50 4f 53 54 20 72 65 71 75 65 73 74 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 74 68 65 20 70 61 79 6c 6f 61 64 20 69 6e 20 74 68 65 20 62 6f 64 79 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 2e 22 2c 20 22 61 74 74 72 22 3a 20 6e 75 6c 6c 7d 0d 0a Data Ascii: ae{"type": "validation_error", "code": "no_data", "detail": "No data found. Make sure to use a POST request when sending the payload in the body of the request.", "attr": null}
2023-12-28 16:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50696	143.204.165.47	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:11 UTC	382	OUT	GET /decide/?v=3&ip=1&_=1703780589704&ver=1.77.2 HTTP/1.1 Host: app.posthog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:11 UTC	394	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Thu, 28 Dec 2023 16:23:11 GMT X-Content-Type-Options: nosniff Referrer-Policy: same-origin X-Cache: Miss from cloudfront Via: 1.1 fb8e6daa39bc4124e46750734008822c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW3-C1 X-Amz-Cf-Id: 3qMuMzj9tXoDSh02RfTRXIdN32OS9lHXkEK-bgOaBEw1ZvyL1OXpDg==
2023-12-28 16:23:11 UTC	192	IN	Data Raw: 62 61 0d 0a 7b 22 63 6f 6e 66 69 67 22 3a 20 7b 22 65 6e 61 62 6c 65 5f 63 6f 6c 6c 65 63 74 5f 65 76 65 72 79 74 68 69 6e 67 22 3a 20 74 72 75 65 7d 2c 20 22 74 6f 6f 6c 62 61 72 50 61 72 61 6d 73 22 3a 20 7b 7d 2c 20 22 69 73 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 20 66 61 6c 73 65 2c 20 22 73 75 70 70 6f 72 74 65 64 43 6f 6d 70 72 65 73 73 69 6f 6e 22 3a 20 5b 22 67 7a 69 70 22 2c 20 22 67 7a 69 70 2d 6a 73 22 5d 2c 20 22 66 65 61 74 75 72 65 46 6c 61 67 73 22 3a 20 5b 5d 2c 20 22 73 65 73 73 69 6f 6e 52 65 63 6f 72 64 69 6e 67 22 3a 20 66 61 6c 73 65 7d 0d 0a Data Ascii: ba{"config": {"enable_collect_everything": true}, "toolbarParams": {}, "isAuthenticated": false, "supportedCompression": ["gzip", "gzip-js"], "featureFlags": [], "sessionRecording": false}
2023-12-28 16:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50697	3.210.52.109	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:11 UTC	352	OUT	GET /offerpitch HTTP/1.1 Host: api.wavebrowser.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:11 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:11 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALBTG=O2PBKy28OC4BOoF81XdF3gH0t3kYQf7M2IlAZHbEQSHp1PPPOYDKralyXMpgmYAKynjzZyVR0Iub1RBCox77DxXCPDEg8ACOW81belJYFB/g0TYGCef0eHFCdexTpx7eWKtM/dHkc5I8QvZ8osygRIAAbk2C5vSKbsM0OQYmLK5kJFRg7ms=; Expires=Thu, 04 Jan 2024 16:23:11 GMT; Path=/ Set-Cookie: AWSALBTGCORS=O2PBKy28OC4BOoF81XdF3gH0t3kYQf7M2IlAZHbEQSHp1PPPOYDKralyXMpgmYAKynjzZyVR0Iub1RBCox77DxXCPDEg8ACOW81belJYFB/g0TYGCef0eHFCdexTpx7eWKtM/dHkc5I8QvZ8osygRIAAbk2C5vSKbsM0OQYmLK5kJFRg7ms=; Expires=Thu, 04 Jan 2024 16:23:11 GMT; Path=/; SameSite=None; Secure Server: nginx Access-Control-Allow-Origin: * X-Robots-Tag: noindex, nofollow Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
2023-12-28 16:23:11 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2023-12-28 16:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50703	143.204.165.57	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:11 UTC	653	OUT	POST /e/?compression=gzip-js&ip=1&_=1703780590853&ver=1.77.2 HTTP/1.1 Host: app.posthog.com Connection: keep-alive Content-Length: 826 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:11 UTC	826	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 54 ed 6e dc 36 10 7c 17 21 d5 af e8 2c 52 b2 28 1d 20 14 67 e7 8a da 88 d3 26 ae 1b b4 45 21 50 fc 90 58 4b 22 43 51 52 ae 46 de bd 4b d5 4e 2e 71 80 24 c8 8f c3 89 b3 b3 5c ee 72 86 77 c1 34 29 1e 6c 83 18 e5 ac 46 09 8b 68 2a 64 44 58 81 23 9a 13 0e 4b 5e e7 98 b1 94 e4 49 f0 34 10 b3 18 1c d0 9f 28 0e 1f 4a 1e 00 33 56 1b 61 9d 12 63 b0 bd 0b 9e 68 f8 0b 5e ab 81 eb 65 84 28 ac ab 59 d8 51 e9 01 70 14 6f 62 0f d6 16 a2 c2 02 72 de 5a dd 0b 8f 71 31 2b 26 2a 77 30 02 f0 67 62 bc 75 da f8 00 9b ac 85 6a d5 64 3b 08 b4 ce 99 71 7b 72 c2 f4 00 fb ba 45 b9 76 a1 b3 d8 30 dd 9f fc 38 5a 56 f2 88 19 1c 63 92 a7 04 65 59 11 ea ba d4 75 c3 74 2d 38 fc fa 90 cf ac 64 e1 6d 29 55 27 7e c0 f1 fd 3e c2 86 cc ba 32 23 24 4e 70 51 c4 Data Ascii: Tn6\|!,R( g&E!PXK"CQRFKN.q$\rw4)lFhdDX#K^I4(J3Vach^e(YQpobrZq1+&w0gbujd;q{rEv08ZVceYut-8dm)U'~>2#$NpQ
2023-12-28 16:23:12 UTC	603	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Thu, 28 Dec 2023 16:23:11 GMT Access-Control-Allow-Origin: https://convertwithwave.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type X-Content-Type-Options: nosniff Referrer-Policy: same-origin X-Cache: Miss from cloudfront Via: 1.1 891b1deb65550a4f9d40f2585712c586.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW3-C1 X-Amz-Cf-Id: O8CxQy4gYaQv_ZtsVFg6sOFWkgYMobGeiF_RlCk8QxF5rj4opOcq3g==
2023-12-28 16:23:12 UTC	18	IN	Data Raw: 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 20 31 7d 0d 0a Data Ascii: d{"status": 1}
2023-12-28 16:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50698	3.219.198.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:11 UTC	596	OUT	POST /i?evnt=lp-load HTTP/1.1 Host: api.wavebrowserbase.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:11 UTC	963	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:11 GMT Content-Type: application/json; charset=utf-8 Content-Length: 55 Connection: close Set-Cookie: AWSALBTG=BbAFPC6J34i7wXMNstEIwRnGeudjSKLEwfSDM36yoqHHza1jQJFml+T46sPbNHoZ2ylB+CkxY6dEYNa1G5TbO157roaenUJhopu+RwlSkZDUKq6NdHqI6miSg81zsOl0DUe446Xt54n3j+HXnkYdpJf7zydBfb62sFTAB/GK2akG27mXI1I=; Expires=Thu, 04 Jan 2024 16:23:11 GMT; Path=/ Set-Cookie: AWSALBTGCORS=BbAFPC6J34i7wXMNstEIwRnGeudjSKLEwfSDM36yoqHHza1jQJFml+T46sPbNHoZ2ylB+CkxY6dEYNa1G5TbO157roaenUJhopu+RwlSkZDUKq6NdHqI6miSg81zsOl0DUe446Xt54n3j+HXnkYdpJf7zydBfb62sFTAB/GK2akG27mXI1I=; Expires=Thu, 04 Jan 2024 16:23:11 GMT; Path=/; SameSite=None; Secure Server: nginx Access-Control-Allow-Origin: * Cache-Control: no-cache Expires: -1 Pragma: no-cache X-Robots-Tag: noindex, nofollow Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
2023-12-28 16:23:11 UTC	55	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 74 69 64 22 3a 22 22 2c 22 67 72 6f 75 70 49 64 22 3a 22 74 52 4a 6f 53 77 6b 61 4e 70 47 78 56 6e 53 50 67 22 7d Data Ascii: {"success":true,"tid":"","groupId":"tRJoSwkaNpGxVnSPg"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50701	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:11 UTC	2990	OUT	GET /assets/media-192ac301.css HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=1cZjBzpSU6bh8i7mkw8fZrksi6F2NfLiM29f5aAADNIRxtZ0A9WVny6gf/Q+Kwism8sjPKIaEH58Gym4Tw5L3LAXEhblDOdST+0SpxQFnnT9lFfX8WXzGZ/+Ycb+; AWSALBCORS=1cZjBzpSU6bh8i7mkw8fZrksi6F2NfLiM29f5aAADNIRxtZ0A9WVny6gf/Q+Kwism8sjPKIaEH58Gym4Tw5L3LAXEhblDOdST+0SpxQFnnT9lFfX8WXzGZ/+Ycb+; data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D
2023-12-28 16:23:12 UTC	765	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:12 GMT Content-Type: text/css Content-Length: 4357 Connection: close Set-Cookie: AWSALB=5upHrsGSdE4IKoFyEmv3Qq2b6YdOuAYzjZCP8Zp6dvLy4GZYKj/UTRwJWwUMvPiuEr2MQVULmKYqN6bA+Ou7iRDXp4AyPM8CsX6KWzX8HU7BQKG9edW+h56htKJT; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/ Set-Cookie: AWSALBCORS=5upHrsGSdE4IKoFyEmv3Qq2b6YdOuAYzjZCP8Zp6dvLy4GZYKj/UTRwJWwUMvPiuEr2MQVULmKYqN6bA+Ou7iRDXp4AyPM8CsX6KWzX8HU7BQKG9edW+h56htKJT; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT Vary: Accept-Encoding ETag: "658d889d-1105" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:12 UTC	4357	IN	Data Raw: 2e 2d 2d 68 65 61 64 65 72 2d 66 61 64 65 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 38 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 32 39 39 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 2e 30 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 30 64 65 67 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 20 30 25 2c 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 30 64 65 67 2c 72 67 62 61 28 32 35 Data Ascii: .--header-fade:before{display:block;content:"";position:sticky;left:0;top:81px;width:100%;height:32px;z-index:1299;transform:scaleX(1.05);background:linear-gradient(0deg,rgba(255,255,255,0) 0%,rgb(255,255,255) 100%);background:linear-gradient(0deg,rgba(25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50702	3.210.52.109	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:11 UTC	577	OUT	GET /cookie/set?tid=va6g28ar HTTP/1.1 Host: api.wavebrowser.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:12 UTC	1493	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:12 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALBTG=WYyceQc/taF+2jtGMGxgfaxmfDA68MUtViV5ZvZ266Jg60wVIDVW4oeO+RdzqYv+5Uh+yywVlyO9kp317PAKz2VQqFv6BAWSfXhyvhBZsBUeSk/Ej37pv9Asl+zNj4t70cfxEw5vvZdgBl1+7qzu/0iHI21Us/qSQvLWSH1Smk6TVvew4uY=; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/ Set-Cookie: AWSALBTGCORS=WYyceQc/taF+2jtGMGxgfaxmfDA68MUtViV5ZvZ266Jg60wVIDVW4oeO+RdzqYv+5Uh+yywVlyO9kp317PAKz2VQqFv6BAWSfXhyvhBZsBUeSk/Ej37pv9Asl+zNj4t70cfxEw5vvZdgBl1+7qzu/0iHI21Us/qSQvLWSH1Smk6TVvew4uY=; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/; SameSite=None; Secure Server: nginx Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://convertwithwave.com Set-Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3Anull%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669-lp0-obgc-wav-igHbzPtkqAdzpsyyUQ-ab15-w64-btA-k52-vosox-capn-ineco1-spqlgroup-merch-brwsr%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; expires=Tue, 09 Jan 2024 16:23:12 GMT; domain=.wavebrowser.co; path=/; secure; samesite=none X-Robots-Tag: noindex, nofollow Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
2023-12-28 16:23:12 UTC	7	IN	Data Raw: 32 0d 0a 4f 4b 0d 0a Data Ascii: 2OK
2023-12-28 16:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50705	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:11 UTC	2814	OUT	GET /home/pixel/fired?uid=af779c44-13ad-47a2-ad3d-9786811ff14d&target=AW-11219589166%2F4fTdCNvrh6sYEK6w9eUp&event=setup&tranid=af779c44-13ad-47a2-ad3d-9786811ff14d HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=1cZjBzpSU6bh8i7mkw8fZrksi6F2NfLiM29f5aAADNIRxtZ0A9WVny6gf/Q+Kwism8sjPKIaEH58Gym4Tw5L3LAXEhblDOdST+0SpxQFnnT9lFfX8WXzGZ/+Ycb+; AWSALBCORS=1cZjBzpSU6bh8i7mkw8fZrksi6F2NfLiM29f5aAADNIRxtZ0A9WVny6gf/Q+Kwism8sjPKIaEH58Gym4Tw5L3LAXEhblDOdST+0SpxQFnnT9lFfX8WXzGZ/+Ycb+; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22anonymous%22%2C%22%24sesid%22%3A%5B1703780590402%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%7D; data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D
2023-12-28 16:23:12 UTC	425	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:12 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Access-Control-Allow-Credentials: * Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
2023-12-28 16:23:12 UTC	16	IN	Data Raw: 62 0d 0a 7b 22 6f 6b 22 3a 74 72 75 65 7d 0d 0a Data Ascii: b{"ok":true}
2023-12-28 16:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50706	143.204.165.57	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:12 UTC	665	OUT	POST /decide/?v=3&ip=1&_=1703780591404&ver=1.77.2 HTTP/1.1 Host: app.posthog.com Connection: keep-alive Content-Length: 447 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:12 UTC	447	OUT	Data Raw: 64 61 74 61 3d 65 79 4a 30 62 32 74 6c 62 69 49 36 49 6e 42 6f 59 31 39 73 64 6b 70 43 62 6d 49 35 4d 30 78 34 59 6d 46 46 4e 44 49 30 62 48 6c 53 61 46 56 4b 54 47 5a 4f 55 45 4a 74 56 57 56 79 55 6e 42 56 64 6e 56 77 5a 6b 35 72 4e 32 5a 36 49 69 77 69 5a 47 6c 7a 64 47 6c 75 59 33 52 66 61 57 51 69 4f 69 4a 68 5a 6a 63 33 4f 57 4d 30 4e 43 30 78 4d 32 46 6b 4c 54 51 33 59 54 49 74 59 57 51 7a 5a 43 30 35 4e 7a 67 32 4f 44 45 78 5a 6d 59 78 4e 47 51 69 4c 43 4a 6e 63 6d 39 31 63 48 4d 69 4f 6e 74 39 4c 43 49 6b 59 57 35 76 62 6c 39 6b 61 58 4e 30 61 57 35 6a 64 46 39 70 5a 43 49 36 49 6a 41 78 4f 47 4e 69 4d 54 4e 6a 4c 57 45 77 4f 44 45 74 4e 32 51 77 5a 69 30 34 5a 54 59 35 4c 54 68 6b 4d 54 4d 78 4f 47 4d 35 5a 44 4e 6d 4e 79 49 73 49 6e 42 6c 63 6e Data Ascii: data=eyJ0b2tlbiI6InBoY19sdkpCbmI5M0x4YmFFNDI0bHlSaFVKTGZOUEJtVWVyUnBVdnVwZk5rN2Z6IiwiZGlzdGluY3RfaWQiOiJhZjc3OWM0NC0xM2FkLTQ3YTItYWQzZC05Nzg2ODExZmYxNGQiLCJncm91cHMiOnt9LCIkYW5vbl9kaXN0aW5jdF9pZCI6IjAxOGNiMTNjLWEwODEtN2QwZi04ZTY5LThkMTMxOGM5ZDNmNyIsInBlcn
2023-12-28 16:23:12 UTC	603	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Thu, 28 Dec 2023 16:23:12 GMT Access-Control-Allow-Origin: https://convertwithwave.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type X-Content-Type-Options: nosniff Referrer-Policy: same-origin X-Cache: Miss from cloudfront Via: 1.1 10d5043185168ff98a7c4be514b70520.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW3-C1 X-Amz-Cf-Id: VW-McQtP7PQSqMXAWHtAv79ozY2rHNIGtBQYkhJPEB81HMT3JXKHHA==
2023-12-28 16:23:12 UTC	451	IN	Data Raw: 31 62 63 0d 0a 7b 22 63 6f 6e 66 69 67 22 3a 20 7b 22 65 6e 61 62 6c 65 5f 63 6f 6c 6c 65 63 74 5f 65 76 65 72 79 74 68 69 6e 67 22 3a 20 74 72 75 65 7d 2c 20 22 74 6f 6f 6c 62 61 72 50 61 72 61 6d 73 22 3a 20 7b 7d 2c 20 22 69 73 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 20 66 61 6c 73 65 2c 20 22 73 75 70 70 6f 72 74 65 64 43 6f 6d 70 72 65 73 73 69 6f 6e 22 3a 20 5b 22 67 7a 69 70 22 2c 20 22 67 7a 69 70 2d 6a 73 22 5d 2c 20 22 66 65 61 74 75 72 65 46 6c 61 67 73 22 3a 20 7b 7d 2c 20 22 73 65 73 73 69 6f 6e 52 65 63 6f 72 64 69 6e 67 22 3a 20 66 61 6c 73 65 2c 20 22 65 72 72 6f 72 73 57 68 69 6c 65 43 6f 6d 70 75 74 69 6e 67 46 6c 61 67 73 22 3a 20 66 61 6c 73 65 2c 20 22 66 65 61 74 75 72 65 46 6c 61 67 50 61 79 6c 6f 61 64 73 22 3a 20 7b 7d 2c 20 Data Ascii: 1bc{"config": {"enable_collect_everything": true}, "toolbarParams": {}, "isAuthenticated": false, "supportedCompression": ["gzip", "gzip-js"], "featureFlags": {}, "sessionRecording": false, "errorsWhileComputingFlags": false, "featureFlagPayloads": {},
2023-12-28 16:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50707	143.204.165.47	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:12 UTC	393	OUT	GET /e/?compression=gzip-js&ip=1&_=1703780590853&ver=1.77.2 HTTP/1.1 Host: app.posthog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:12 UTC	404	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Thu, 28 Dec 2023 16:23:12 GMT X-Content-Type-Options: nosniff Referrer-Policy: same-origin X-Cache: Error from cloudfront Via: 1.1 a550eac330dc8d03bf23affb17393304.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW3-C1 X-Amz-Cf-Id: _2Ff0g8xqtgK9zB2goolOGyYA71Ui_Fq3d-L_Wij5hUswN0OS6H9_A==
2023-12-28 16:23:12 UTC	180	IN	Data Raw: 61 65 0d 0a 7b 22 74 79 70 65 22 3a 20 22 76 61 6c 69 64 61 74 69 6f 6e 5f 65 72 72 6f 72 22 2c 20 22 63 6f 64 65 22 3a 20 22 6e 6f 5f 64 61 74 61 22 2c 20 22 64 65 74 61 69 6c 22 3a 20 22 4e 6f 20 64 61 74 61 20 66 6f 75 6e 64 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 73 65 20 61 20 50 4f 53 54 20 72 65 71 75 65 73 74 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 74 68 65 20 70 61 79 6c 6f 61 64 20 69 6e 20 74 68 65 20 62 6f 64 79 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 2e 22 2c 20 22 61 74 74 72 22 3a 20 6e 75 6c 6c 7d 0d 0a Data Ascii: ae{"type": "validation_error", "code": "no_data", "detail": "No data found. Make sure to use a POST request when sending the payload in the body of the request.", "attr": null}
2023-12-28 16:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50708	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:12 UTC	3004	OUT	GET /assets/clickwrap-agreement-eb1b3ac2.css HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; AWSALB=5upHrsGSdE4IKoFyEmv3Qq2b6YdOuAYzjZCP8Zp6dvLy4GZYKj/UTRwJWwUMvPiuEr2MQVULmKYqN6bA+Ou7iRDXp4AyPM8CsX6KWzX8HU7BQKG9edW+h56htKJT; AWSALBCORS=5upHrsGSdE4IKoFyEmv3Qq2b6YdOuAYzjZCP8Zp6dvLy4GZYKj/UTRwJWwUMvPiuEr2MQVULmKYqN6bA+Ou7iRDXp4AyPM8CsX6KWzX8HU7BQKG9edW+h56htKJT
2023-12-28 16:23:12 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:12 GMT Content-Type: text/css Content-Length: 270 Connection: close Set-Cookie: AWSALB=wVMKEX+Ah3mIrG7KaZCOg3auW+NP7vS2xa8QIE0bPT0SQjP0UxeRKaosZFVWTN08e6TpiH5tY2ujU1lTU0DX/3cgWpGongHPhhEyn+Zjk/+fzEkqZ62WL3CxRvPv; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/ Set-Cookie: AWSALBCORS=wVMKEX+Ah3mIrG7KaZCOg3auW+NP7vS2xa8QIE0bPT0SQjP0UxeRKaosZFVWTN08e6TpiH5tY2ujU1lTU0DX/3cgWpGongHPhhEyn+Zjk/+fzEkqZ62WL3CxRvPv; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT ETag: "658d889d-10e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:12 UTC	270	IN	Data Raw: 2e 75 6e 64 65 72 62 74 6e 2d 61 67 72 65 65 6d 65 6e 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 49 6e 74 65 72 2c 73 61 6e 73 2d 73 65 72 69 66 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 75 6e 64 65 72 62 74 6e 2d 61 67 72 65 65 6d 65 6e 74 3e 61 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6f 70 61 63 69 74 79 3a 2e 36 35 7d 2e 62 6c 75 65 4c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 34 32 34 32 34 32 7d 2e 62 6c 75 65 4c 69 6e 6b 20 61 7b 63 6f 6c 6f 72 3a 23 30 61 61 38 65 38 7d 2e 64 61 72 6b 42 6c 75 65 4c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 64 65 7d 2e 64 61 72 6b 42 6c 75 65 4c 69 6e 6b 20 61 7b Data Ascii: .underbtn-agreement{font-family:Inter,sans-serif;padding:12px;font-weight:400;font-size:14px;line-height:1.5}.underbtn-agreement>a{font-weight:600;opacity:.65}.blueLink{color:#424242}.blueLink a{color:#0aa8e8}.darkBlueLink{color:#ffffffde}.darkBlueLink a{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50709	3.219.198.197	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:12 UTC	785	OUT	GET /cookie/set?tid=va6g28ar HTTP/1.1 Host: api.wavebrowserbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBTGCORS=BbAFPC6J34i7wXMNstEIwRnGeudjSKLEwfSDM36yoqHHza1jQJFml+T46sPbNHoZ2ylB+CkxY6dEYNa1G5TbO157roaenUJhopu+RwlSkZDUKq6NdHqI6miSg81zsOl0DUe446Xt54n3j+HXnkYdpJf7zydBfb62sFTAB/GK2akG27mXI1I=
2023-12-28 16:23:12 UTC	1501	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:12 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALBTG=q9OoT2ljz1xwdkG2Za6mtW8viNlecnT/Qlgus3s+D2tsw22J+Z68JN9muE4HpBLCwgqqs6MtFQpJxazRurrtxhBp2HRN6H+wyItlW7CGR6hqRhHeWnrWAJkX+nsNEFqoXP61vxUfBLskR+U43fAYBG6ZNaNUQ96KI5CbsSuHQ7i4bCW2N84=; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/ Set-Cookie: AWSALBTGCORS=q9OoT2ljz1xwdkG2Za6mtW8viNlecnT/Qlgus3s+D2tsw22J+Z68JN9muE4HpBLCwgqqs6MtFQpJxazRurrtxhBp2HRN6H+wyItlW7CGR6hqRhHeWnrWAJkX+nsNEFqoXP61vxUfBLskR+U43fAYBG6ZNaNUQ96KI5CbsSuHQ7i4bCW2N84=; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/; SameSite=None; Secure Server: nginx Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://convertwithwave.com Set-Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3Anull%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669-lp0-obgc-wav-igwschFkPhfUSURKnCdkw-ab15-w64-btA-k52-vosox-capn-ineco1-spqlgroup-merch-brwsr%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; expires=Tue, 09 Jan 2024 16:23:12 GMT; domain=.wavebrowserbase.com; path=/; secure; samesite=none X-Robots-Tag: noindex, nofollow Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
2023-12-28 16:23:12 UTC	7	IN	Data Raw: 32 0d 0a 4f 4b 0d 0a Data Ascii: 2OK
2023-12-28 16:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50710	3.210.52.109	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:12 UTC	759	OUT	GET /cookie/set?tid=va6g28ar HTTP/1.1 Host: api.wavebrowser.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBTG=O2PBKy28OC4BOoF81XdF3gH0t3kYQf7M2IlAZHbEQSHp1PPPOYDKralyXMpgmYAKynjzZyVR0Iub1RBCox77DxXCPDEg8ACOW81belJYFB/g0TYGCef0eHFCdexTpx7eWKtM/dHkc5I8QvZ8osygRIAAbk2C5vSKbsM0OQYmLK5kJFRg7ms=; AWSALBTGCORS=O2PBKy28OC4BOoF81XdF3gH0t3kYQf7M2IlAZHbEQSHp1PPPOYDKralyXMpgmYAKynjzZyVR0Iub1RBCox77DxXCPDEg8ACOW81belJYFB/g0TYGCef0eHFCdexTpx7eWKtM/dHkc5I8QvZ8osygRIAAbk2C5vSKbsM0OQYmLK5kJFRg7ms=
2023-12-28 16:23:12 UTC	886	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Dec 2023 16:23:12 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALBTG=JwyIZ5yv04MjeYiKJW6aHp5wjaq9vsS4E+Z9tZ0EqAFEX8NDMmvLYLwJhQiSYVm1pRYSeO3IPOGDbpjT3DjCiA7kSKIwIkrfHU9W5LJ1JfyEQ8tzO8AQ1BJfpXaiFJDW7mTABoyW/7g0AnVosl340IqtfZsppB3hGs8Bg2k/pHkLgUUAfKY=; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/ Set-Cookie: AWSALBTGCORS=JwyIZ5yv04MjeYiKJW6aHp5wjaq9vsS4E+Z9tZ0EqAFEX8NDMmvLYLwJhQiSYVm1pRYSeO3IPOGDbpjT3DjCiA7kSKIwIkrfHU9W5LJ1JfyEQ8tzO8AQ1BJfpXaiFJDW7mTABoyW/7g0AnVosl340IqtfZsppB3hGs8Bg2k/pHkLgUUAfKY=; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/; SameSite=None; Secure Server: nginx X-Robots-Tag: noindex, nofollow Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
2023-12-28 16:23:12 UTC	8	IN	Data Raw: 33 0d 0a 42 41 44 0d 0a Data Ascii: 3BAD
2023-12-28 16:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50712	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:12 UTC	2989	OUT	GET /assets/Page-36e1d43b.css HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; AWSALB=5upHrsGSdE4IKoFyEmv3Qq2b6YdOuAYzjZCP8Zp6dvLy4GZYKj/UTRwJWwUMvPiuEr2MQVULmKYqN6bA+Ou7iRDXp4AyPM8CsX6KWzX8HU7BQKG9edW+h56htKJT; AWSALBCORS=5upHrsGSdE4IKoFyEmv3Qq2b6YdOuAYzjZCP8Zp6dvLy4GZYKj/UTRwJWwUMvPiuEr2MQVULmKYqN6bA+Ou7iRDXp4AyPM8CsX6KWzX8HU7BQKG9edW+h56htKJT
2023-12-28 16:23:13 UTC	766	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:12 GMT Content-Type: text/css Content-Length: 15266 Connection: close Set-Cookie: AWSALB=Pz42+INVz/iVnCwH7O0OizPHLmD0s6BOWX5VgWhOZ304cStkN+CoyfnFCBqJduqxSiQy60FswjPj6Q/DIRNAR4ky+fvW/93VniTtD3ysgBMoWbW9LHxsfna6jJUN; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/ Set-Cookie: AWSALBCORS=Pz42+INVz/iVnCwH7O0OizPHLmD0s6BOWX5VgWhOZ304cStkN+CoyfnFCBqJduqxSiQy60FswjPj6Q/DIRNAR4ky+fvW/93VniTtD3ysgBMoWbW9LHxsfna6jJUN; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT Vary: Accept-Encoding ETag: "658d889d-3ba2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:13 UTC	15266	IN	Data Raw: 62 6f 64 79 20 23 74 65 72 6d 6c 79 2d 63 6f 64 65 2d 73 6e 69 70 70 65 74 2d 73 75 70 70 6f 72 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 69 6e 69 74 69 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 2d 2d 68 65 61 64 65 72 2d 66 61 64 65 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 38 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 32 39 39 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 2e 30 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 Data Ascii: body #termly-code-snippet-support{display:block!important;pointer-events:initial!important}.--header-fade:before{display:block;content:"";position:sticky;left:0;top:81px;width:100%;height:32px;z-index:1299;transform:scaleX(1.05);background:linear-gradient

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50713	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:12 UTC	2474	OUT	GET /home/pixel/fired?uid=af779c44-13ad-47a2-ad3d-9786811ff14d&target=AW-11219589166%2F4fTdCNvrh6sYEK6w9eUp&event=setup&tranid=af779c44-13ad-47a2-ad3d-9786811ff14d HTTP/1.1 Host: convertwithwave.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; AWSALB=5upHrsGSdE4IKoFyEmv3Qq2b6YdOuAYzjZCP8Zp6dvLy4GZYKj/UTRwJWwUMvPiuEr2MQVULmKYqN6bA+Ou7iRDXp4AyPM8CsX6KWzX8HU7BQKG9edW+h56htKJT; AWSALBCORS=5upHrsGSdE4IKoFyEmv3Qq2b6YdOuAYzjZCP8Zp6dvLy4GZYKj/UTRwJWwUMvPiuEr2MQVULmKYqN6bA+Ou7iRDXp4AyPM8CsX6KWzX8HU7BQKG9edW+h56htKJT
2023-12-28 16:23:13 UTC	425	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:13 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Access-Control-Allow-Credentials: * Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
2023-12-28 16:23:13 UTC	16	IN	Data Raw: 62 0d 0a 7b 22 6f 6b 22 3a 74 72 75 65 7d 0d 0a Data Ascii: b{"ok":true}
2023-12-28 16:23:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50711	3.210.52.109	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:12 UTC	577	OUT	GET /cookie/set?tid=va6g28ar HTTP/1.1 Host: api.mywavehome.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:12 UTC	1496	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:12 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALBTG=RU1achtf38RaaTH1Qz4qxIDScljKsTV0KOKCGPcElkeOpfEhrgVG0mSAIccapT/inRbrrV6G/0Oow0eBrZDFVn4rB/j3j3f4xx/i4F5BQ5oyB0iaIAX8TTTIxuBqzRegaQrTWEg8xCrEb7GTWiU1sgnWgOgr+pOht1zNy2/ywobp/uEcBzU=; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/ Set-Cookie: AWSALBTGCORS=RU1achtf38RaaTH1Qz4qxIDScljKsTV0KOKCGPcElkeOpfEhrgVG0mSAIccapT/inRbrrV6G/0Oow0eBrZDFVn4rB/j3j3f4xx/i4F5BQ5oyB0iaIAX8TTTIxuBqzRegaQrTWEg8xCrEb7GTWiU1sgnWgOgr+pOht1zNy2/ywobp/uEcBzU=; Expires=Thu, 04 Jan 2024 16:23:12 GMT; Path=/; SameSite=None; Secure Server: nginx Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://convertwithwave.com Set-Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3Anull%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669-lp0-obgc-wav-igwschFkPhfUSURKnCdkw-ab15-w64-btA-k52-vosox-capn-ineco1-spqlgroup-merch-brwsr%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; expires=Tue, 09 Jan 2024 16:23:12 GMT; domain=.mywavehome.net; path=/; secure; samesite=none X-Robots-Tag: noindex, nofollow Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
2023-12-28 16:23:12 UTC	7	IN	Data Raw: 32 0d 0a 4f 4b 0d 0a Data Ascii: 2OK
2023-12-28 16:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50716	142.250.115.147	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:12 UTC	1005	OUT	POST /pagead/landing?gcd=11l1l1l1l1&dma=0&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE&gtm=45be3bt0v9123342550&auid=59812670.1703780592 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://convertwithwave.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:23:13 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:23:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:23:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50717	143.204.165.47	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:12 UTC	382	OUT	GET /decide/?v=3&ip=1&_=1703780591404&ver=1.77.2 HTTP/1.1 Host: app.posthog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:13 UTC	394	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Thu, 28 Dec 2023 16:23:13 GMT X-Content-Type-Options: nosniff Referrer-Policy: same-origin X-Cache: Miss from cloudfront Via: 1.1 3c144798feb17858393699d5bea35bec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW3-C1 X-Amz-Cf-Id: zkOmm0uzg4IaBJLidGsHhBd4VtaMadGi0-yphC16cie-4V_qw-yRgQ==
2023-12-28 16:23:13 UTC	192	IN	Data Raw: 62 61 0d 0a 7b 22 63 6f 6e 66 69 67 22 3a 20 7b 22 65 6e 61 62 6c 65 5f 63 6f 6c 6c 65 63 74 5f 65 76 65 72 79 74 68 69 6e 67 22 3a 20 74 72 75 65 7d 2c 20 22 74 6f 6f 6c 62 61 72 50 61 72 61 6d 73 22 3a 20 7b 7d 2c 20 22 69 73 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 20 66 61 6c 73 65 2c 20 22 73 75 70 70 6f 72 74 65 64 43 6f 6d 70 72 65 73 73 69 6f 6e 22 3a 20 5b 22 67 7a 69 70 22 2c 20 22 67 7a 69 70 2d 6a 73 22 5d 2c 20 22 66 65 61 74 75 72 65 46 6c 61 67 73 22 3a 20 5b 5d 2c 20 22 73 65 73 73 69 6f 6e 52 65 63 6f 72 64 69 6e 67 22 3a 20 66 61 6c 73 65 7d 0d 0a Data Ascii: ba{"config": {"enable_collect_everything": true}, "toolbarParams": {}, "isAuthenticated": false, "supportedCompression": ["gzip", "gzip-js"], "featureFlags": [], "sessionRecording": false}
2023-12-28 16:23:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50714	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:12 UTC	2878	OUT	GET /assets/Page-42a60927.js HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://convertwithwave.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; AWSALB=5upHrsGSdE4IKoFyEmv3Qq2b6YdOuAYzjZCP8Zp6dvLy4GZYKj/UTRwJWwUMvPiuEr2MQVULmKYqN6bA+Ou7iRDXp4AyPM8CsX6KWzX8HU7BQKG9edW+h56htKJT; AWSALBCORS=5upHrsGSdE4IKoFyEmv3Qq2b6YdOuAYzjZCP8Zp6dvLy4GZYKj/UTRwJWwUMvPiuEr2MQVULmKYqN6bA+Ou7iRDXp4AyPM8CsX6KWzX8HU7BQKG9edW+h56htKJT; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592
2023-12-28 16:23:13 UTC	781	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:13 GMT Content-Type: application/javascript Content-Length: 67309 Connection: close Set-Cookie: AWSALB=s4atMiIVtubne3IONVcx2vLu9aLdMRsPV9Sckh5/6IXhmcGyszc4ocF2s9lNaIbhdO5A7bAy9EW7R0VlOS7+6jymXubYZVzaW62kjZbdxXi3OC9LGrAl9GCtWSfu; Expires=Thu, 04 Jan 2024 16:23:13 GMT; Path=/ Set-Cookie: AWSALBCORS=s4atMiIVtubne3IONVcx2vLu9aLdMRsPV9Sckh5/6IXhmcGyszc4ocF2s9lNaIbhdO5A7bAy9EW7R0VlOS7+6jymXubYZVzaW62kjZbdxXi3OC9LGrAl9GCtWSfu; Expires=Thu, 04 Jan 2024 16:23:13 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT Vary: Accept-Encoding ETag: "658d889d-106ed" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:13 UTC	15603	IN	Data Raw: 69 6d 70 6f 72 74 7b 64 20 61 73 20 44 2c 67 20 61 73 20 63 65 2c 61 20 61 73 20 64 65 2c 75 20 61 73 20 61 65 2c 63 20 61 73 20 68 2c 72 20 61 73 20 53 2c 69 20 61 73 20 46 2c 62 20 61 73 20 6e 65 2c 6f 20 61 73 20 47 2c 65 20 61 73 20 78 2c 66 20 61 73 20 6e 2c 68 20 61 73 20 76 2c 6a 20 61 73 20 74 2c 6e 20 61 73 20 45 2c 6b 20 61 73 20 6c 2c 57 20 61 73 20 5f 65 2c 77 20 61 73 20 75 2c 6c 20 61 73 20 62 2c 6d 20 61 73 20 4a 2c 70 20 61 73 20 54 2c 71 20 61 73 20 24 2c 73 20 61 73 20 70 65 2c 44 20 61 73 20 4b 2c 74 20 61 73 20 74 65 2c 76 20 61 73 20 6d 65 2c 78 20 61 73 20 76 65 2c 79 20 61 73 20 4d 2c 7a 20 61 73 20 71 2c 46 20 61 73 20 56 2c 41 20 61 73 20 6a 2c 42 20 61 73 20 68 65 2c 43 20 61 73 20 79 65 2c 45 20 61 73 20 67 65 2c 47 20 61 73 20 Data Ascii: import{d as D,g as ce,a as de,u as ae,c as h,r as S,i as F,b as ne,o as G,e as x,f as n,h as v,j as t,n as E,k as l,W as _e,w as u,l as b,m as J,p as T,q as $,s as pe,D as K,t as te,v as me,x as ve,y as M,z as q,F as V,A as j,B as he,C as ye,E as ge,G as
2023-12-28 16:23:13 UTC	16384	IN	Data Raw: 20 6f 75 72 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 65 72 2e 61 70 70 65 73 74 65 65 6d 2e 63 6f 6d 2f 63 65 72 74 69 66 69 65 64 3f 76 65 6e 64 6f 72 3d 57 41 56 45 53 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 41 70 70 45 73 74 65 65 6d 20 63 65 72 74 69 66 69 63 61 74 69 6f 6e 20 68 65 72 65 3c 2f 61 3e 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 57 61 76 65 20 69 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 73 61 66 65 73 74 20 62 72 6f 77 73 65 72 73 20 6f 6e 20 74 68 65 20 6d 61 72 6b 65 74 20 74 6f 64 61 79 2e 20 49 74 20 70 72 6f 74 65 63 74 73 20 79 6f 75 20 66 72 6f 6d 20 69 6e 76 61 73 69 76 65 20 61 64 Data Ascii: our <a href="https://customer.appesteem.com/certified?vendor=WAVES" target="_blank">AppEsteem certification here</a>. </li> <li> Wave is one of the safest browsers on the market today. It protects you from invasive ad
2023-12-28 16:23:13 UTC	406	IN	Data Raw: 65 5f 73 63 72 69 70 74 5f 73 65 74 75 70 5f 74 72 75 65 5f 6c 61 6e 67 2d 36 33 62 64 32 62 63 32 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 62 72 65 61 64 63 72 75 6d 62 2d 62 61 72 2d 61 36 39 66 62 30 30 62 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 62 72 65 61 64 63 72 75 6d 62 2d 62 61 72 2d 37 62 35 63 64 39 62 30 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 42 6c 6f 67 49 6e 64 65 78 2d 35 61 35 34 66 39 66 32 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 61 72 74 69 63 6c 65 2d 70 72 65 76 69 65 77 2d 62 39 37 36 38 64 63 66 2e 63 73 73 22 5d 29 2c 22 2e 2e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 61 79 6f 75 74 73 2f 64 65 66 61 75 6c 74 2f 70 61 67 65 73 2f 42 6c 6f 67 50 6f 73 74 2e 76 75 65 22 3a 28 29 3d 3e 65 28 28 29 3d 3e 69 6d 70 6f 72 74 28 22 2e 2f 42 Data Ascii: e_script_setup_true_lang-63bd2bc2.js","assets/breadcrumb-bar-a69fb00b.js","assets/breadcrumb-bar-7b5cd9b0.css","assets/BlogIndex-5a54f9f2.css","assets/article-preview-b9768dcf.css"]),"../components/layouts/default/pages/BlogPost.vue":()=>e(()=>import("./B
2023-12-28 16:23:13 UTC	16384	IN	Data Raw: 2f 62 72 65 61 64 63 72 75 6d 62 2d 62 61 72 2d 37 62 35 63 64 39 62 30 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 62 6c 6f 67 2d 73 63 68 65 6d 61 2e 76 75 65 5f 76 75 65 5f 74 79 70 65 5f 73 63 72 69 70 74 5f 73 65 74 75 70 5f 74 72 75 65 5f 6c 61 6e 67 2d 36 33 62 64 32 62 63 32 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2e 76 75 65 5f 76 75 65 5f 74 79 70 65 5f 73 74 79 6c 65 5f 69 6e 64 65 78 5f 30 5f 6c 61 6e 67 2d 64 64 34 64 66 39 31 31 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 38 33 32 32 35 36 37 36 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 6d 65 64 69 61 2e 76 75 65 5f 76 75 65 5f 74 79 70 65 5f 73 74 79 6c 65 5f 69 6e 64 65 78 5f 30 5f 6c 61 6e 67 2d 65 39 62 Data Ascii: /breadcrumb-bar-7b5cd9b0.css","assets/blog-schema.vue_vue_type_script_setup_true_lang-63bd2bc2.js","assets/article-content.vue_vue_type_style_index_0_lang-dd4df911.js","assets/article-content-83225676.css","assets/media.vue_vue_type_style_index_0_lang-e9b
2023-12-28 16:23:13 UTC	16384	IN	Data Raw: 68 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 77 61 69 74 20 6f 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 22 2e 2e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 61 79 6f 75 74 73 2f 64 65 66 61 75 6c 74 2f 70 61 67 65 73 2f 34 30 34 45 72 72 6f 72 2e 76 75 65 22 3a 28 29 3d 3e 65 28 28 29 3d 3e 69 6d 70 6f 72 74 28 22 2e 2f 34 30 34 45 72 72 6f 72 2d 63 34 31 65 36 36 38 32 2e 6a 73 22 29 2c 5b 22 61 73 73 65 74 73 2f 34 30 34 45 72 72 6f 72 2d 63 34 31 65 36 36 38 32 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 34 31 32 33 35 35 30 37 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 61 65 33 34 37 34 32 31 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 6d 65 64 69 61 2e 76 75 65 5f 76 75 65 5f 74 79 70 65 5f 73 74 79 6c 65 5f 69 6e 64 65 78 Data Ascii: h{try{return await oe(Object.assign({"../components/layouts/default/pages/404Error.vue":()=>e(()=>import("./404Error-c41e6682.js"),["assets/404Error-c41e6682.js","assets/index-41235507.js","assets/index-ae347421.css","assets/media.vue_vue_type_style_index
2023-12-28 16:23:13 UTC	2148	IN	Data Raw: 72 65 65 6d 65 6e 74 2e 76 75 65 5f 76 75 65 5f 74 79 70 65 5f 73 74 79 6c 65 5f 69 6e 64 65 78 5f 30 5f 6c 61 6e 67 2d 63 30 35 62 37 65 34 62 2e 6a 73 22 2c 22 61 73 73 65 74 73 2f 63 6c 69 63 6b 77 72 61 70 2d 61 67 72 65 65 6d 65 6e 74 2d 65 62 31 62 33 61 63 32 2e 63 73 73 22 2c 22 61 73 73 65 74 73 2f 50 72 69 76 61 63 79 2d 64 64 65 64 38 36 32 39 2e 63 73 73 22 5d 29 2c 22 2e 2e 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 61 79 6f 75 74 73 2f 64 65 66 61 75 6c 74 2f 70 61 67 65 73 2f 53 69 74 65 6d 61 70 2e 76 75 65 22 3a 28 29 3d 3e 65 28 28 29 3d 3e 69 6d 70 6f 72 74 28 22 2e 2f 53 69 74 65 6d 61 70 2d 61 31 38 62 31 37 33 31 2e 6a 73 22 29 2c 5b 22 61 73 73 65 74 73 2f 53 69 74 65 6d 61 70 2d 61 31 38 62 31 37 33 31 2e 6a 73 22 2c 22 61 73 73 65 74 Data Ascii: reement.vue_vue_type_style_index_0_lang-c05b7e4b.js","assets/clickwrap-agreement-eb1b3ac2.css","assets/Privacy-dded8629.css"]),"../components/layouts/default/pages/Sitemap.vue":()=>e(()=>import("./Sitemap-a18b1731.js"),["assets/Sitemap-a18b1731.js","asset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50720	216.239.34.181	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:13 UTC	1800	OUT	POST /g/collect?v=2&tid=G-ZDEB536PB9&gtm=45je3bt0v881998293&_p=1703780590808&_gaz=1&gcd=11l1l1l1l1&dma=0&cid=504497915.1703780592&ul=en-us&sr=1280x1024&lps=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&_s=1&uid=af779c44-13ad-47a2-ad3d-9786811ff14d&sid=1703780591&sct=1&seg=0&dl=https%3A%2F%2Fconvertwithwave.com%2F%3Fsrc%3Dd-cp20278471669%26ob%3Dobgcobedobem%26dvc%3Dc%26k%3Dfile%2520converter%26crt%3D677032990697%26adp%3D%26plc%3Dwww.mediafire.com%26tgt%3D%26sl%3D%26cpd%3D20278471669%26iid%3Dwav-cvt%26gclid%3DEAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE&dr=https%3A%2F%2Fwww.mediafire.com%2F&dt=Wave%20Browser%20-%20Efficient%2C%20Intuitive%20and%20Personal%20Web%20Browser&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.transport_type=beacon&ep.transaction_id=af779c44-13ad-47a2-ad3d-9786811ff14d&tfd=5777 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://convertwithwave.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:23:13 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://convertwithwave.com Date: Thu, 28 Dec 2023 16:23:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50719	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:13 UTC	2998	OUT	GET /assets/media.vue_vue_type_style_index_0_lang-e9b8883b.js HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://convertwithwave.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=wVMKEX+Ah3mIrG7KaZCOg3auW+NP7vS2xa8QIE0bPT0SQjP0UxeRKaosZFVWTN08e6TpiH5tY2ujU1lTU0DX/3cgWpGongHPhhEyn+Zjk/+fzEkqZ62WL3CxRvPv; AWSALBCORS=wVMKEX+Ah3mIrG7KaZCOg3auW+NP7vS2xa8QIE0bPT0SQjP0UxeRKaosZFVWTN08e6TpiH5tY2ujU1lTU0DX/3cgWpGongHPhhEyn+Zjk/+fzEkqZ62WL3CxRvPv
2023-12-28 16:23:13 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:13 GMT Content-Type: application/javascript Content-Length: 5291 Connection: close Set-Cookie: AWSALB=s2ek5NSBlXgWQg3QRsHzDRP8mtnYCMQuHpACrOmwFqip/AjewfG8V/FoN6cXN0tiei5RD0vDthu+75VEznF5uyU0BGgFnRO0svchOHf9TgHDaEPN7Zt4W1juKfyG; Expires=Thu, 04 Jan 2024 16:23:13 GMT; Path=/ Set-Cookie: AWSALBCORS=s2ek5NSBlXgWQg3QRsHzDRP8mtnYCMQuHpACrOmwFqip/AjewfG8V/FoN6cXN0tiei5RD0vDthu+75VEznF5uyU0BGgFnRO0svchOHf9TgHDaEPN7Zt4W1juKfyG; Expires=Thu, 04 Jan 2024 16:23:13 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT Vary: Accept-Encoding ETag: "658d889d-14ab" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:13 UTC	5291	IN	Data Raw: 69 6d 70 6f 72 74 7b 64 20 61 73 20 62 2c 67 20 61 73 20 42 2c 61 20 61 73 20 56 2c 75 20 61 73 20 24 2c 63 20 61 73 20 5f 2c 62 20 61 73 20 78 2c 69 20 61 73 20 4e 2c 65 20 61 73 20 75 2c 66 20 61 73 20 6d 2c 68 20 61 73 20 79 2c 6a 20 61 73 20 65 2c 6b 20 61 73 20 74 2c 77 20 61 73 20 73 2c 6c 20 61 73 20 6f 2c 6d 20 61 73 20 70 2c 70 20 61 73 20 41 2c 7a 20 61 73 20 46 2c 73 20 61 73 20 54 2c 58 20 61 73 20 59 2c 59 20 61 73 20 44 2c 5a 20 61 73 20 45 2c 24 20 61 73 20 48 2c 71 20 61 73 20 6b 2c 6e 20 61 73 20 68 7d 66 72 6f 6d 22 2e 2f 69 6e 64 65 78 2d 34 31 32 33 35 35 30 37 2e 6a 73 22 3b 63 6f 6e 73 74 20 4d 3d 22 2f 77 61 76 65 2d 6c 6f 67 6f 2d 6c 69 67 68 74 2d 62 6c 75 65 2e 70 6e 67 22 2c 6a 3d 7b 63 6c 61 73 73 3a 22 72 65 62 72 61 6e 64 5f Data Ascii: import{d as b,g as B,a as V,u as $,c as _,b as x,i as N,e as u,f as m,h as y,j as e,k as t,w as s,l as o,m as p,p as A,z as F,s as T,X as Y,Y as D,Z as E,$ as H,q as k,n as h}from"./index-41235507.js";const M="/wave-logo-light-blue.png",j={class:"rebrand_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50722	3.228.69.56	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:13 UTC	988	OUT	GET /cookie/set?tid=va6g28ar HTTP/1.1 Host: api.wavebrowserbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBTGCORS=q9OoT2ljz1xwdkG2Za6mtW8viNlecnT/Qlgus3s+D2tsw22J+Z68JN9muE4HpBLCwgqqs6MtFQpJxazRurrtxhBp2HRN6H+wyItlW7CGR6hqRhHeWnrWAJkX+nsNEFqoXP61vxUfBLskR+U43fAYBG6ZNaNUQ96KI5CbsSuHQ7i4bCW2N84=; data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3Anull%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669-lp0-obgc-wav-igwschFkPhfUSURKnCdkw-ab15-w64-btA-k52-vosox-capn-ineco1-spqlgroup-merch-brwsr%22%2C%22Implementation%22%3A%22wav-cvt%22%7D
2023-12-28 16:23:13 UTC	886	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Dec 2023 16:23:13 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALBTG=j6jxqyGkLC8aItpzDKp87IboRQV/3gj1PZhvkhjNbxp/pjt6UixaV3FTI/ure7n+YZ71OC5tTM3yDlyt55KV6M9bdBrJkITPwlLTY60BEuT/4nnOAQZxv/UrFsN4IHb9g84KHcz/94P5Wh1EckxBMLhG3PeDVk8423ZYGHaG2IzzrDkoj2w=; Expires=Thu, 04 Jan 2024 16:23:13 GMT; Path=/ Set-Cookie: AWSALBTGCORS=j6jxqyGkLC8aItpzDKp87IboRQV/3gj1PZhvkhjNbxp/pjt6UixaV3FTI/ure7n+YZ71OC5tTM3yDlyt55KV6M9bdBrJkITPwlLTY60BEuT/4nnOAQZxv/UrFsN4IHb9g84KHcz/94P5Wh1EckxBMLhG3PeDVk8423ZYGHaG2IzzrDkoj2w=; Expires=Thu, 04 Jan 2024 16:23:13 GMT; Path=/; SameSite=None; Secure Server: nginx X-Robots-Tag: noindex, nofollow Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
2023-12-28 16:23:13 UTC	8	IN	Data Raw: 33 0d 0a 42 41 44 0d 0a Data Ascii: 3BAD
2023-12-28 16:23:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50724	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:13 UTC	3012	OUT	GET /assets/clickwrap-agreement.vue_vue_type_style_index_0_lang-c05b7e4b.js HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://convertwithwave.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=Pz42+INVz/iVnCwH7O0OizPHLmD0s6BOWX5VgWhOZ304cStkN+CoyfnFCBqJduqxSiQy60FswjPj6Q/DIRNAR4ky+fvW/93VniTtD3ysgBMoWbW9LHxsfna6jJUN; AWSALBCORS=Pz42+INVz/iVnCwH7O0OizPHLmD0s6BOWX5VgWhOZ304cStkN+CoyfnFCBqJduqxSiQy60FswjPj6Q/DIRNAR4ky+fvW/93VniTtD3ysgBMoWbW9LHxsfna6jJUN
2023-12-28 16:23:13 UTC	754	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:13 GMT Content-Type: application/javascript Content-Length: 892 Connection: close Set-Cookie: AWSALB=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz; Expires=Thu, 04 Jan 2024 16:23:13 GMT; Path=/ Set-Cookie: AWSALBCORS=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz; Expires=Thu, 04 Jan 2024 16:23:13 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT ETag: "658d889d-37c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:13 UTC	892	IN	Data Raw: 69 6d 70 6f 72 74 7b 64 20 61 73 20 70 2c 72 20 61 73 20 65 2c 65 20 61 73 20 76 2c 66 20 61 73 20 5f 2c 68 20 61 73 20 64 2c 71 20 61 73 20 6b 2c 6c 20 61 73 20 61 2c 55 20 61 73 20 6f 2c 6b 20 61 73 20 63 2c 77 20 61 73 20 75 2c 6e 20 61 73 20 79 7d 66 72 6f 6d 22 2e 2f 69 6e 64 65 78 2d 34 31 32 33 35 35 30 37 2e 6a 73 22 3b 63 6f 6e 73 74 20 66 3d 70 28 7b 5f 5f 6e 61 6d 65 3a 22 63 6c 69 63 6b 77 72 61 70 2d 61 67 72 65 65 6d 65 6e 74 22 2c 70 72 6f 70 73 3a 7b 6c 69 67 68 74 54 68 65 6d 65 3a 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 2c 62 75 74 74 6f 6e 4e 61 6d 65 3a 7b 7d 7d 2c 73 65 74 75 70 28 67 29 7b 63 6f 6e 73 74 20 6e 3d 65 28 22 2f 74 65 72 6d 73 22 29 2c 6c 3d 65 28 22 54 65 72 6d 73 22 29 2c 73 3d 65 28 22 2f 70 72 69 76 61 63 79 22 29 Data Ascii: import{d as p,r as e,e as v,f as _,h as d,q as k,l as a,U as o,k as c,w as u,n as y}from"./index-41235507.js";const f=p({__name:"clickwrap-agreement",props:{lightTheme:{type:Boolean},buttonName:{}},setup(g){const n=e("/terms"),l=e("Terms"),s=e("/privacy")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50723	3.222.67.5	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:13 UTC	983	OUT	GET /cookie/set?tid=va6g28ar HTTP/1.1 Host: api.mywavehome.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBTGCORS=RU1achtf38RaaTH1Qz4qxIDScljKsTV0KOKCGPcElkeOpfEhrgVG0mSAIccapT/inRbrrV6G/0Oow0eBrZDFVn4rB/j3j3f4xx/i4F5BQ5oyB0iaIAX8TTTIxuBqzRegaQrTWEg8xCrEb7GTWiU1sgnWgOgr+pOht1zNy2/ywobp/uEcBzU=; data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3Anull%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669-lp0-obgc-wav-igwschFkPhfUSURKnCdkw-ab15-w64-btA-k52-vosox-capn-ineco1-spqlgroup-merch-brwsr%22%2C%22Implementation%22%3A%22wav-cvt%22%7D
2023-12-28 16:23:13 UTC	886	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Dec 2023 16:23:13 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALBTG=gMCYhvU7+N7lNCVkfqqKkrUbaSEIw7K8slfApqewNOhUaIl1timQknD2mtZEtfcIfydfIkpzs7RDRcl7b2dBpZdTnkgheLInj5lUS/gLpgdGnQ1J2Rnu33MKRccCG9799TYj/kfx9CbglBu74m7sM8Rq00XouTteWgvSVsLNSxVx2sK31DI=; Expires=Thu, 04 Jan 2024 16:23:13 GMT; Path=/ Set-Cookie: AWSALBTGCORS=gMCYhvU7+N7lNCVkfqqKkrUbaSEIw7K8slfApqewNOhUaIl1timQknD2mtZEtfcIfydfIkpzs7RDRcl7b2dBpZdTnkgheLInj5lUS/gLpgdGnQ1J2Rnu33MKRccCG9799TYj/kfx9CbglBu74m7sM8Rq00XouTteWgvSVsLNSxVx2sK31DI=; Expires=Thu, 04 Jan 2024 16:23:13 GMT; Path=/; SameSite=None; Secure Server: nginx X-Robots-Tag: noindex, nofollow Accept-CH: Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
2023-12-28 16:23:13 UTC	8	IN	Data Raw: 33 0d 0a 42 41 44 0d 0a Data Ascii: 3BAD
2023-12-28 16:23:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50727	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:14 UTC	3191	OUT	GET /assets/footer-d79f04a6.css HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz; AWSALBCORS=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz
2023-12-28 16:23:14 UTC	764	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:14 GMT Content-Type: text/css Content-Length: 1179 Connection: close Set-Cookie: AWSALB=sYezJgH9QBvAbMJm4YlxeXaZYv0hnmceHyz4txjq2Ep6tdYmlTb+N3Y9soUvuoGkmezyBoh+VC702e59gqwpbUm4YZqBx69tn/4j2ptucQ5rjxWdsfjnFXIc0IO6; Expires=Thu, 04 Jan 2024 16:23:14 GMT; Path=/ Set-Cookie: AWSALBCORS=sYezJgH9QBvAbMJm4YlxeXaZYv0hnmceHyz4txjq2Ep6tdYmlTb+N3Y9soUvuoGkmezyBoh+VC702e59gqwpbUm4YZqBx69tn/4j2ptucQ5rjxWdsfjnFXIc0IO6; Expires=Thu, 04 Jan 2024 16:23:14 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT Vary: Accept-Encoding ETag: "658d889d-49b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:14 UTC	1179	IN	Data Raw: 2e 66 6f 6f 74 65 72 7b 70 61 64 64 69 6e 67 3a 34 30 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 34 64 34 64 34 64 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 68 6f 6d 65 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 64 Data Ascii: .footer{padding:40px;border-bottom:1px solid #4d4d4d;width:100%;display:-webkit-box;display:-moz-box;display:-ms-flexbox;display:-webkit-flex;display:flex;justify-content:center;align-items:center;flex-direction:column}.home{color:#555;text-align:center;d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50728	143.204.165.57	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:14 UTC	653	OUT	POST /e/?compression=gzip-js&ip=1&_=1703780593417&ver=1.77.2 HTTP/1.1 Host: app.posthog.com Connection: keep-alive Content-Length: 695 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:14 UTC	695	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 54 ed 4e db 30 14 7d 97 68 cb 2f 52 9c a4 6d 12 a4 68 2a 5b a7 81 06 1b 20 86 26 84 22 c7 be 4e bc a6 b1 71 9c 84 0e f1 ee bb ee 18 74 62 d2 34 ed 47 14 f9 9c 63 df 0f 9f eb eb 7b af ef 25 f7 0e 3c 12 a6 ac 0c 63 16 d0 78 1a 05 c9 3c 26 41 2a ca 34 08 19 64 e1 2c 03 92 f1 a9 b7 e7 c1 00 ad 45 79 a3 83 46 51 8e 88 36 4a 83 b1 12 3a ef e0 de 7b a5 f0 e7 5d c9 96 ab b1 43 16 d7 c5 00 a6 93 aa 45 3c 24 13 e2 c0 d2 20 0b 06 91 b7 b5 51 6b 70 18 87 41 32 28 ec 46 03 e2 ef a0 5b 59 a5 1d c1 7a 63 30 68 d1 9b 06 89 da 5a dd 1d ec ef 33 d5 e2 b9 76 94 b6 1e e9 00 13 a6 d6 fb 6f 3a c3 72 1e 30 1d 91 28 49 a7 49 38 9f 67 be 2a 73 55 56 4c 95 c0 f1 5b fb 7c 60 39 f3 57 b9 90 0d bc 8e c8 e3 39 60 7c 66 6c 3e 4f 12 12 47 59 46 e6 59 e2 Data Ascii: TN0}h/Rmh[ &"Nqtb4Gc{%<cx<&A4d,EyFQ6J:{]CE<$ QkpA2(F[Yzc0hZ3vo:r0(II8g*sUVL[\|`9W9`\|fl>OGYFY
2023-12-28 16:23:14 UTC	603	IN	HTTP/1.1 200 OK Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Thu, 28 Dec 2023 16:23:14 GMT Access-Control-Allow-Origin: https://convertwithwave.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: X-Requested-With,Content-Type X-Content-Type-Options: nosniff Referrer-Policy: same-origin X-Cache: Miss from cloudfront Via: 1.1 8ef95d493d865f4668c02b9fe8b8f1e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW3-C1 X-Amz-Cf-Id: 3vh8rC2dhAKT_aabcvtt0nbG4Ei1ki8aqFUMp5O9Exw-DR8xX88tow==
2023-12-28 16:23:14 UTC	18	IN	Data Raw: 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 20 31 7d 0d 0a Data Ascii: d{"status": 1}
2023-12-28 16:23:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50730	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:14 UTC	3207	OUT	GET /assets/Pitch.ConvertYourFiles-e80fe9b2.css HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz; AWSALBCORS=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz
2023-12-28 16:23:14 UTC	765	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:14 GMT Content-Type: text/css Content-Length: 6317 Connection: close Set-Cookie: AWSALB=SkhZ56IeUIfpSJNY2tPTVybUP9BBnshCixtVdZN8OGat51FMcYaXFwuQGk+Bk1R5Eg8l4fKalGGCS+bo7YLIUaPxnDKmKTffndJHO2ORXhikXUj3aiH1XG7poONa; Expires=Thu, 04 Jan 2024 16:23:14 GMT; Path=/ Set-Cookie: AWSALBCORS=SkhZ56IeUIfpSJNY2tPTVybUP9BBnshCixtVdZN8OGat51FMcYaXFwuQGk+Bk1R5Eg8l4fKalGGCS+bo7YLIUaPxnDKmKTffndJHO2ORXhikXUj3aiH1XG7poONa; Expires=Thu, 04 Jan 2024 16:23:14 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT Vary: Accept-Encoding ETag: "658d889d-18ad" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:14 UTC	6317	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 2d 2d 61 6e 69 6d 61 74 65 64 61 72 72 6f 77 5f 6f 6e 20 2e 64 6f 77 6e 6c 6f 61 64 5f 5f 64 69 73 63 6c 61 69 6d 65 72 5b 64 61 74 61 2d 76 2d 37 38 66 32 30 30 37 61 5d 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 2d 32 30 70 78 7d 2e 2d 2d 61 6e 69 6d 61 74 65 64 61 72 72 6f 77 5f 6f 6e 20 2e 64 65 73 63 72 69 70 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 73 5b 64 61 74 61 2d 76 2d 37 38 66 32 30 30 37 61 5d 7b 67 61 70 3a 33 32 70 78 7d 2e 2d 2d 61 6e 69 6d 61 74 65 64 61 72 72 6f 77 5f 6f 6e 20 70 61 74 68 2e 6f 6e 65 5b 64 61 74 61 2d 76 2d 37 38 66 32 30 30 37 61 5d 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 34 73 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 Data Ascii: @charset "UTF-8";.--animatedarrow_on .download__disclaimer[data-v-78f2007a]{position:absolute;bottom:-20px}.--animatedarrow_on .description-columns[data-v-78f2007a]{gap:32px}.--animatedarrow_on path.one[data-v-78f2007a]{transition:.4s;transform:translate(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50733	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:14 UTC	2983	OUT	GET /assets/Pitch.ConvertYourFiles-769fe8bb.js HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://convertwithwave.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz; AWSALBCORS=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz
2023-12-28 16:23:14 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:14 GMT Content-Type: application/javascript Content-Length: 8562 Connection: close Set-Cookie: AWSALB=ZO2F0elUh2w20rUm2LOgOMsP3AY1/QYEZUK86BCX6HDgTvjomxtxxftAuFqcZvxnL6vMvdEFKNG/YmkxuQ36xpBFSDAzwsW16UWsRo2VN0y6VBsPrcbaVfhrEw+2; Expires=Thu, 04 Jan 2024 16:23:14 GMT; Path=/ Set-Cookie: AWSALBCORS=ZO2F0elUh2w20rUm2LOgOMsP3AY1/QYEZUK86BCX6HDgTvjomxtxxftAuFqcZvxnL6vMvdEFKNG/YmkxuQ36xpBFSDAzwsW16UWsRo2VN0y6VBsPrcbaVfhrEw+2; Expires=Thu, 04 Jan 2024 16:23:14 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT Vary: Accept-Encoding ETag: "658d889d-2172" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:14 UTC	8562	IN	Data Raw: 69 6d 70 6f 72 74 7b 5f 20 61 73 20 4e 7d 66 72 6f 6d 22 2e 2f 62 72 69 67 68 74 2d 67 72 65 65 6e 2d 61 72 72 6f 77 2d 35 61 63 64 65 62 31 63 2e 6a 73 22 3b 69 6d 70 6f 72 74 7b 64 20 61 73 20 4d 2c 44 20 61 73 20 54 2c 61 31 20 61 73 20 56 2c 75 20 61 73 20 57 2c 63 20 61 73 20 75 2c 69 20 61 73 20 71 2c 61 33 20 61 73 20 7a 2c 61 34 20 61 73 20 59 2c 4a 20 61 73 20 24 2c 61 35 20 61 73 20 4f 2c 72 20 61 73 20 77 2c 6f 20 61 73 20 55 2c 65 20 61 73 20 79 2c 66 20 61 73 20 64 2c 68 20 61 73 20 5f 2c 6a 20 61 73 20 74 2c 6b 20 61 73 20 63 2c 6e 2c 77 20 61 73 20 68 2c 6d 20 61 73 20 78 2c 61 36 20 61 73 20 5a 2c 6c 20 61 73 20 6f 2c 56 20 61 73 20 48 2c 61 37 20 61 73 20 47 2c 51 20 61 73 20 4a 2c 52 20 61 73 20 51 2c 53 20 61 73 20 4b 7d 66 72 6f 6d 22 Data Ascii: import{_ as N}from"./bright-green-arrow-5acdeb1c.js";import{d as M,D as T,a1 as V,u as W,c as u,i as q,a3 as z,a4 as Y,J as $,a5 as O,r as w,o as U,e as y,f as d,h as _,j as t,k as c,n,w as h,m as x,a6 as Z,l as o,V as H,a7 as G,Q as J,R as Q,S as K}from"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50731	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:14 UTC	2979	OUT	GET /assets/bright-green-arrow-5acdeb1c.js HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://convertwithwave.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz; AWSALBCORS=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz
2023-12-28 16:23:14 UTC	752	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:14 GMT Content-Type: application/javascript Content-Length: 72 Connection: close Set-Cookie: AWSALB=hy6MEoMk2c8okY+fLA6SO1X1EjmQw9noNVELzHyrpGXDzb3lYyWwJE5a9fV14RazpoQ52BiTMJSgFUjuoJ9ReDr4yZioyn+gRR4jWF/mflVJiNAKJcsDfe0xW0M9; Expires=Thu, 04 Jan 2024 16:23:14 GMT; Path=/ Set-Cookie: AWSALBCORS=hy6MEoMk2c8okY+fLA6SO1X1EjmQw9noNVELzHyrpGXDzb3lYyWwJE5a9fV14RazpoQ52BiTMJSgFUjuoJ9ReDr4yZioyn+gRR4jWF/mflVJiNAKJcsDfe0xW0M9; Expires=Thu, 04 Jan 2024 16:23:14 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT ETag: "658d889d-48" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:14 UTC	72	IN	Data Raw: 63 6f 6e 73 74 20 6f 3d 22 2f 62 67 62 2f 6f 6c 64 2d 73 63 68 6f 6f 6c 2d 69 6d 61 67 65 73 2f 62 72 69 67 68 74 2d 67 72 65 65 6e 2d 61 72 72 6f 77 2e 73 76 67 22 3b 65 78 70 6f 72 74 7b 6f 20 61 73 20 5f 7d 3b 0a Data Ascii: const o="/bgb/old-school-images/bright-green-arrow.svg";export{o as _};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50732	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:14 UTC	2999	OUT	GET /assets/footer.vue_vue_type_style_index_0_lang-10a79430.js HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://convertwithwave.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz; AWSALBCORS=OVXBZMe26phciGDnFf0vlL40P1nZcwKBvbzhmUnAwZoiPgBFdeFFf8k5mc+DKAMkWHWF/a7hP+2llnZqGbu96TyUa5U+7pn9gXGSgBkTwonZyi0J/BKeRQwk/1Dz
2023-12-28 16:23:14 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:14 GMT Content-Type: application/javascript Content-Length: 1904 Connection: close Set-Cookie: AWSALB=TDZ905rnQJlXcaJAo57gXQFkX8ogBnlKINRVaWy1HN/UsKRXTHpqVkiPh6ZCc+GAD/EtMa7aXo0kECRfgyNFOJUgbB9eIhwChBrQNJ3zGdSGRFmHkTPP3dkITzBO; Expires=Thu, 04 Jan 2024 16:23:14 GMT; Path=/ Set-Cookie: AWSALBCORS=TDZ905rnQJlXcaJAo57gXQFkX8ogBnlKINRVaWy1HN/UsKRXTHpqVkiPh6ZCc+GAD/EtMa7aXo0kECRfgyNFOJUgbB9eIhwChBrQNJ3zGdSGRFmHkTPP3dkITzBO; Expires=Thu, 04 Jan 2024 16:23:14 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:25 GMT Vary: Accept-Encoding ETag: "658d889d-770" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:14 UTC	1904	IN	Data Raw: 69 6d 70 6f 72 74 7b 64 20 61 73 20 5f 2c 67 20 61 73 20 6d 2c 61 20 61 73 20 64 2c 65 20 61 73 20 72 2c 66 2c 68 20 61 73 20 70 2c 6a 20 61 73 20 65 2c 6b 20 61 73 20 61 2c 77 20 61 73 20 69 2c 6c 20 61 73 20 6f 2c 73 20 61 73 20 68 2c 58 20 61 73 20 75 2c 59 20 61 73 20 79 2c 5a 20 61 73 20 6b 2c 24 20 61 73 20 50 7d 66 72 6f 6d 22 2e 2f 69 6e 64 65 78 2d 34 31 32 33 35 35 30 37 2e 6a 73 22 3b 63 6f 6e 73 74 20 62 3d 7b 63 6c 61 73 73 3a 22 66 6f 6f 74 65 72 22 7d 2c 77 3d 7b 63 6c 61 73 73 3a 22 66 6f 6f 74 65 72 2d 6d 65 6e 75 20 6d 65 6e 75 22 7d 2c 67 3d 7b 63 6c 61 73 73 3a 22 6d 65 6e 75 5f 5f 69 74 65 6d 22 7d 2c 76 3d 7b 63 6c 61 73 73 3a 22 6d 65 6e 75 5f 5f 69 74 65 6d 22 7d 2c 43 3d 7b 63 6c 61 73 73 3a 22 6d 65 6e 75 5f 5f 69 74 65 6d 22 7d Data Ascii: import{d as _,g as m,a as d,e as r,f,h as p,j as e,k as a,w as i,l as o,s as h,X as u,Y as y,Z as k,$ as P}from"./index-41235507.js";const b={class:"footer"},w={class:"footer-menu menu"},g={class:"menu__item"},v={class:"menu__item"},C={class:"menu__item"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50734	143.204.165.47	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:14 UTC	393	OUT	GET /e/?compression=gzip-js&ip=1&_=1703780593417&ver=1.77.2 HTTP/1.1 Host: app.posthog.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:15 UTC	404	IN	HTTP/1.1 400 Bad Request Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Thu, 28 Dec 2023 16:23:15 GMT X-Content-Type-Options: nosniff Referrer-Policy: same-origin X-Cache: Error from cloudfront Via: 1.1 871abd31ed2f2a8508f2e7a8d31ba420.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW3-C1 X-Amz-Cf-Id: m6sf-z9rhzkA3Q3nugRM7ICnxTsNzBGL5IEptM-OHFWFTZBsUjGjqA==
2023-12-28 16:23:15 UTC	180	IN	Data Raw: 61 65 0d 0a 7b 22 74 79 70 65 22 3a 20 22 76 61 6c 69 64 61 74 69 6f 6e 5f 65 72 72 6f 72 22 2c 20 22 63 6f 64 65 22 3a 20 22 6e 6f 5f 64 61 74 61 22 2c 20 22 64 65 74 61 69 6c 22 3a 20 22 4e 6f 20 64 61 74 61 20 66 6f 75 6e 64 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 73 65 20 61 20 50 4f 53 54 20 72 65 71 75 65 73 74 20 77 68 65 6e 20 73 65 6e 64 69 6e 67 20 74 68 65 20 70 61 79 6c 6f 61 64 20 69 6e 20 74 68 65 20 62 6f 64 79 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 2e 22 2c 20 22 61 74 74 72 22 3a 20 6e 75 6c 6c 7d 0d 0a Data Ascii: ae{"type": "validation_error", "code": "no_data", "detail": "No data found. Make sure to use a POST request when sending the payload in the body of the request.", "attr": null}
2023-12-28 16:23:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50735	142.250.115.147	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:15 UTC	1641	OUT	GET /pagead/1p-user-list/11219589166/?random=1703780591807&cv=11&fst=1703779200000&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9123342550&u_w=1280&u_h=1024&url=https%3A%2F%2Fconvertwithwave.com%2F%3Fsrc%3Dd-cp20278471669%26ob%3Dobgcobedobem%26dvc%3Dc%26k%3Dfile%2520converter%26crt%3D677032990697%26adp%3D%26plc%3Dwww.mediafire.com%26tgt%3D%26sl%3D%26cpd%3D20278471669%26iid%3Dwav-cvt%26gclid%3DEAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE&ref=https%3A%2F%2Fwww.mediafire.com%2F&frm=0&tiba=Wave%20Browser%20-%20Efficient%2C%20Intuitive%20and%20Personal%20Web%20Browser&userId=af779c44-13ad-47a2-ad3d-9786811ff14d&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_P3-Dbf-nR6tUSuUOeKVnQ_MYRvi81TQu4Kqe0Z8o_TkUxmdw&random=2207777249&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:23:15 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:23:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:23:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50736	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:15 UTC	3243	OUT	GET /wave-ico/svg/wavebrowser-128.svg HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=ZO2F0elUh2w20rUm2LOgOMsP3AY1/QYEZUK86BCX6HDgTvjomxtxxftAuFqcZvxnL6vMvdEFKNG/YmkxuQ36xpBFSDAzwsW16UWsRo2VN0y6VBsPrcbaVfhrEw+2; AWSALBCORS=ZO2F0elUh2w20rUm2LOgOMsP3AY1/QYEZUK86BCX6HDgTvjomxtxxftAuFqcZvxnL6vMvdEFKNG/YmkxuQ36xpBFSDAzwsW16UWsRo2VN0y6VBsPrcbaVfhrEw+2
2023-12-28 16:23:15 UTC	747	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:15 GMT Content-Type: image/svg+xml Content-Length: 9157 Connection: close Set-Cookie: AWSALB=3qecRPEG0CaUKFncHnAtSkWEYyV19aQ2086YvA+N7mVbVcqKJP6mB1RdtGgXARXcLkedOYxR94sgrQYZAiFOQKLduJ9SM+aBSuBEXtbS2AorZEYowF5gCoVZuKuV; Expires=Thu, 04 Jan 2024 16:23:15 GMT; Path=/ Set-Cookie: AWSALBCORS=3qecRPEG0CaUKFncHnAtSkWEYyV19aQ2086YvA+N7mVbVcqKJP6mB1RdtGgXARXcLkedOYxR94sgrQYZAiFOQKLduJ9SM+aBSuBEXtbS2AorZEYowF5gCoVZuKuV; Expires=Thu, 04 Jan 2024 16:23:15 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:23 GMT ETag: "658d889b-23c5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:15 UTC	9157	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 0a 20 20 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 0a 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 38 20 31 32 38 22 0a 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 0a 20 20 20 73 6f 64 69 70 6f 64 69 3a 64 6f 63 6e 61 6d 65 3d 22 77 61 76 65 62 72 6f 77 73 65 72 2d 31 32 38 2e 73 76 67 22 0a 20 20 20 69 6e 6b 73 63 61 70 65 3a 76 65 72 73 69 6f 6e 3d 22 31 2e 32 2e 32 20 28 62 30 61 38 34 38 36 35 34 31 2c 20 32 30 32 32 2d 31 32 2d 30 31 29 22 0a 20 20 20 77 69 64 74 68 3d 22 31 32 38 22 0a 20 20 20 68 65 69 67 68 74 3d 22 31 32 38 22 0a 20 20 20 69 6e 6b 73 63 61 70 65 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg id="Layer_1" viewBox="0 0 128 128" version="1.1" sodipodi:docname="wavebrowser-128.svg" inkscape:version="1.2.2 (b0a8486541, 2022-12-01)" width="128" height="128" inkscape

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50737	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:15 UTC	3255	OUT	GET /bgb/old-school-images/bright-green-arrow.svg HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=ZO2F0elUh2w20rUm2LOgOMsP3AY1/QYEZUK86BCX6HDgTvjomxtxxftAuFqcZvxnL6vMvdEFKNG/YmkxuQ36xpBFSDAzwsW16UWsRo2VN0y6VBsPrcbaVfhrEw+2; AWSALBCORS=ZO2F0elUh2w20rUm2LOgOMsP3AY1/QYEZUK86BCX6HDgTvjomxtxxftAuFqcZvxnL6vMvdEFKNG/YmkxuQ36xpBFSDAzwsW16UWsRo2VN0y6VBsPrcbaVfhrEw+2
2023-12-28 16:23:15 UTC	745	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:15 GMT Content-Type: image/svg+xml Content-Length: 298 Connection: close Set-Cookie: AWSALB=PbQExy6/Em2dDJPYVJacQy2XB1cpu0C06wp2jhnQpnU+wuJlxB7rS+OnmYEgD76pVAEj9Ix7uB9dAc0reg8vV2tustzAwbfFL58W6c3nX0QhEaqktwzjSczQ4Z5L; Expires=Thu, 04 Jan 2024 16:23:15 GMT; Path=/ Set-Cookie: AWSALBCORS=PbQExy6/Em2dDJPYVJacQy2XB1cpu0C06wp2jhnQpnU+wuJlxB7rS+OnmYEgD76pVAEj9Ix7uB9dAc0reg8vV2tustzAwbfFL58W6c3nX0QhEaqktwzjSczQ4Z5L; Expires=Thu, 04 Jan 2024 16:23:15 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:23 GMT ETag: "658d889b-12a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:15 UTC	298	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 5f c3 91 c3 ab c3 ae c3 a9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 30 20 32 31 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 35 66 31 30 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 6d 33 36 30 2c 37 32 4c 32 31 36 2c 30 6c 32 37 2c 34 35 63 2d 39 2e 37 39 2c 30 2c 32 2e 37 37 2c 30 2d 31 38 2c 30 43 38 31 2c 34 35 2c 30 2c 32 31 36 2c 30 2c 32 31 36 63 30 2c 30 2c 37 32 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="__1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 360 216"><defs><style>.cls-1{fill:#05f106;}</style></defs><path class="cls-1" d="m360,72L216,0l27,45c-9.79,0,2.77,0-18,0C81,45,0,216,0,216c0,0,72-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50739	142.251.116.99	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:15 UTC	1402	OUT	GET /pagead/1p-user-list/11219589166/?random=1703780591807&cv=11&fst=1703779200000&bg=ffffff&guid=ON&async=1&gtm=45be3bt0v9123342550&u_w=1280&u_h=1024&url=https%3A%2F%2Fconvertwithwave.com%2F%3Fsrc%3Dd-cp20278471669%26ob%3Dobgcobedobem%26dvc%3Dc%26k%3Dfile%2520converter%26crt%3D677032990697%26adp%3D%26plc%3Dwww.mediafire.com%26tgt%3D%26sl%3D%26cpd%3D20278471669%26iid%3Dwav-cvt%26gclid%3DEAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE&ref=https%3A%2F%2Fwww.mediafire.com%2F&frm=0&tiba=Wave%20Browser%20-%20Efficient%2C%20Intuitive%20and%20Personal%20Web%20Browser&userId=af779c44-13ad-47a2-ad3d-9786811ff14d&data=event%3Dgtag.config%3Btransport_type%3Dbeacon&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_P3-Dbf-nR6tUSuUOeKVnQ_MYRvi81TQu4Kqe0Z8o_TkUxmdw&random=2207777249&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:23:15 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Dec 2023 16:23:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-28 16:23:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50740	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:15 UTC	2560	OUT	GET /bgb/old-school-images/bright-green-arrow.svg HTTP/1.1 Host: convertwithwave.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=3qecRPEG0CaUKFncHnAtSkWEYyV19aQ2086YvA+N7mVbVcqKJP6mB1RdtGgXARXcLkedOYxR94sgrQYZAiFOQKLduJ9SM+aBSuBEXtbS2AorZEYowF5gCoVZuKuV; AWSALBCORS=3qecRPEG0CaUKFncHnAtSkWEYyV19aQ2086YvA+N7mVbVcqKJP6mB1RdtGgXARXcLkedOYxR94sgrQYZAiFOQKLduJ9SM+aBSuBEXtbS2AorZEYowF5gCoVZuKuV
2023-12-28 16:23:15 UTC	745	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:15 GMT Content-Type: image/svg+xml Content-Length: 298 Connection: close Set-Cookie: AWSALB=t9uQPejPjvoh/9gfwoXTbj7ymyGwlZeqAYkUVrpPAhSxysypwr4TQFoXokF/xrJjql+EgumUU39NMZLuOoPyryHY8E+AFbJVRrp0esUTJr+zIna5KFpNtWfsREQq; Expires=Thu, 04 Jan 2024 16:23:15 GMT; Path=/ Set-Cookie: AWSALBCORS=t9uQPejPjvoh/9gfwoXTbj7ymyGwlZeqAYkUVrpPAhSxysypwr4TQFoXokF/xrJjql+EgumUU39NMZLuOoPyryHY8E+AFbJVRrp0esUTJr+zIna5KFpNtWfsREQq; Expires=Thu, 04 Jan 2024 16:23:15 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:23 GMT ETag: "658d889b-12a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:15 UTC	298	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 5f c3 91 c3 ab c3 ae c3 a9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 30 20 32 31 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 35 66 31 30 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 6d 33 36 30 2c 37 32 4c 32 31 36 2c 30 6c 32 37 2c 34 35 63 2d 39 2e 37 39 2c 30 2c 32 2e 37 37 2c 30 2d 31 38 2c 30 43 38 31 2c 34 35 2c 30 2c 32 31 36 2c 30 2c 32 31 36 63 30 2c 30 2c 37 32 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="__1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 360 216"><defs><style>.cls-1{fill:#05f106;}</style></defs><path class="cls-1" d="m360,72L216,0l27,45c-9.79,0,2.77,0-18,0C81,45,0,216,0,216c0,0,72-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50741	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:15 UTC	2548	OUT	GET /wave-ico/svg/wavebrowser-128.svg HTTP/1.1 Host: convertwithwave.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=3qecRPEG0CaUKFncHnAtSkWEYyV19aQ2086YvA+N7mVbVcqKJP6mB1RdtGgXARXcLkedOYxR94sgrQYZAiFOQKLduJ9SM+aBSuBEXtbS2AorZEYowF5gCoVZuKuV; AWSALBCORS=3qecRPEG0CaUKFncHnAtSkWEYyV19aQ2086YvA+N7mVbVcqKJP6mB1RdtGgXARXcLkedOYxR94sgrQYZAiFOQKLduJ9SM+aBSuBEXtbS2AorZEYowF5gCoVZuKuV
2023-12-28 16:23:16 UTC	747	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:16 GMT Content-Type: image/svg+xml Content-Length: 9157 Connection: close Set-Cookie: AWSALB=7ps+oVWdJAqdl6eMu+q1NzpJUlhS1BZ1tLOCVHvzmqhqSZ7rYwpvflYlzNKuioWHve5bH6j6hOfYcqYGz9ZYQKsxkci6ajWmme+XG1v56Ig+WiucIqTjy9MTSdGl; Expires=Thu, 04 Jan 2024 16:23:16 GMT; Path=/ Set-Cookie: AWSALBCORS=7ps+oVWdJAqdl6eMu+q1NzpJUlhS1BZ1tLOCVHvzmqhqSZ7rYwpvflYlzNKuioWHve5bH6j6hOfYcqYGz9ZYQKsxkci6ajWmme+XG1v56Ig+WiucIqTjy9MTSdGl; Expires=Thu, 04 Jan 2024 16:23:16 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:23 GMT ETag: "658d889b-23c5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:16 UTC	9157	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 0a 20 20 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 0a 20 20 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 38 20 31 32 38 22 0a 20 20 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 0a 20 20 20 73 6f 64 69 70 6f 64 69 3a 64 6f 63 6e 61 6d 65 3d 22 77 61 76 65 62 72 6f 77 73 65 72 2d 31 32 38 2e 73 76 67 22 0a 20 20 20 69 6e 6b 73 63 61 70 65 3a 76 65 72 73 69 6f 6e 3d 22 31 2e 32 2e 32 20 28 62 30 61 38 34 38 36 35 34 31 2c 20 32 30 32 32 2d 31 32 2d 30 31 29 22 0a 20 20 20 77 69 64 74 68 3d 22 31 32 38 22 0a 20 20 20 68 65 69 67 68 74 3d 22 31 32 38 22 0a 20 20 20 69 6e 6b 73 63 61 70 65 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg id="Layer_1" viewBox="0 0 128 128" version="1.1" sodipodi:docname="wavebrowser-128.svg" inkscape:version="1.2.2 (b0a8486541, 2022-12-01)" width="128" height="128" inkscape

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50743	104.18.31.234	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:16 UTC	528	OUT	GET /embed.min.js HTTP/1.1 Host: app.termly.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:16 UTC	589	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:16 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 20 Dec 2023 18:04:13 GMT ETag: W/"65832c9d-102d1b" Strict-Transport-Security: max-age=15768000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Referrer-Policy: no-referrer CF-Cache-Status: HIT Age: 6103 Expires: Thu, 28 Dec 2023 20:23:16 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 83cb2597ab70a9ec-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:23:16 UTC	780	IN	Data Raw: 37 64 36 33 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 65 6d 62 65 64 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 31 34 33 36 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 24 36 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 4f 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 51 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 58 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 67 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: 7d63/! For license information please see embed.min.js.LICENSE.txt /!function(){var e,t,n,r,o={14369:function(e,t,n){"use strict";n.d(t,{$6:function(){return d},OV:function(){return s},Qe:function(){return c},X9:function(){return l},gb:function(){ret
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 6f 66 20 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 26 26 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 69 2c 74 29 2c 69 7d 72 65 74 75 72 6e 28 30 2c 6f 2e 5a 54 29 28 74 2c 65 29 2c 74 7d 28 45 72 72 6f 72 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2e 55 4e 53 55 50 50 4f 52 54 45 44 5f 46 4f 52 4d 41 54 54 45 52 2c 74 2c 6e 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 28 30 2c 6f 2e 5a 54 29 28 74 2c 65 29 2c 74 7d 28 69 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2e 49 4e 56 41 4c Data Ascii: of Error.captureStackTrace&&Error.captureStackTrace(i,t),i}return(0,o.ZT)(t,e),t}(Error),a=function(e){function t(t,n){return e.call(this,r.UNSUPPORTED_FORMATTER,t,n)\|\|this}return(0,o.ZT)(t,e),t}(i),s=function(e){function t(t,n){return e.call(this,r.INVAL
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 2c 53 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 54 42 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 5a 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 61 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 33 32 39 32 34 29 2c 6f 3d 6e 28 33 32 34 32 37 29 2c 69 3d 6e 28 35 39 33 31 32 29 2c 61 3d 6e 28 31 34 33 36 39 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 7b 7d 29 2c 74 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 72 20 69 6e 20 65 3f 74 5b 72 5d 3d 65 5b 72 5d 3a 72 20 69 6e 20 6e 26 26 28 74 5b 72 5d 3d 6e 5b Data Ascii: ,Sn:function(){return c},TB:function(){return f},Z0:function(){return u},ax:function(){return d}});var r=n(32924),o=n(32427),i=n(59312),a=n(14369);function s(e,t,n){return void 0===n&&(n={}),t.reduce((function(t,r){return r in e?t[r]=e[r]:r in n&&(t[r]=n[
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 21 31 29 29 29 7d 29 2c 7b 63 61 63 68 65 3a 6c 28 65 2e 70 6c 75 72 61 6c 52 75 6c 65 73 29 2c 73 74 72 61 74 65 67 79 3a 69 2e 41 2e 76 61 72 69 61 64 69 63 7d 29 3b 72 65 74 75 72 6e 7b 67 65 74 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 3a 73 2c 67 65 74 4e 75 6d 62 65 72 46 6f 72 6d 61 74 3a 75 2c 67 65 74 4d 65 73 73 61 67 65 46 6f 72 6d 61 74 3a 28 30 2c 69 2e 48 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6f 2e 43 28 65 2c 74 2c 6e 2c 28 30 2c 72 2e 70 69 29 28 7b 66 6f 72 6d 61 74 74 65 72 73 3a 7b 67 65 74 4e 75 6d 62 65 72 46 6f 72 6d 61 74 3a 75 2c 67 65 74 44 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 3a 73 2c 67 65 74 50 6c 75 72 61 6c 52 75 6c 65 73 3a 63 7d 7d 2c 69 7c 7c 7b 7d 29 29 7d 29 2c Data Ascii: !1)))}),{cache:l(e.pluralRules),strategy:i.A.variadic});return{getDateTimeFormat:s,getNumberFormat:u,getMessageFormat:(0,i.H)((function(e,t,n,i){return new o.C(e,t,n,(0,r.pi)({formatters:{getNumberFormat:u,getDateTimeFormat:s,getPluralRules:c}},i\|\|{}))}),
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 6f 6c 6f 72 22 2c 22 64 69 73 61 62 6c 65 64 22 2c 22 68 61 6e 64 6c 65 43 6c 69 63 6b 22 2c 22 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 22 2c 22 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 22 2c 22 74 79 70 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6e 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 6f 3d 65 2e 63 6f 6c 6f 72 2c 69 3d 65 2e 64 69 73 61 62 6c 65 64 2c 63 3d 65 2e 68 61 6e 64 6c 65 43 6c 69 63 6b 2c 64 3d 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 2c 66 3d 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 2c 6d 3d 65 2e 74 79 70 65 2c 79 3d 28 30 2c 75 2e 5a 29 28 65 2c 68 29 2c 67 3d 28 30 2c 72 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 Data Ascii: olor","disabled","handleClick","preventDefault","stopPropagation","type"];function y(e){var t=e.children,n=e.className,o=e.color,i=e.disabled,c=e.handleClick,d=e.preventDefault,f=e.stopPropagation,m=e.type,y=(0,u.Z)(e,h),g=(0,r.useCallback)((function(e){i
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 72 22 2c 6e 75 6c 6c 29 2c 22 49 66 20 65 6e 61 62 6c 65 64 2c 20 22 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 22 2c 6e 75 6c 6c 2c 74 29 2c 22 20 6d 61 79 20 63 6f 6c 6c 65 63 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 79 6f 75 72 20 61 63 74 69 76 69 74 79 2e 22 29 5d 3b 72 65 74 75 72 6e 20 6e 26 26 6f 2e 70 75 73 68 28 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 2e 46 72 61 67 6d 65 6e 74 2c 7b 6b 65 79 3a 22 62 22 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 72 22 2c 6e 75 6c 6c 29 2c 22 4d 61 6e 61 67 65 20 70 72 65 66 65 72 65 6e 63 65 73 20 74 6f 20 61 6c 77 61 79 73 20 61 6c 6c 6f 77 20 74 68 69 73 20 63 6f 6e 74 65 6e 74 2e 22 29 29 2c 6f 7d 28 7b Data Ascii: reateElement("br",null),"If enabled, ",r.createElement("b",null,t)," may collect information about your activity.")];return n&&o.push(r.createElement(r.Fragment,{key:"b"},r.createElement("br",null),"Manage preferences to always allow this content.")),o}({
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 7d 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 68 7d 29 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 77 2e 6c 61 62 65 6c 7d 2c 6e 29 29 7d 54 2e 70 72 6f 70 54 79 70 65 73 3d 7b 68 61 6e 64 6c 65 43 6c 69 63 6b 3a 69 28 29 2e 66 75 6e 63 2e 69 73 52 65 71 75 69 72 65 64 2c 6c 61 62 65 6c 3a 69 28 29 2e 6e 6f 64 65 2c 63 68 65 63 6b 65 64 3a 69 28 29 2e 62 6f 6f 6c 2c 63 6c 61 73 73 4e 61 6d 65 3a 69 28 29 2e 73 74 72 69 6e 67 2c 64 69 73 61 62 6c 65 64 3a 69 28 29 2e 62 6f 6f 6c 2c 6e 61 6d 65 3a 69 28 29 2e 73 74 72 69 6e 67 2c 76 61 6c 75 65 3a 69 28 29 2e 61 6e 79 7d 3b 76 61 72 20 6b 3d 54 2c 53 3d 6e 28 34 30 37 37 32 29 2c 44 3d 28 Data Ascii: }),r.createElement("div",{className:h}),r.createElement("div",{className:w.label},n))}T.propTypes={handleClick:i().func.isRequired,label:i().node,checked:i().bool,className:i().string,disabled:i().bool,name:i().string,value:i().any};var k=T,S=n(40772),D=(
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 73 73 4e 61 6d 65 3a 6f 2c 73 74 79 6c 65 3a 69 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 76 67 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6a 2e 73 70 69 6e 6e 65 72 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 35 30 20 35 30 22 7d 2c 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 69 72 63 6c 65 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6a 2e 70 61 74 68 2c 63 78 3a 22 32 35 22 2c 63 79 3a 22 32 35 22 2c 72 3a 22 32 33 2e 35 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 22 33 22 7d 29 29 29 7d 59 2e 70 72 6f 70 54 79 70 65 73 3d 7b 63 6c 61 73 73 4e 61 6d 65 3a 69 28 29 2e 73 74 72 69 6e 67 2c 63 69 72 63 6c 65 43 6f 6c 6f 72 3a 69 28 29 2e 73 74 72 69 6e 67 7d 3b 76 61 72 20 43 3d 59 3b 6e 28 32 34 32 38 30 Data Ascii: ssName:o,style:i},r.createElement("svg",{className:j.spinner,viewBox:"0 0 50 50"},r.createElement("circle",{className:j.path,cx:"25",cy:"25",r:"23.5",fill:"none",strokeWidth:"3"})))}Y.propTypes={className:i().string,circleColor:i().string};var C=Y;n(24280
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 6e 74 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 63 74 6f 6e 73 6f 66 74 77 61 72 65 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 63 75 69 74 79 70 6c 61 74 66 6f 72 6d 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 64 2d 73 72 76 2e 6e 65 74 22 3a 75 2e 72 4f 2c 22 61 64 31 78 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 64 36 6d 65 64 69 61 2e 66 72 22 3a 75 2e 72 4f 2c 22 61 64 61 2e 73 75 70 70 6f 72 74 22 3a 75 2e 4b 53 2c 22 61 64 61 63 61 64 6f 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 64 61 64 76 69 73 6f 72 2e 6e 65 74 22 3a 75 2e 72 4f 2c 22 61 64 61 64 79 6e 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 64 61 6c 79 73 65 72 2e 63 6f 6d 22 3a 75 2e 73 55 2c 22 61 64 61 6f 73 2d 61 64 73 2e 6e 65 74 22 3a 75 2e 72 4f 2c 22 61 64 61 70 2e 74 76 22 3a 75 2e 72 4f 2c 22 61 64 61 70 Data Ascii: nt.com":u.rO,"actonsoftware.com":u.rO,"acuityplatform.com":u.rO,"ad-srv.net":u.rO,"ad1x.com":u.rO,"ad6media.fr":u.rO,"ada.support":u.KS,"adacado.com":u.rO,"adadvisor.net":u.rO,"adadyn.com":u.rO,"adalyser.com":u.sU,"adaos-ads.net":u.rO,"adap.tv":u.rO,"adap
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 72 4f 2c 22 61 64 73 63 69 65 6e 63 65 2e 6e 6c 22 3a 75 2e 72 4f 2c 22 61 64 73 63 6f 2e 72 65 22 3a 75 2e 72 4f 2c 22 61 64 73 65 72 76 65 72 30 31 2e 64 65 22 3a 75 2e 72 4f 2c 22 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 22 3a 75 2e 72 4f 2c 22 61 64 73 69 64 75 6f 75 73 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 64 73 6e 61 74 69 76 65 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 64 73 6f 6e 61 72 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 64 73 70 65 65 64 2e 6e 65 74 22 3a 75 2e 72 4f 2c 22 61 64 73 70 72 75 63 65 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 64 73 74 68 65 61 61 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 64 73 77 69 7a 7a 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 64 73 79 6d 70 74 6f 74 69 63 2e 63 6f 6d 22 3a 75 2e 72 4f 2c 22 61 64 74 65 63 68 2e Data Ascii: rO,"adscience.nl":u.rO,"adsco.re":u.rO,"adserver01.de":u.rO,"adservice.google.":u.rO,"adsiduous.com":u.rO,"adsnative.com":u.rO,"adsonar.com":u.rO,"adspeed.net":u.rO,"adspruce.com":u.rO,"adstheaa.com":u.rO,"adswizz.com":u.rO,"adsymptotic.com":u.rO,"adtech.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50744	104.18.31.234	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:16 UTC	535	OUT	GET /embed-policy.min.js HTTP/1.1 Host: app.termly.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:16 UTC	588	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:16 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 20 Dec 2023 18:04:13 GMT ETag: W/"65832c9d-a2aec" Strict-Transport-Security: max-age=15768000; includeSubDomains; preload X-Content-Type-Options: nosniff X-Xss-Protection: 1; mode=block Referrer-Policy: no-referrer CF-Cache-Status: HIT Age: 1459 Expires: Thu, 28 Dec 2023 20:23:16 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 83cb2597aca246d8-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:23:16 UTC	781	IN	Data Raw: 37 64 36 34 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 65 6d 62 65 64 2d 70 6f 6c 69 63 79 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 35 35 38 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 32 37 32 39 29 2c 61 3d 6e 2e 6e 28 72 29 28 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 7d 29 29 3b 61 2e 70 75 73 68 28 5b 65 2e 69 64 2c 27 2e 67 74 4b 55 66 78 46 76 63 67 62 66 76 31 36 49 46 44 64 32 53 41 5c 5c 3d 5c 5c 3d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 Data Ascii: 7d64/! For license information please see embed-policy.min.js.LICENSE.txt /(()=>{var e={5585:(e,t,n)=>{"use strict";n.d(t,{Z:()=>i});var r=n(2729),a=n.n(r)()((function(e){return e[1]}));a.push([e.id,'.gtKUfxFvcgbfv16IFDd2SA\\=\\={display:flex;flex-di
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 6b 58 4c 36 7a 65 6e 41 63 61 6c 62 70 61 6c 6e 6a 56 7a 51 5c 5c 3d 5c 5c 3d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 65 6d 7d 2e 4b 47 6b 58 4c 36 7a 65 6e 41 63 61 6c 62 70 61 6c 6e 6a 56 7a 51 5c 5c 3d 5c 5c 3d 3e 2a 7b 6d 61 72 67 69 6e 3a 30 20 2e 35 65 6d 7d 27 2c 22 22 5d 29 2c 61 2e 6c 6f 63 61 6c 73 3d 7b 72 6f 6f 74 3a 22 67 74 4b 55 66 78 46 76 63 67 62 66 76 31 36 49 46 44 64 32 53 41 3d 3d 22 2c 73 68 61 64 6f 77 42 6f 78 3a 22 56 4e 53 48 49 71 55 62 4a 66 75 77 54 35 64 58 6e 65 33 71 35 77 3d 3d 22 2c 74 69 74 6c 65 3a 22 4b 59 50 32 62 4a 32 52 66 49 6d 2b 38 71 63 50 6a 69 41 55 44 77 3d 3d 22 2c 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: kXL6zenAcalbpalnjVzQ\\=\\={display:flex;justify-content:center;margin-top:1.25em}.KGkXL6zenAcalbpalnjVzQ\\=\\=>*{margin:0 .5em}',""]),a.locals={root:"gtKUfxFvcgbfv16IFDd2SA==",shadowBox:"VNSHIqUbJfuwT5dXne3q5w==",title:"KYP2bJ2RfIm+8qcPjiAUDw==",content:"
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 5c 5c 2b 7a 37 34 76 51 5c 5c 3d 5c 5c 3d 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 34 36 37 32 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 34 36 37 32 66 66 7d 2e 49 4b 5a 71 48 71 66 52 5c 5c 2b 64 48 32 4e 4c 59 61 6c 79 35 31 70 67 5c 5c 3d 5c 5c 3d 2e 4e 47 54 37 61 68 63 43 58 71 30 30 58 67 77 6f 64 4d 42 4b 6d 41 5c 5c 3d 5c 5c 3d 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 63 39 39 39 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 63 39 39 39 7d 2e 49 4b 5a 71 48 71 66 52 5c 5c 2b 64 48 32 4e 4c 59 61 6c 79 35 31 70 67 5c 5c 3d 5c 5c 3d 2e 63 42 32 30 65 75 44 59 46 5a 43 51 64 35 78 55 52 31 37 45 34 67 5c 5c 3d 5c 5c 3d 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 64 37 34 37 34 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 64 37 34 37 Data Ascii: \\+z74vQ\\=\\={border-color:#4672ff;background:#4672ff}.IKZqHqfR\\+dH2NLYaly51pg\\=\\=.NGT7ahcCXq00XgwodMBKmA\\=\\={border-color:#00c999;background:#00c999}.IKZqHqfR\\+dH2NLYaly51pg\\=\\=.cB20euDYFZCQd5xUR17E4g\\=\\={border-color:#ed7474;background:#ed747
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 2c 20 23 66 32 66 34 66 62 2c 20 23 66 65 66 66 66 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 7d 2e 6a 39 2d 72 76 78 4b 32 66 4c 62 48 37 6b 51 44 43 6d 72 5c 5c 2b 78 67 5c 5c 3d 5c 5c 3d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 4f 7a 58 49 33 7a 4f 6f 76 53 49 43 63 6c 39 62 45 72 30 6f 71 41 5c 5c 3d 5c 5c 3d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 22 2c 22 22 5d 29 2c 75 2e 6c 6f 63 61 6c 73 3d 7b 72 6f 6f 74 3a 22 76 72 68 74 5a 2d 48 75 62 74 69 6a 4a 7a 4d 32 46 61 4f 37 4d 41 3d 3d 22 2c 64 69 73 61 62 6c 65 64 3a 22 42 63 58 65 54 42 49 53 67 39 77 47 30 64 Data Ascii: , #f2f4fb, #feffff);background-repeat:no-repeat;background-position:center}.j9-rvxK2fLbH7kQDCmr\\+xg\\=\\={display:none}.OzXI3zOovSICcl9bEr0oqA\\=\\={display:flex;align-items:center}",""]),u.locals={root:"vrhtZ-HubtijJzM2FaO7MA==",disabled:"BcXeTBISg9wG0d
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 61 73 68 61 72 72 61 79 3a 31 2c 31 35 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 7d 35 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 39 30 2c 31 35 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 33 35 7d 31 30 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 39 30 2c 31 35 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 32 34 7d 7d 22 2c 22 22 5d 29 2c 61 2e 6c 6f 63 61 6c 73 3d 7b 72 6f 6f 74 3a 22 68 57 74 38 6b 47 4b 74 44 38 56 44 6e 67 34 67 67 4e 44 50 5a 51 3d 3d 22 2c 73 70 69 6e 6e 65 72 3a 22 5f 30 39 5a 73 7a 72 68 39 67 56 61 72 78 4e 42 32 32 46 6e 6b 4b 41 3d 3d 22 2c 72 6f 74 61 74 65 3a 22 5f 39 46 56 78 4f 72 71 68 7a 78 73 71 55 57 74 55 52 6a 55 43 43 51 3d Data Ascii: asharray:1,150;stroke-dashoffset:0}50%{stroke-dasharray:90,150;stroke-dashoffset:-35}100%{stroke-dasharray:90,150;stroke-dashoffset:-124}}",""]),a.locals={root:"hWt8kGKtD8VDng4ggNDPZQ==",spinner:"_09Zszrh9gVarxNB22FnkKA==",rotate:"_9FVxOrqhzxsqUWtURjUCCQ=
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 3d 22 2c 63 68 65 63 6b 65 64 3a 22 45 65 58 30 37 72 64 2b 6e 32 76 56 66 68 49 47 6d 34 47 70 6d 77 3d 3d 22 2c 72 61 64 69 6f 5f 5f 69 6e 6e 65 72 3a 22 55 77 74 31 4e 74 67 61 74 53 30 30 56 38 41 6b 58 56 48 51 74 77 3d 3d 22 7d 3b 63 6f 6e 73 74 20 69 3d 61 7d 2c 31 32 34 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 72 3d 6e 28 35 33 39 37 29 2c 61 3d 6e 2e 6e 28 72 29 2c 69 3d 6e 28 32 37 32 39 29 2c 6f 3d 6e 2e 6e 28 69 29 28 29 28 61 28 29 29 3b 6f 2e 70 75 73 68 28 5b 65 2e 69 64 2c 22 2e 73 74 79 6c 65 73 2d 74 65 78 74 2d 62 34 34 36 36 63 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 73 74 79 6c 65 73 2d 62 75 74 74 6f 6e 2d 65 30 31 Data Ascii: =",checked:"EeX07rd+n2vVfhIGm4Gpmw==",radio__inner:"Uwt1NtgatS00V8AkXVHQtw=="};const i=a},1243:(e,t,n)=>{"use strict";n.d(t,{Z:()=>s});var r=n(5397),a=n.n(r),i=n(2729),o=n.n(i)()(a());o.push([e.id,".styles-text-b4466c{white-space:nowrap}.styles-button-e01
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 20 76 61 72 28 2d 2d 70 72 65 76 69 65 77 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 20 31 30 25 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 29 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 7d 2e 73 74 79 6c 65 73 2d 74 69 74 6c 65 2d 39 33 64 65 33 32 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 69 74 6c 65 2d 63 6f 6c 6f 72 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 74 69 74 6c 65 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 73 74 79 6c 65 73 2d 6c 61 73 74 55 70 64 61 74 65 64 2d 66 61 64 65 Data Ascii: gradient(to top, var(--previewer-background-color) 10%, transparent);opacity:1;transition:opacity .2s ease}.styles-title-93de32{color:var(--title-color);font-family:var(--title-font-family);font-weight:700;text-transform:uppercase}.styles-lastUpdated-fade
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 63 69 74 79 3a 31 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 7d 2e 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 69 74 6c 65 2d 63 6f 6c 6f 72 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 74 69 74 6c 65 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 6c 61 73 74 55 70 64 61 74 65 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 73 6d 61 6c 6c 65 72 7d 2e 62 6f 64 79 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 6f 64 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 Data Ascii: city:1;transition:opacity .2s ease}.title{color:var(--title-color);font-family:var(--title-font-family);font-weight:700;text-transform:uppercase}.lastUpdated{margin-top:1em;font-size:smaller}.body{color:var(--body-color);font-family:var(--body-font-family
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 43 2c 38 42 41 41 67 42 2c 47 41 41 47 2c 34 42 41 41 34 42 2c 43 41 41 43 2c 4b 41 41 4b 2c 32 42 41 41 32 42 2c 43 41 41 43 2c 43 41 41 43 2c 67 44 41 41 6f 42 2c 65 41 41 65 2c 43 41 41 43 2c 73 42 41 41 73 42 2c 43 41 41 43 2c 34 48 41 41 34 48 2c 43 41 41 43 2c 77 44 41 41 30 43 2c 43 41 41 43 2c 75 42 41 41 53 2c 53 41 41 53 2c 43 41 41 43 2c 79 42 41 41 79 42 2c 43 41 41 43 2c 79 42 41 41 57 2c 55 41 41 55 2c 43 41 41 43 2c 69 42 41 41 69 42 22 2c 73 6f 75 72 63 65 73 43 6f 6e 74 65 6e 74 3a 5b 22 2e 72 6f 6f 74 7b 77 69 64 74 68 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 40 6b 65 79 66 72 61 6d 65 73 20 77 61 76 65 7b 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 31 72 65 6d 20 30 7d 31 30 30 25 Data Ascii: C,8BAAgB,GAAG,4BAA4B,CAAC,KAAK,2BAA2B,CAAC,CAAC,gDAAoB,eAAe,CAAC,sBAAsB,CAAC,4HAA4H,CAAC,wDAA0C,CAAC,uBAAS,SAAS,CAAC,yBAAyB,CAAC,yBAAW,UAAU,CAAC,iBAAiB",sourcesContent:[".root{width:100%;background:#fff}@keyframes wave{0%{background-position:-41rem 0}100%
2023-12-28 16:23:16 UTC	1369	IN	Data Raw: 6d 3b 77 69 64 74 68 3a 31 31 2e 31 32 35 72 65 6d 3b 68 65 69 67 68 74 3a 32 2e 33 37 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2f 69 6d 67 2f 67 72 65 79 2d 6c 6f 67 6f 2e 73 76 67 29 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 7d 22 5d 2c 73 6f 75 72 63 65 52 6f 6f 74 3a 22 22 7d 5d 29 2c 64 2e 6c 6f 63 61 6c 73 3d 7b 6c 6f 67 6f 3a 22 73 74 79 6c 65 73 2d 6c 6f 67 6f 2d 33 61 34 37 65 37 22 7d 3b 63 6f 6e 73 74 20 6d 3d 64 7d 2c 35 32 36 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 72 3d 6e 28 35 33 39 37 29 2c 61 3d 6e 2e 6e 28 72 29 2c 69 3d 6e 28 32 37 32 39 29 2c 6f 3d 6e 2e 6e 28 69 29 28 29 28 61 28 29 29 3b 6f 2e 70 75 73 68 Data Ascii: m;width:11.125rem;height:2.375rem;background:url(./img/grey-logo.svg) center no-repeat}"],sourceRoot:""}]),d.locals={logo:"styles-logo-3a47e7"};const m=d},5264:(e,t,n)=>{"use strict";n.d(t,{Z:()=>s});var r=n(5397),a=n.n(r),i=n(2729),o=n.n(i)()(a());o.push

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50745	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:16 UTC	3238	OUT	GET /wave-ico/wavebrowser-48.png HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=t9uQPejPjvoh/9gfwoXTbj7ymyGwlZeqAYkUVrpPAhSxysypwr4TQFoXokF/xrJjql+EgumUU39NMZLuOoPyryHY8E+AFbJVRrp0esUTJr+zIna5KFpNtWfsREQq; AWSALBCORS=t9uQPejPjvoh/9gfwoXTbj7ymyGwlZeqAYkUVrpPAhSxysypwr4TQFoXokF/xrJjql+EgumUU39NMZLuOoPyryHY8E+AFbJVRrp0esUTJr+zIna5KFpNtWfsREQq
2023-12-28 16:23:16 UTC	742	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:16 GMT Content-Type: image/png Content-Length: 3397 Connection: close Set-Cookie: AWSALB=wcxMBlAhNX+9Nv08esLpgJBXbVvvQiPKBp6qVXNGmMKbsPEYsi1IxiYZAdDLH3yQwjepsy+/P0lwxkIZ5snvC4dlgew4DJQlgY5rB8KTvckD+H+EG45MAaKbZ7O/; Expires=Thu, 04 Jan 2024 16:23:16 GMT; Path=/ Set-Cookie: AWSALBCORS=wcxMBlAhNX+9Nv08esLpgJBXbVvvQiPKBp6qVXNGmMKbsPEYsi1IxiYZAdDLH3yQwjepsy+/P0lwxkIZ5snvC4dlgew4DJQlgY5rB8KTvckD+H+EG45MAaKbZ7O/; Expires=Thu, 04 Jan 2024 16:23:16 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:23 GMT ETag: "658d889b-d45" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:16 UTC	3397	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c d2 49 44 41 54 68 81 b5 9a 7b 90 54 e5 99 87 9f f7 9c 9e 6b 4f cf 30 33 cc 15 98 19 86 61 18 6e 2a 32 30 c3 45 cd 60 58 31 e0 0c 98 54 22 44 90 84 94 d1 64 53 29 53 a4 ac 4d 6d b9 21 59 b3 5b b5 6e 76 fd 63 4b 43 82 59 25 62 34 ab 5b 16 62 44 37 b5 06 03 0c d7 12 10 10 05 86 88 c8 c8 65 80 b9 76 f7 b9 7c fb c7 b9 f4 e9 9e ee 19 41 f7 54 9d 3a df d7 7d 4e 9f e7 f7 7b df ef 72 ce d7 a2 94 e2 f3 6e d2 da 51 01 b4 a1 d9 ad d8 5a 13 c2 44 50 65 40 d8 3d 65 00 e4 22 8a 2e 50 c7 11 d5 Data Ascii: PNGIHDR00WpHYsodtEXtSoftwarewww.inkscape.org<IDATh{TkO03an*20E`X1T"DdS)SMm!Y[nvcKCY%b4[bD7ev\|AT:}N{rnQZDPe@=e".P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50746	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:16 UTC	2543	OUT	GET /wave-ico/wavebrowser-48.png HTTP/1.1 Host: convertwithwave.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=wcxMBlAhNX+9Nv08esLpgJBXbVvvQiPKBp6qVXNGmMKbsPEYsi1IxiYZAdDLH3yQwjepsy+/P0lwxkIZ5snvC4dlgew4DJQlgY5rB8KTvckD+H+EG45MAaKbZ7O/; AWSALBCORS=wcxMBlAhNX+9Nv08esLpgJBXbVvvQiPKBp6qVXNGmMKbsPEYsi1IxiYZAdDLH3yQwjepsy+/P0lwxkIZ5snvC4dlgew4DJQlgY5rB8KTvckD+H+EG45MAaKbZ7O/
2023-12-28 16:23:17 UTC	742	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:17 GMT Content-Type: image/png Content-Length: 3397 Connection: close Set-Cookie: AWSALB=zXqkoPVS1Lk/L3U1twleRNfX8xLN3yEmZCk7roMB01jqDvG2m3KNH8YO6Q3t7R9ZItSHy7jzBioK9N7uCyqatKej/iRnibpEcWDm3ASmkdaFxCGKy8NEvaUWeEwD; Expires=Thu, 04 Jan 2024 16:23:17 GMT; Path=/ Set-Cookie: AWSALBCORS=zXqkoPVS1Lk/L3U1twleRNfX8xLN3yEmZCk7roMB01jqDvG2m3KNH8YO6Q3t7R9ZItSHy7jzBioK9N7uCyqatKej/iRnibpEcWDm3ASmkdaFxCGKy8NEvaUWeEwD; Expires=Thu, 04 Jan 2024 16:23:17 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:23 GMT ETag: "658d889b-d45" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:17 UTC	3397	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c d2 49 44 41 54 68 81 b5 9a 7b 90 54 e5 99 87 9f f7 9c 9e 6b 4f cf 30 33 cc 15 98 19 86 61 18 6e 2a 32 30 c3 45 cd 60 58 31 e0 0c 98 54 22 44 90 84 94 d1 64 53 29 53 a4 ac 4d 6d b9 21 59 b3 5b b5 6e 76 fd 63 4b 43 82 59 25 62 34 ab 5b 16 62 44 37 b5 06 03 0c d7 12 10 10 05 86 88 c8 c8 65 80 b9 76 f7 b9 7c fb c7 b9 f4 e9 9e ee 19 41 f7 54 9d 3a df d7 7d 4e 9f e7 f7 7b df ef 72 ce d7 a2 94 e2 f3 6e d2 da 51 01 b4 a1 d9 ad d8 5a 13 c2 44 50 65 40 d8 3d 65 00 e4 22 8a 2e 50 c7 11 d5 Data Ascii: PNGIHDR00WpHYsodtEXtSoftwarewww.inkscape.org<IDATh{TkO03an*20E`X1T"DdS)SMm!Y[nvcKCY%b4[bD7ev\|AT:}N{rnQZDPe@=e".P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50747	104.18.31.234	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:17 UTC	640	OUT	GET /api/v1/snippets/websites/5c7c818e-90ba-4e9e-b259-9c620b055e9c HTTP/1.1 Host: app.termly.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:17 UTC	1064	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:17 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Max-Age: 600 Cache-Control: public, max-age=14400 ETag: W/"76399c7e8d135705d5032f4b5a423d17" X-Request-Id: fc6a5180-6e24-4f6e-83f2-edbf335812ad X-Runtime: 0.010958 Vary: Origin X-Rack-CORS: hit Strict-Transport-Security: max-age=15768000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'unsafe-eval' 'unsafe-inline' https:; img-src 'self' data: https:; font-src data: https:; style-src 'self' blob: 'unsafe-inline' https:; connect-src 'unsafe-eval' 'unsafe-inline' https: wss://sockets.dixa.io wss://api.appcues.net wss://*.firebaseio.com; frame-src 'self' https: X-XSS-Protection: 1; mode=block CF-Cache-Status: HIT Expires: Thu, 28 Dec 2023 20:23:17 GMT Server: cloudflare CF-RAY: 83cb25a039172e6b-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:23:17 UTC	305	IN	Data Raw: 31 62 61 66 0d 0a 7b 22 75 75 69 64 22 3a 22 35 63 37 63 38 31 38 65 2d 39 30 62 61 2d 34 65 39 65 2d 62 32 35 39 2d 39 63 36 32 30 62 30 35 35 65 39 63 22 2c 22 69 64 22 3a 32 34 37 34 39 32 31 2c 22 6e 61 6d 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 76 65 72 74 77 69 74 68 77 61 76 65 2e 63 6f 6d 2f 22 2c 22 6f 76 65 72 5f 63 6f 6e 73 65 6e 74 5f 71 75 6f 74 61 22 3a 66 61 6c 73 65 2c 22 6f 76 65 72 5f 63 6f 6e 73 65 6e 74 5f 71 75 6f 74 61 3f 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 73 65 6e 74 73 5f 63 6f 75 6e 74 22 3a 39 32 34 30 30 2c 22 70 72 6f 76 69 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 22 3a 22 61 6c 6c 6f 77 5f 62 61 6e 6e 65 72 5f 63 75 73 74 6f 6d 5f 6c 61 6e 67 75 61 67 65 73 22 2c 22 74 79 70 65 22 3a 22 62 6f Data Ascii: 1baf{"uuid":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","id":2474921,"name":"https://convertwithwave.com/","over_consent_quota":false,"over_consent_quota?":false,"consents_count":92400,"provisions":[{"id":null,"key":"allow_banner_custom_languages","type":"bo
2023-12-28 16:23:17 UTC	1369	IN	Data Raw: 69 6d 65 22 3a 6e 75 6c 6c 2c 22 75 70 64 61 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 64 65 6c 65 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 70 72 6f 76 69 73 69 6f 6e 5f 73 65 74 22 3a 7b 22 72 65 73 6f 75 72 63 65 5f 69 64 22 3a 22 35 63 37 63 38 31 38 65 2d 39 30 62 61 2d 34 65 39 65 2d 62 32 35 39 2d 39 63 36 32 30 62 30 35 35 65 39 63 22 2c 22 72 65 73 6f 75 72 63 65 5f 74 79 70 65 22 3a 22 77 65 62 73 69 74 65 22 7d 7d 2c 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 22 3a 22 61 6c 6c 6f 77 5f 62 61 6e 6e 65 72 5f 63 75 73 74 6f 6d 5f 73 74 79 6c 69 6e 67 22 2c 22 74 79 70 65 22 3a 22 62 6f 6f 6c 65 61 6e 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 7d 2c 22 64 61 74 61 22 3a 7b 7d 2c 22 63 72 65 61 74 65 5f 74 69 6d Data Ascii: ime":null,"update_time":null,"delete_time":null,"provision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","resource_type":"website"}},{"id":null,"key":"allow_banner_custom_styling","type":"boolean","config":{"value":true},"data":{},"create_tim
2023-12-28 16:23:17 UTC	1369	IN	Data Raw: 39 65 2d 62 32 35 39 2d 39 63 36 32 30 62 30 35 35 65 39 63 22 2c 22 72 65 73 6f 75 72 63 65 5f 74 79 70 65 22 3a 22 77 65 62 73 69 74 65 22 7d 7d 2c 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 22 3a 22 61 6c 6c 6f 77 5f 73 75 62 5f 64 6f 6d 61 69 6e 73 22 2c 22 74 79 70 65 22 3a 22 62 6f 6f 6c 65 61 6e 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 7d 2c 22 64 61 74 61 22 3a 7b 7d 2c 22 63 72 65 61 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 75 70 64 61 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 64 65 6c 65 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 70 72 6f 76 69 73 69 6f 6e 5f 73 65 74 22 3a 7b 22 72 65 73 6f 75 72 63 65 5f 69 64 22 3a 22 35 63 37 63 38 31 38 65 2d 39 30 62 61 2d 34 65 39 65 2d 62 32 35 39 2d 39 63 36 32 Data Ascii: 9e-b259-9c620b055e9c","resource_type":"website"}},{"id":null,"key":"allow_sub_domains","type":"boolean","config":{"value":true},"data":{},"create_time":null,"update_time":null,"delete_time":null,"provision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c62
2023-12-28 16:23:17 UTC	1369	IN	Data Raw: 72 65 6e 74 5f 70 65 72 69 6f 64 5f 73 74 61 72 74 5f 74 69 6d 65 22 3a 22 32 30 32 33 2d 31 32 2d 30 36 54 32 32 3a 34 31 3a 33 33 5a 22 7d 2c 22 63 72 65 61 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 75 70 64 61 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 64 65 6c 65 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 70 72 6f 76 69 73 69 6f 6e 5f 73 65 74 22 3a 7b 22 72 65 73 6f 75 72 63 65 5f 69 64 22 3a 22 35 63 37 63 38 31 38 65 2d 39 30 62 61 2d 34 65 39 65 2d 62 32 35 39 2d 39 63 36 32 30 62 30 35 35 65 39 63 22 2c 22 72 65 73 6f 75 72 63 65 5f 74 79 70 65 22 3a 22 77 65 62 73 69 74 65 22 7d 7d 2c 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 22 3a 22 70 75 62 6c 69 73 68 5f 64 6f 63 75 6d 65 6e 74 22 2c 22 74 79 70 65 22 3a 22 63 6f 75 6e 74 22 2c 22 Data Ascii: rent_period_start_time":"2023-12-06T22:41:33Z"},"create_time":null,"update_time":null,"delete_time":null,"provision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","resource_type":"website"}},{"id":null,"key":"publish_document","type":"count","
2023-12-28 16:23:17 UTC	1369	IN	Data Raw: 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 5f 67 6f 6f 67 6c 65 5f 63 6f 6e 73 65 6e 74 5f 6d 6f 64 65 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 5f 77 69 64 67 65 74 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 5f 63 6f 6e 73 65 6e 74 5f 62 79 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 6c 61 6e 67 75 61 67 65 5f 73 65 74 74 69 6e 67 22 3a 5b 22 65 6e 22 5d 2c 22 73 68 61 72 65 5f 64 61 74 61 5f 74 6f 5f 33 72 64 5f 70 61 72 74 79 22 3a 66 61 6c 73 65 2c 22 72 75 6e 6e 69 6e 67 5f 74 61 72 67 65 74 65 64 5f 61 64 76 65 72 74 69 73 69 6e 67 22 3a 66 61 6c 73 65 2c 22 74 68 65 6d 65 22 3a 7b 22 66 6f 6e 74 5f 66 61 6d 69 6c 79 22 3a 22 52 6f 62 6f 74 6f 2c 20 5c 22 4f 70 65 6e 20 53 61 6e 73 5c 22 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 22 2c Data Ascii: false,"enable_google_consent_mode":false,"enable_widget":false,"enable_consent_by_scroll":true,"language_setting":["en"],"share_data_to_3rd_party":false,"running_targeted_advertising":false,"theme":{"font_family":"Roboto, \"Open Sans\", Arial, Helvetica",
2023-12-28 16:23:17 UTC	1314	IN	Data Raw: 73 65 74 74 69 6e 67 22 3a 5b 22 65 6e 22 5d 2c 22 73 68 61 72 65 5f 64 61 74 61 5f 74 6f 5f 33 72 64 5f 70 61 72 74 79 22 3a 66 61 6c 73 65 2c 22 72 75 6e 6e 69 6e 67 5f 74 61 72 67 65 74 65 64 5f 61 64 76 65 72 74 69 73 69 6e 67 22 3a 66 61 6c 73 65 2c 22 74 68 65 6d 65 22 3a 7b 22 66 6f 6e 74 5f 66 61 6d 69 6c 79 22 3a 22 52 6f 62 6f 74 6f 2c 20 5c 22 4f 70 65 6e 20 53 61 6e 73 5c 22 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 22 2c 22 66 6f 6e 74 5f 73 69 7a 65 22 3a 22 31 30 70 78 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 32 65 33 31 33 33 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 66 66 66 66 66 66 22 2c 22 62 74 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 30 61 61 38 65 38 22 2c 22 62 74 6e 5f 66 6f 6e 74 5f 73 69 7a 65 22 3a 22 31 Data Ascii: setting":["en"],"share_data_to_3rd_party":false,"running_targeted_advertising":false,"theme":{"font_family":"Roboto, \"Open Sans\", Arial, Helvetica","font_size":"10px","color":"#2e3133","background":"#ffffff","btn_background":"#0aa8e8","btn_font_size":"1
2023-12-28 16:23:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50748	104.18.31.234	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:17 UTC	692	OUT	GET /api/v1/snippets/websites/5c7c818e-90ba-4e9e-b259-9c620b055e9c/ip?random-uuid=d59e74f7-0bb3-c468-a8f4-0dba0ad7befd HTTP/1.1 Host: app.termly.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://convertwithwave.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:17 UTC	1065	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:17 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Max-Age: 600 Cache-Control: public, max-age=14400 ETag: W/"2d4c689516444aca2fd9f0841deb799b" X-Request-Id: 27ad41e1-c272-4b19-b636-1522dff173f9 X-Runtime: 0.004211 Vary: Origin X-Rack-CORS: hit Strict-Transport-Security: max-age=15768000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'unsafe-eval' 'unsafe-inline' https:; img-src 'self' data: https:; font-src data: https:; style-src 'self' blob: 'unsafe-inline' https:; connect-src 'unsafe-eval' 'unsafe-inline' https: wss://sockets.dixa.io wss://api.appcues.net wss://*.firebaseio.com; frame-src 'self' https: X-XSS-Protection: 1; mode=block CF-Cache-Status: MISS Expires: Thu, 28 Dec 2023 20:23:17 GMT Server: cloudflare CF-RAY: 83cb25a04e396b4c-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:23:17 UTC	142	IN	Data Raw: 38 38 0d 0a 7b 22 72 65 71 75 65 73 74 22 3a 22 32 31 32 2e 31 30 32 2e 34 31 2e 32 22 2c 22 69 70 22 3a 22 32 31 32 2e 31 30 32 2e 34 31 2e 32 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 32 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 5f 63 6f 64 65 22 3a 22 4e 41 22 2c 22 73 74 61 74 65 22 3a 22 54 65 78 61 73 22 7d 0d 0a Data Ascii: 88{"request":"212.102.41.2","ip":"212.102.41.2","country_code2":"US","country_name":"United States","continent_code":"NA","state":"Texas"}
2023-12-28 16:23:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50749	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:17 UTC	3238	OUT	GET /wave-ico/wavebrowser-32.png HTTP/1.1 Host: convertwithwave.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://convertwithwave.com/?src=d-cp20278471669&ob=obgcobedobem&dvc=c&k=file%20converter&crt=677032990697&adp=&plc=www.mediafire.com&tgt=&sl=&cpd=20278471669&iid=wav-cvt&gclid=EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=zXqkoPVS1Lk/L3U1twleRNfX8xLN3yEmZCk7roMB01jqDvG2m3KNH8YO6Q3t7R9ZItSHy7jzBioK9N7uCyqatKej/iRnibpEcWDm3ASmkdaFxCGKy8NEvaUWeEwD; AWSALBCORS=zXqkoPVS1Lk/L3U1twleRNfX8xLN3yEmZCk7roMB01jqDvG2m3KNH8YO6Q3t7R9ZItSHy7jzBioK9N7uCyqatKej/iRnibpEcWDm3ASmkdaFxCGKy8NEvaUWeEwD
2023-12-28 16:23:17 UTC	742	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:17 GMT Content-Type: image/png Content-Length: 2024 Connection: close Set-Cookie: AWSALB=oDaTf+6LyNgfscZLhP1D0tuAKF5hixJggFarm85ozkYEZWzwG99ewhj1y9cIcE8Y4q4fV9JYmuAk6gFk2EzTRWRoEiUAvxIj+EIUIFv8ZL4QF4O8NOdVatvAcivS; Expires=Thu, 04 Jan 2024 16:23:17 GMT; Path=/ Set-Cookie: AWSALBCORS=oDaTf+6LyNgfscZLhP1D0tuAKF5hixJggFarm85ozkYEZWzwG99ewhj1y9cIcE8Y4q4fV9JYmuAk6gFk2EzTRWRoEiUAvxIj+EIUIFv8ZL4QF4O8NOdVatvAcivS; Expires=Thu, 04 Jan 2024 16:23:17 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:23 GMT ETag: "658d889b-7e8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:17 UTC	2024	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 07 75 49 44 41 54 58 85 9d 97 6b 6c 14 d7 15 c7 7f f7 ee ec fa ed f5 13 6c 63 63 fc a0 18 b0 79 a8 06 f9 01 45 40 03 89 43 63 51 1a 44 29 49 95 26 ad 54 b5 89 54 9a 94 a6 15 29 a1 0f 35 52 a0 1f fa a5 89 22 55 a1 6d 5a 41 08 05 8a 2b 54 0a 2d 0d 89 09 09 31 01 42 a0 38 26 8e 30 98 87 31 78 6d cf ee 3c 4e 3f cc ae 3d 6b 9b 04 75 a4 a3 33 b3 8f fb fb 9f ff 3d 33 73 af 12 11 ee e5 50 8b 5a b3 70 65 15 c2 32 60 2e 30 0d 54 8e f7 ad f4 03 5d a0 4e 21 1c c6 e0 80 bc b9 77 e0 9e c6 fd 3c Data Ascii: PNGIHDR szzpHYsodtEXtSoftwarewww.inkscape.org<uIDATXkllccyE@CcQD)I&TT)5R"UmZA+T-1B8&01xm<N?=ku3=3sPZpe2`.0T]N!w<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50751	216.239.34.181	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:18 UTC	1798	OUT	POST /g/collect?v=2&tid=G-ZDEB536PB9&gtm=45je3bt0v881998293&_p=1703780590808&gcd=11l1l1l1l1&dma=0&cid=504497915.1703780592&ul=en-us&sr=1280x1024&lps=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&_eu=AEA&_s=2&uid=af779c44-13ad-47a2-ad3d-9786811ff14d&sid=1703780591&sct=1&seg=0&dl=https%3A%2F%2Fconvertwithwave.com%2F%3Fsrc%3Dd-cp20278471669%26ob%3Dobgcobedobem%26dvc%3Dc%26k%3Dfile%2520converter%26crt%3D677032990697%26adp%3D%26plc%3Dwww.mediafire.com%26tgt%3D%26sl%3D%26cpd%3D20278471669%26iid%3Dwav-cvt%26gclid%3DEAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE&dr=https%3A%2F%2Fwww.mediafire.com%2F&dt=Wave%20Browser%20-%20Efficient%2C%20Intuitive%20and%20Personal%20Web%20Browser&en=scroll&ep.transport_type=beacon&ep.transaction_id=af779c44-13ad-47a2-ad3d-9786811ff14d&epn.percent_scrolled=90&tfd=11147 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://convertwithwave.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://convertwithwave.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-28 16:23:18 UTC	453	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://convertwithwave.com Date: Thu, 28 Dec 2023 16:23:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50750	3.210.148.248	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:18 UTC	2543	OUT	GET /wave-ico/wavebrowser-32.png HTTP/1.1 Host: convertwithwave.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: data=%7B%22UserId%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22TrackingId%22%3A%22va6g28ar%22%2C%22Keyword%22%3A%22file%2520converter%22%2C%22UserClass%22%3A%2220231228%22%2C%22GGLNT%22%3Anull%2C%22GCLID%22%3A%22EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE%22%2C%22AdProvider%22%3A%22appfocus1%22%2C%22Source%22%3A%22d-cp20278471669%22%2C%22Implementation%22%3A%22wav-cvt%22%7D; startDownload=false; cacheUrl=; stubStartedUrl=; pgflags=%5B%22stub153%3Aon%22%2C%22v161X%3Aon%22%2C%22capNotif%3Aon%22%2C%22sponsoredGroup%3Aon%22%2C%22left-logo-left%3Aon%22%2C%22optimize%3Aon%22%2C%22extnotf2%3Actrl%22%2C%22bigStub%3Aon%22%2C%22t2-92%3Aon%22%2C%22weatherWdg%3Abottom%22%2C%22wavthemes%3Aon%22%2C%22vuentp%3Aon%22%2C%22wavwbnui%3Aon%22%2C%22oldschoolcvt%3Aon%22%2C%22stylizedcsteps%3Aon%22%2C%22caplist%3Amerch%22%5D; ph_phc_lvJBnb93LxbaE424lyRhUJLfNPBmUerRpUvupfNk7fz_posthog=%7B%22distinct_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24device_id%22%3A%22018cb13c-a081-7d0f-8e69-8d1318c9d3f7%22%2C%22%24user_state%22%3A%22identified%22%2C%22%24sesid%22%3A%5B1703780590832%2C%22018cb13c-a085-702d-9b57-bdf18d002bcd%22%2C1703780589701%5D%2C%22%24session_recording_enabled_server_side%22%3Afalse%2C%22%24autocapture_disabled_server_side%22%3Afalse%2C%22%24active_feature_flags%22%3A%5B%5D%2C%22%24enabled_feature_flags%22%3A%7B%7D%2C%22%24feature_flag_payloads%22%3A%7B%7D%2C%22%24user_id%22%3A%22af779c44-13ad-47a2-ad3d-9786811ff14d%22%2C%22%24stored_person_properties%22%3A%7B%22tid%22%3A%22va6g28ar%22%2C%22implementationId%22%3A%22wav-cvt%22%2C%22source%22%3A%22d-cp20278471669%22%2C%22trafficSource%22%3A%22appfocus1%22%2C%22userClass%22%3A%2220231228%22%7D%7D; _gcl_aw=GCL.1703780592.EAIaIQobChMIuqq6ncWygwMVaOHjBx2MewoQEAEYASAAEgJFpfD_BwE; _gcl_au=1.1.59812670.1703780592; _ga=GA1.1.504497915.1703780592; _ga_ZDEB536PB9=GS1.1.1703780591.1.0.1703780592.59.0.0; AWSALB=oDaTf+6LyNgfscZLhP1D0tuAKF5hixJggFarm85ozkYEZWzwG99ewhj1y9cIcE8Y4q4fV9JYmuAk6gFk2EzTRWRoEiUAvxIj+EIUIFv8ZL4QF4O8NOdVatvAcivS; AWSALBCORS=oDaTf+6LyNgfscZLhP1D0tuAKF5hixJggFarm85ozkYEZWzwG99ewhj1y9cIcE8Y4q4fV9JYmuAk6gFk2EzTRWRoEiUAvxIj+EIUIFv8ZL4QF4O8NOdVatvAcivS
2023-12-28 16:23:18 UTC	742	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:18 GMT Content-Type: image/png Content-Length: 2024 Connection: close Set-Cookie: AWSALB=3WY6szjWPY0CM4VkVKEAKdygbFOEHessbHX9dJOJXbbmtreU0RvKsMs2dXHhQ7PdUDdZ8a+GFYlLfqeJ0AjUPsQ/lTtm8rd4tqY3ufpZR5vVtMr0Ha2UGUMwj2tm; Expires=Thu, 04 Jan 2024 16:23:18 GMT; Path=/ Set-Cookie: AWSALBCORS=3WY6szjWPY0CM4VkVKEAKdygbFOEHessbHX9dJOJXbbmtreU0RvKsMs2dXHhQ7PdUDdZ8a+GFYlLfqeJ0AjUPsQ/lTtm8rd4tqY3ufpZR5vVtMr0Ha2UGUMwj2tm; Expires=Thu, 04 Jan 2024 16:23:18 GMT; Path=/; SameSite=None; Secure Server: nginx/1.22.1 Last-Modified: Thu, 28 Dec 2023 14:39:23 GMT ETag: "658d889b-7e8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Accept-Ranges: bytes
2023-12-28 16:23:18 UTC	2024	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 07 75 49 44 41 54 58 85 9d 97 6b 6c 14 d7 15 c7 7f f7 ee ec fa ed f5 13 6c 63 63 fc a0 18 b0 79 a8 06 f9 01 45 40 03 89 43 63 51 1a 44 29 49 95 26 ad 54 b5 89 54 9a 94 a6 15 29 a1 0f 35 52 a0 1f fa a5 89 22 55 a1 6d 5a 41 08 05 8a 2b 54 0a 2d 0d 89 09 09 31 01 42 a0 38 26 8e 30 98 87 31 78 6d cf ee 3c 4e 3f cc ae 3d 6b 9b 04 75 a4 a3 33 b3 8f fb fb 9f ff 3d 33 73 af 12 11 ee e5 50 8b 5a b3 70 65 15 c2 32 60 2e 30 0d 54 8e f7 ad f4 03 5d a0 4e 21 1c c6 e0 80 bc b9 77 e0 9e c6 fd 3c Data Ascii: PNGIHDR szzpHYsodtEXtSoftwarewww.inkscape.org<uIDATXkllccyE@CcQD)I&TT)5R"UmZA+T-1B8&01xm<N?=ku3=3sPZpe2`.0T]N!w<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50752	104.18.30.234	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:18 UTC	398	OUT	GET /api/v1/snippets/websites/5c7c818e-90ba-4e9e-b259-9c620b055e9c HTTP/1.1 Host: app.termly.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:18 UTC	955	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:18 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=14400 ETag: W/"76399c7e8d135705d5032f4b5a423d17" X-Request-Id: ab4778de-e488-424f-8286-e06928a07a8d X-Runtime: 0.006775 Vary: Origin X-Rack-CORS: miss; no-origin Strict-Transport-Security: max-age=15768000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'unsafe-eval' 'unsafe-inline' https:; img-src 'self' data: https:; font-src data: https:; style-src 'self' blob: 'unsafe-inline' https:; connect-src 'unsafe-eval' 'unsafe-inline' https: wss://sockets.dixa.io wss://api.appcues.net wss://*.firebaseio.com; frame-src 'self' https: X-XSS-Protection: 1; mode=block CF-Cache-Status: REVALIDATED Expires: Thu, 28 Dec 2023 20:23:18 GMT Server: cloudflare CF-RAY: 83cb25a4ea954671-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:23:18 UTC	414	IN	Data Raw: 31 62 61 66 0d 0a 7b 22 75 75 69 64 22 3a 22 35 63 37 63 38 31 38 65 2d 39 30 62 61 2d 34 65 39 65 2d 62 32 35 39 2d 39 63 36 32 30 62 30 35 35 65 39 63 22 2c 22 69 64 22 3a 32 34 37 34 39 32 31 2c 22 6e 61 6d 65 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 76 65 72 74 77 69 74 68 77 61 76 65 2e 63 6f 6d 2f 22 2c 22 6f 76 65 72 5f 63 6f 6e 73 65 6e 74 5f 71 75 6f 74 61 22 3a 66 61 6c 73 65 2c 22 6f 76 65 72 5f 63 6f 6e 73 65 6e 74 5f 71 75 6f 74 61 3f 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 73 65 6e 74 73 5f 63 6f 75 6e 74 22 3a 39 32 34 30 30 2c 22 70 72 6f 76 69 73 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 22 3a 22 61 6c 6c 6f 77 5f 62 61 6e 6e 65 72 5f 63 75 73 74 6f 6d 5f 6c 61 6e 67 75 61 67 65 73 22 2c 22 74 79 70 65 22 3a 22 62 6f Data Ascii: 1baf{"uuid":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","id":2474921,"name":"https://convertwithwave.com/","over_consent_quota":false,"over_consent_quota?":false,"consents_count":92400,"provisions":[{"id":null,"key":"allow_banner_custom_languages","type":"bo
2023-12-28 16:23:18 UTC	1369	IN	Data Raw: 62 30 35 35 65 39 63 22 2c 22 72 65 73 6f 75 72 63 65 5f 74 79 70 65 22 3a 22 77 65 62 73 69 74 65 22 7d 7d 2c 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 22 3a 22 61 6c 6c 6f 77 5f 62 61 6e 6e 65 72 5f 63 75 73 74 6f 6d 5f 73 74 79 6c 69 6e 67 22 2c 22 74 79 70 65 22 3a 22 62 6f 6f 6c 65 61 6e 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 7d 2c 22 64 61 74 61 22 3a 7b 7d 2c 22 63 72 65 61 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 75 70 64 61 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 64 65 6c 65 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 70 72 6f 76 69 73 69 6f 6e 5f 73 65 74 22 3a 7b 22 72 65 73 6f 75 72 63 65 5f 69 64 22 3a 22 35 63 37 63 38 31 38 65 2d 39 30 62 61 2d 34 65 39 65 2d 62 32 35 39 2d 39 63 36 32 30 62 30 Data Ascii: b055e9c","resource_type":"website"}},{"id":null,"key":"allow_banner_custom_styling","type":"boolean","config":{"value":true},"data":{},"create_time":null,"update_time":null,"delete_time":null,"provision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c620b0
2023-12-28 16:23:18 UTC	1369	IN	Data Raw: 69 67 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 7d 2c 22 64 61 74 61 22 3a 7b 7d 2c 22 63 72 65 61 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 75 70 64 61 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 64 65 6c 65 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 70 72 6f 76 69 73 69 6f 6e 5f 73 65 74 22 3a 7b 22 72 65 73 6f 75 72 63 65 5f 69 64 22 3a 22 35 63 37 63 38 31 38 65 2d 39 30 62 61 2d 34 65 39 65 2d 62 32 35 39 2d 39 63 36 32 30 62 30 35 35 65 39 63 22 2c 22 72 65 73 6f 75 72 63 65 5f 74 79 70 65 22 3a 22 77 65 62 73 69 74 65 22 7d 7d 2c 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 22 3a 22 61 6c 6c 6f 77 65 64 5f 70 6f 6c 69 63 79 5f 65 6d 62 65 64 5f 6f 70 74 69 6f 6e 73 22 2c 22 74 79 70 65 22 3a 22 6c 69 73 74 22 2c 22 63 6f 6e 66 69 67 22 3a Data Ascii: ig":{"value":true},"data":{},"create_time":null,"update_time":null,"delete_time":null,"provision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","resource_type":"website"}},{"id":null,"key":"allowed_policy_embed_options","type":"list","config":
2023-12-28 16:23:18 UTC	1369	IN	Data Raw: 76 69 73 69 6f 6e 5f 73 65 74 22 3a 7b 22 72 65 73 6f 75 72 63 65 5f 69 64 22 3a 22 35 63 37 63 38 31 38 65 2d 39 30 62 61 2d 34 65 39 65 2d 62 32 35 39 2d 39 63 36 32 30 62 30 35 35 65 39 63 22 2c 22 72 65 73 6f 75 72 63 65 5f 74 79 70 65 22 3a 22 77 65 62 73 69 74 65 22 7d 7d 2c 7b 22 69 64 22 3a 6e 75 6c 6c 2c 22 6b 65 79 22 3a 22 70 75 62 6c 69 73 68 5f 64 6f 63 75 6d 65 6e 74 22 2c 22 74 79 70 65 22 3a 22 63 6f 75 6e 74 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 6f 70 65 72 61 74 69 6f 6e 5f 63 6f 75 6e 74 22 3a 2d 31 7d 2c 22 64 61 74 61 22 3a 7b 7d 2c 22 63 72 65 61 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 75 70 64 61 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 64 65 6c 65 74 65 5f 74 69 6d 65 22 3a 6e 75 6c 6c 2c 22 70 72 6f 76 69 73 69 6f 6e 5f Data Ascii: vision_set":{"resource_id":"5c7c818e-90ba-4e9e-b259-9c620b055e9c","resource_type":"website"}},{"id":null,"key":"publish_document","type":"count","config":{"operation_count":-1},"data":{},"create_time":null,"update_time":null,"delete_time":null,"provision_
2023-12-28 16:23:18 UTC	1369	IN	Data Raw: 69 6e 67 22 3a 5b 22 65 6e 22 5d 2c 22 73 68 61 72 65 5f 64 61 74 61 5f 74 6f 5f 33 72 64 5f 70 61 72 74 79 22 3a 66 61 6c 73 65 2c 22 72 75 6e 6e 69 6e 67 5f 74 61 72 67 65 74 65 64 5f 61 64 76 65 72 74 69 73 69 6e 67 22 3a 66 61 6c 73 65 2c 22 74 68 65 6d 65 22 3a 7b 22 66 6f 6e 74 5f 66 61 6d 69 6c 79 22 3a 22 52 6f 62 6f 74 6f 2c 20 5c 22 4f 70 65 6e 20 53 61 6e 73 5c 22 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 22 2c 22 66 6f 6e 74 5f 73 69 7a 65 22 3a 22 31 30 70 78 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 32 65 33 31 33 33 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 66 66 66 66 66 66 22 2c 22 62 74 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 30 61 61 38 65 38 22 2c 22 62 74 6e 5f 66 6f 6e 74 5f 73 69 7a 65 22 3a 22 31 34 70 78 22 Data Ascii: ing":["en"],"share_data_to_3rd_party":false,"running_targeted_advertising":false,"theme":{"font_family":"Roboto, \"Open Sans\", Arial, Helvetica","font_size":"10px","color":"#2e3133","background":"#ffffff","btn_background":"#0aa8e8","btn_font_size":"14px"
2023-12-28 16:23:18 UTC	1205	IN	Data Raw: 52 6f 62 6f 74 6f 2c 20 5c 22 4f 70 65 6e 20 53 61 6e 73 5c 22 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 22 2c 22 66 6f 6e 74 5f 73 69 7a 65 22 3a 22 31 30 70 78 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 32 65 33 31 33 33 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 66 66 66 66 66 66 22 2c 22 62 74 6e 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 30 61 61 38 65 38 22 2c 22 62 74 6e 5f 66 6f 6e 74 5f 73 69 7a 65 22 3a 22 31 34 70 78 22 2c 22 62 74 6e 5f 66 6f 6e 74 5f 77 65 69 67 68 74 22 3a 22 62 6f 6c 64 22 2c 22 62 74 6e 5f 74 65 78 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 7d 7d 5d 2c 22 64 6f 63 75 6d 65 6e 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 22 2c 22 61 63 63 65 70 74 65 64 5f 74 Data Ascii: Roboto, \"Open Sans\", Arial, Helvetica","font_size":"10px","color":"#2e3133","background":"#ffffff","btn_background":"#0aa8e8","btn_font_size":"14px","btn_font_weight":"bold","btn_text_color":"#ffffff"}}],"documents":[{"name":"Privacy Policy","accepted_t
2023-12-28 16:23:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	50753	104.18.30.234	443	3752	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-28 16:23:18 UTC	450	OUT	GET /api/v1/snippets/websites/5c7c818e-90ba-4e9e-b259-9c620b055e9c/ip?random-uuid=d59e74f7-0bb3-c468-a8f4-0dba0ad7befd HTTP/1.1 Host: app.termly.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-28 16:23:18 UTC	948	IN	HTTP/1.1 200 OK Date: Thu, 28 Dec 2023 16:23:18 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=14400 ETag: W/"2d4c689516444aca2fd9f0841deb799b" X-Request-Id: 81b0255f-93f7-40e5-a55a-c041397d5c19 X-Runtime: 0.007873 Vary: Origin X-Rack-CORS: miss; no-origin Strict-Transport-Security: max-age=15768000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'unsafe-eval' 'unsafe-inline' https:; img-src 'self' data: https:; font-src data: https:; style-src 'self' blob: 'unsafe-inline' https:; connect-src 'unsafe-eval' 'unsafe-inline' https: wss://sockets.dixa.io wss://api.appcues.net wss://*.firebaseio.com; frame-src 'self' https: X-XSS-Protection: 1; mode=block CF-Cache-Status: MISS Expires: Thu, 28 Dec 2023 20:23:18 GMT Server: cloudflare CF-RAY: 83cb25a4ef8deac5-DFW alt-svc: h3=":443"; ma=86400
2023-12-28 16:23:18 UTC	142	IN	Data Raw: 38 38 0d 0a 7b 22 72 65 71 75 65 73 74 22 3a 22 32 31 32 2e 31 30 32 2e 34 31 2e 32 22 2c 22 69 70 22 3a 22 32 31 32 2e 31 30 32 2e 34 31 2e 32 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 32 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 5f 63 6f 64 65 22 3a 22 4e 41 22 2c 22 73 74 61 74 65 22 3a 22 54 65 78 61 73 22 7d 0d 0a Data Ascii: 88{"request":"212.102.41.2","ip":"212.102.41.2","country_code2":"US","country_name":"United States","continent_code":"NA","state":"Texas"}
2023-12-28 16:23:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	17:21:50
Start date:	28/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:21:54
Start date:	28/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:21:57
Start date:	28/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "http://classicshell.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	17:22:24
Start date:	28/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5708 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	17:22:24
Start date:	28/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4644 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	17:22:58
Start date:	28/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8872 --field-trial-handle=2228,i,13565424088930177313,17425791509390398374,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://classicshell.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\Downloads\Unconfirmed 154727.crdownload

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Windows Analysis Report
http://classicshell.mediafire.com/file/d5llbbm8wu92jg8/ClassicShellSetup_4_3_1.exe